+ :::column-end:::
+:::row-end:::
+:::row:::
+ :::column span="1":::
-### Sign in
+### Connect your school's account
+ :::column-end:::
+ :::column span="3":::
1. Select how you want to sign in
1. (Recommended) To enable student device to automatically connect and authenticate to Microsoft Entra ID, and management services like Microsoft Intune, select **Sign-in**. Then go to step 3
- 1. To complete setup without signing in, select **Continue without account**. Student devices won't connect to your school's cloud services and their management will be more difficult later. Continue to [Wireless network](#wireless-network)
+ 1. To complete setup without signing in, select **Continue without account**. Student devices won't connect to your school's cloud services and their management will be more difficult later. Continue to [Select a wireless network](#select-a-wireless-network)
1. In the new window, select the account you want to use throughout setup.
- 
-
To add an account not listed:
1. Select **Work or school account** > **Continue**.
1. Type in the account username and select **Next**.
1. Verify the user account and password, if prompted.
1. Select **Accept** to allow Set up School PCs to access your account throughout setup
-1. When your account name appears on the page, select **Next**
+1. When your account name appears on the page, select **Next**
+ :::column-end:::
+:::row-end:::
- 
-### Wireless network
+:::row:::
+ :::column span="1":::
+#### Select a wireless network
+
+ :::column-end:::
+ :::column span="3":::
Add and save the wireless network profile that you want student devices to connect to. Only skip Wi-Fi setup if you have an Ethernet connection.
-Select your organization's Wi-Fi network from the list of available wireless networks, or select **Add a wireless network** to manually configure it. Then select **Next**
+Select your organization's Wi-Fi network from the list of available wireless networks, or select **Add a wireless network** to manually configure it. Then select **Next**.
+ :::column-end:::
+:::row-end:::
- 
-
-### Device names
-
-Create a name to add as a prefix to each device. This name helps you recognize and manage this group of devices in Intune.
-
-To make sure all device names are unique, Set up School PCs automatically appends `_%SERIAL%` to the name. For example, if you add *MATH4* as the prefix, the device names appear as *MATH4* followed by the device serial number.
-
-To keep the default name for your devices, select **Continue with existing names**.
-
- 
-
-### Settings
+:::row:::
+ :::column span="1":::
+#### Configure device settings
+ :::column-end:::
+ :::column span="3":::
Select more settings to include in the provisioning package. To begin, select the operating system on your student PCs.
-
-
Setting selections vary based on the OS version you select.
-
-
The following table describes each setting and lists the applicable Windows 10 versions. To find out if a setting is available in your version of Windows 10, look for an *X* in the setting row and in the version column.
| Setting | What happens if I select it? | Note |
@@ -170,74 +174,113 @@ The following table describes each setting and lists the applicable Windows 10 v
| Enable Autopilot Reset | Lets you remotely reset a student's PC from the lock screen, apply the device's original settings, and enroll it in device management (Microsoft Entra ID and MDM). | WinRE must be enabled on the device. |
| Lock screen background | Change the default screen lock background to a custom image. | Select **Browse** to search for an image file on your computer. Accepted image formats are jpg, jpeg, and png. |
-After you've made your selections, select **Next**.
+After you've made your selections, select **Next**.
+ :::column-end:::
+:::row-end:::
-### Time zone
+:::row:::
+ :::column span="1":::
+#### Name devices
+ :::column-end:::
+ :::column span="3":::
+Create a name to add as a prefix to each device. This name helps you recognize and manage this group of devices in Intune.
+
+To make sure all device names are unique, Set up School PCs automatically appends `_%SERIAL%` to the name. For example, if you add *MATH4* as the prefix, the device names appear as *MATH4* followed by the device serial number.
+
+To keep the default name for your devices, select **Continue with existing names**.
+ :::column-end:::
+:::row-end:::
+
+
+:::row:::
+ :::column span="1":::
+#### Select time zone
+ :::column-end:::
+ :::column span="3":::
> [!WARNING]
> If you are using the Autounattend.xml file to reimage your school PCs, do not specify a time zone in the file. If you set the time zone in the file *and* in this app, you will encounter an error.
-Choose the time zone where your school's devices are used. This setting ensures that all PCs are provisioned in the same time zone. When you're done, select **Next**.
+Choose the time zone where your school's devices are used. This setting ensures that all PCs are provisioned in the same time zone. When you're done, select **Next**.
+ :::column-end:::
+:::row-end:::
-
-### Product key
+:::row:::
+ :::column span="1":::
+#### Change product key
+ :::column-end:::
+ :::column span="3":::
+Optionally, type in a 25-digit product key to upgrade or change the edition of Windows on your student devices. If you don't have a product key, select **Continue without change**.
+ :::column-end:::
+:::row-end:::
-Optionally, type in a 25-digit product key to upgrade or change the edition of Windows on your student devices. If you don't have a product key, select **Continue without change**.
-
+:::row:::
+ :::column span="1":::
+#### Set up the Take a Test app
+ :::column-end:::
+ :::column span="3":::
-### Take a Test
-
-Set up the Take a Test app to give online quizzes and high-stakes assessments. During assessments, Windows locks down the student devices so that students can't access anything else on the device.
+ Set up the Take a Test app to give online quizzes and high-stakes assessments. During assessments, Windows locks down the student devices so that students can't access anything else on the device.
1. Select **Yes** to create a Take a Test button on the sign-in screens of your students' devices
- 
-
1. Select from the advanced settings. Available settings include:
- Allow keyboard auto-suggestions: Allows app to suggest words as the student types on the device's keyboard
- Allow teachers to monitor online tests: Enables screen capture in the Take a Test app
1. Enter the URL where the test is hosted. When students log in to the Take a Test account, they'll be able to select or enter the link to view the assessment
-1. Select **Next**
+1. Select **Next**
+column-end:::
+:::row-end:::
-### Personalization
+
+:::row:::
+ :::column span="1":::
+#### Choose backgrounds
+ :::column-end:::
+ :::column span="3":::
Upload custom images to replace the student devices' default desktop and lock screen backgrounds. Select **Browse** to search for an image file on your computer. Accepted image formats are jpg, jpeg, and png.
-If you don't want to upload custom images or use the images that appear in the app, select **Continue without personalization**. This option doesn't apply any customizations, and instead uses the devices' default or preset images.
+If you don't want to upload custom images or use the images that appear in the app, select **Continue without personalization**. This option doesn't apply any customizations, and instead uses the devices' default or preset images.
+ :::column-end:::
+:::row-end:::
-
-
-### Summary
+:::row:::
+ :::column span="1":::
+#### Summary
+ :::column-end:::
+ :::column span="3":::
Review all of the settings for accuracy and completeness
1. To make changes now, select any page along the left side of the window
2. When finished, select **Accept**
-
-
> [!NOTE]
> To make changes to a saved package, you have to start over.
-### Insert USB
+
+ :::column-end:::
+:::row-end:::
+:::row:::
+ :::column span="1":::
+
+#### Save the package
+ :::column-end:::
+ :::column span="3":::
1. Insert a USB drive. The **Save** button lights up when your computer detects the USB
1. Choose your USB drive from the list and select **Save**
-
- 
-
-1. When the package is ready, you see the filename and package expiration date. You can also select **Add a USB** to save the same provisioning package to another USB drive. When you're done, remove the USB drive and select **Next**
-
-
+1. When the package is ready, you see the filename and package expiration date. You can also select **Add a USB** to save the same provisioning package to another USB drive. When you're done, remove the USB drive and select **Next**
+ :::column-end:::
+:::row-end:::
## Run package - Get PCs ready
Complete each step on the **Get PCs ready** page to prepare student devices for set-up. Then select **Next**.
-
-
## Run package - Install package on PC
The provisioning package on your USB drive is named SetupSchoolPCs_<*devicename*>(Expires <*expiration date*>.ppkg. A provisioning package applies settings to Windows without reimaging the device.
@@ -245,20 +288,11 @@ The provisioning package on your USB drive is named SetupSchoolPCs_<*devicename*
When used in context of the Set up School PCs app, the word *package* refers to your provisioning package. The word *provisioning* refers to the act of installing the package on the student device. This section describes how to apply the settings to a device in your school.
> [!IMPORTANT]
-> The devices must have a new or reset Windows image and must not already have been through first-run setup experience (which is referred to as *OOBE*). For instructions about how to reset a devices's image, see [Prepare existing PC account for new setup](use-set-up-school-pcs-app.md#prepare-existing-pc-account-for-new-setup).
+> The devices must have a new or reset Windows image and must not already have been through first-run setup experience (which is referred to as *OOBE*). For instructions about how to reset a devices's image, see [Prepare existing PC account for new setup](#prepare-existing-pc-account-for-new-setup).
1. Start with the student device turned off or with the device on the first-run setup screen. If the device is past the account setup screen, reset the device to start over. To reset the it, go to **Settings** > **Update & security** > **Recovery** > **Reset this PC**
-
- 
-
1. Insert the USB drive. Windows automatically recognizes and installs the package
-
- 
-
1. When you receive the message that it's okay to remove the USB drive, remove it from the device. If there are more devices to set up, insert the USB drive into the next one
-
- 
-
1. If you didn't set up the package with Microsoft Entra join, continue the Windows device setup experience. If you did configure the package with Microsoft Entra join, the device is ready for use and no further configurations are required
If successful, you'll see a setup complete message. The PCs start up on the lock screen, with your school's custom background. Upon first use, students and teachers can connect to your school's network and resources.
diff --git a/education/windows/set-up-school-pcs-provisioning-package.md b/education/windows/suspcs/provisioning-package.md
similarity index 94%
rename from education/windows/set-up-school-pcs-provisioning-package.md
rename to education/windows/suspcs/provisioning-package.md
index 8b49992af0..677b9b7b6f 100644
--- a/education/windows/set-up-school-pcs-provisioning-package.md
+++ b/education/windows/suspcs/provisioning-package.md
@@ -4,6 +4,7 @@ description: Learn about the settings that are configured in the provisioning pa
ms.date: 04/10/2024
ms.topic: reference
appliesto:
+ - ✅ Windows 11
- ✅ Windows 10
---
@@ -28,7 +29,7 @@ For a more detailed look at the policies, see the Windows article [Set up shared
| Policy name | Default value | Description |
|--|--|--|
| Enable Shared PC mode | True | Configures the PCs so they're in shared PC mode. |
-| Set education policies | True | School-optimized settings are applied to the PCs so that they're appropriate for an educational environment. To see all recommended and enabled policies, see [Windows 10 configuration recommendation for education customers](./configure-windows-for-education.md). |
+| Set education policies | True | School-optimized settings are applied to the PCs so that they're appropriate for an educational environment.|
| Account Model | Only guest, Domain-joined only, or Domain-joined and guest | Controls how users can sign in on the PC. Configurable from the Set up School PCs app. Choosing domain-joined enables any user in the domain to sign in. Specifying the guest option adds the Guest option to the sign-in screen and enable anonymous guest access to the PC. |
| Deletion policy | Delete at disk space threshold and inactive threshold | Delete at disk space threshold starts deleting accounts when available disk space falls below the threshold you set for disk level deletion. It stops deleting accounts when the available disk space reaches the threshold you set for disk level caching. Accounts are deleted in order of oldest accessed to most recently accessed. Also deletes accounts if they haven't signed in within the number of days specified by inactive threshold policy. |
| Disk level caching | 50% | Sets 50% of total disk space to be used as the disk space threshold for account caching. |
@@ -120,13 +121,3 @@ Review the table below to estimate your expected provisioning time. A package th
| Default settings + apps | Wi-Fi | 10 to 15 minutes |
| Default settings + remove preinstalled apps (CleanPC) | Wi-Fi | 60 minutes |
| Default settings + other settings (Not CleanPC) | Wi-Fi | 5 minutes |
-
-## Next steps
-
-Learn more about setting up devices with the Set up School PCs app.
-
-- [Microsoft Entra join with Set up School PCs](set-up-school-pcs-azure-ad-join.md)
-- [Set up School PCs technical reference](set-up-school-pcs-technical.md)
-- [Set up Windows 10 devices for education](set-up-windows-10.md)
-
-When you're ready to create and apply your provisioning package, see [Use Set up School PCs app](use-set-up-school-pcs-app.md).
diff --git a/education/windows/set-up-school-pcs-technical.md b/education/windows/suspcs/reference.md
similarity index 92%
rename from education/windows/set-up-school-pcs-technical.md
rename to education/windows/suspcs/reference.md
index 213c75c26f..278344c047 100644
--- a/education/windows/set-up-school-pcs-technical.md
+++ b/education/windows/suspcs/reference.md
@@ -4,6 +4,7 @@ description: Describes the purpose of the Set up School PCs app for Windows 10 d
ms.topic: overview
ms.date: 01/16/2024
appliesto:
+ - ✅ Windows 11
- ✅ Windows 10
---
@@ -12,7 +13,7 @@ appliesto:
The **Set up School PCs** app helps you configure new Windows 10 PCs for school use. The app, which is available for Windows 10 version 1703 and later, configures and saves school-optimized settings, apps, and policies into a single provisioning package. You can then save the package to a USB drive and distribute it to your school PCs.
If your school uses Microsoft Entra ID or Office 365, the Set up
-School PCs app will create a setup file. This file joins the PC to your Microsoft Entra tenant. The app also helps set up PCs for use with or without Internet connectivity.
+School PCs app will create a setup file. This file joins the PC to your Microsoft Entra tenant. The app also helps set up PCs for use with or without Internet connectivity.
## Join devices to Microsoft Entra ID
@@ -46,4 +47,4 @@ The following table describes the Set up School PCs app features and lists each
>[!NOTE]
>You can only use the Set up School PCs app to set up PCs that are connected to Microsoft Entra ID.
-When you're ready to create and apply your provisioning package, see [Use Set up School PCs app](use-set-up-school-pcs-app.md).
+When you're ready to create and apply your provisioning package, see [Use Set up School PCs app](index.md).
diff --git a/education/windows/take-a-test-app-technical.md b/education/windows/take-a-test-app-technical.md
index f7c44f77e7..244868ff4c 100644
--- a/education/windows/take-a-test-app-technical.md
+++ b/education/windows/take-a-test-app-technical.md
@@ -1,7 +1,7 @@
---
title: Take a Test app technical reference
description: List of policies and settings applied by the Take a Test app.
-ms.date: 11/02/2023
+ms.date: 09/06/2024
ms.topic: reference
---
@@ -15,7 +15,7 @@ Assessment vendors can use Take a Test as a platform to lock down the operating
## PC lock-down for assessment
- When the assessment page initiates lock-down, the student's desktop is locked and the app executes above the Windows lock screen. This provides a sandbox that ensures the student can only interact with the Take a Test app. After transitioning to the lock screen, Take a Test applies local MDM policies to further lock down the device. The whole process of going above the lock screen and applying policies is what defines lock-down. The lock-down process is atomic, which means that if any part of the lock-down operation fails, the app won't be above lock and won't have any of the policies applied.
+ When the assessment page initiates lock-down, the student's desktop is locked and the app executes above the Windows lock screen. This provides a sandbox that ensures the student can only interact with the Take a Test app. After transitioning to the lock screen, Take a Test applies local MDM policies to further lock down the device. The whole process of going above the lock screen and applying policies is what defines lock-down. The lock-down process is atomic, which means that if any part of the lock-down operation fails, the app won't be above lock and won't have any of the policies applied.
When running above the lock screen:
@@ -64,7 +64,7 @@ When Take a Test is running, the following functionality is available to student
- Assistive technology that might be running
- Lock screen (not available if student is using a dedicated test account)
- > [!NOTE]
+ > [!NOTE]
> The app will exit if the student signs in to an account from the lock screen.
> Progress made in the test may be lost or invalidated.
- The student can exit the test by pressing Ctrl+Alt+Delete
diff --git a/education/windows/toc.yml b/education/windows/toc.yml
index 62e4c0d85c..1774ae6103 100644
--- a/education/windows/toc.yml
+++ b/education/windows/toc.yml
@@ -16,18 +16,8 @@ items:
href: windows-11-se-settings-list.md
- name: Frequently Asked Questions (FAQ)
href: windows-11-se-faq.yml
- - name: Windows in S Mode
- items:
- - name: Overview
- href: /windows/deployment/s-mode?context=/education/context/context
- - name: Switch Windows edition from S mode
- href: /windows/deployment/windows-10-pro-in-s-mode?context=/education/context/context
- - name: Deploy Win32 apps to S Mode devices
- href: /windows/security/threat-protection/windows-defender-application-control/lob-win32-apps-on-s?context=/education/context/context
- - name: Considerations for shared and guest devices
+ - name: Shared devices and guests access
href: /windows/configuration/shared-devices-concepts?context=/education/context/context
- - name: Windows 10 configuration recommendations for education customers
- href: configure-windows-for-education.md
- name: Take tests and assessments in Windows
href: take-tests-in-windows.md
- name: How-to-guides
@@ -49,7 +39,7 @@ items:
- name: Get and deploy Minecraft Education
href: get-minecraft-for-education.md
- name: Use the Set up School PCs app
- href: use-set-up-school-pcs-app.md
+ href: suspcs/index.md
- name: Upgrade Windows Home to Windows Education on student-owned devices
href: change-home-to-edu.md
- name: Reference
@@ -57,9 +47,9 @@ items:
- name: Set up School PCs
items:
- name: Set up School PCs app technical reference
- href: set-up-school-pcs-technical.md
+ href: suspcs/reference.md
- name: Provisioning package settings
- href: set-up-school-pcs-provisioning-package.md
+ href: suspcs/provisioning-package.md
- name: Take a Test technical reference
href: take-a-test-app-technical.md
- name: Shared PC technical reference
diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md
index 56477ff62e..e5fd11df2b 100644
--- a/education/windows/windows-11-se-overview.md
+++ b/education/windows/windows-11-se-overview.md
@@ -103,7 +103,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
| `DigiExam` | 14.1.0 | `Win32` | `Digiexam` |
| `Digital Secure testing browser` | 15.0.0 | `Win32` | `Digiexam` |
| `Dolphin Guide Connect` | 1.27 | `Win32` | `Dolphin Guide Connect` |
-| `Dragon Professional Individual` | 15.00.100 | `Win32` | `Nuance Communications` |
+| `Dragon Professional Individual` | 16.00.200.121 | `Win32` | `Nuance Communications` |
| `DRC INSIGHT Online Assessments` | 14.0.0.0 | `Store` | `Data recognition Corporation` |
| `Duo from Cisco` | 6.3.0 | `Win32` | `Cisco` |
| `Dyknow` | 7.9.13.7 | `Win32` | `Dyknow` |
@@ -114,7 +114,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
| `ESET Endpoint Security` | 10.1.2046.0 | `Win32` | `ESET` |
| `ESET Remote Administrator Agent` | 10.0.1126.0 | `Win32` | `ESET` |
| `eTests` | 4.0.25 | `Win32` | `CASAS` |
-| `Exam Writepad` | 23.12.10.1200 | `Win32` | `Sheldnet` |
+| `Exam Writepad` | 24.4.1.1200 | `Win32` | `Sheldnet` |
| `FirstVoices Keyboard` | 15.0.270 | `Win32` | `SIL International` |
| `FortiClient` | 7.2.0.4034+ | `Win32` | `Fortinet` |
| `Free NaturalReader` | 16.1.2 | `Win32` | `Natural Soft` |
@@ -128,7 +128,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
| `IMT Lazarus` | 2.86.0 | `Win32` | `IMTLazarus` |
| `Inprint` | 3.7.6 | `Win32` | `Inprint` |
| `Inspiration 10` | 10.11 | `Win32` | `TechEdology Ltd` |
-| `Instashare` | 1.3.13.0 | `Win32` | `Instashare` |
+| `Instashare 2` | 1.3.13.0 | `Win32` | `BenQ` |
| `JAWS for Windows` | 2024.2312.53 | `Win32` | `Freedom Scientific` |
| `Kite Student Portal` | 9.0.0.0 | `Win32` | `Dynamic Learning Maps` |
| `Keyman` | 16.0.142 | `Win32` | `SIL International` |
@@ -170,7 +170,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
| `Remote Help` | 5.0.1311.0 | `Win32` | `Microsoft` |
| `Respondus Lockdown Browser` | 2.1.1.05 | `Win32` | `Respondus` |
| `Safe Exam Browser` | 3.5.0.544 | `Win32` | `Safe Exam Browser` |
-|`SchoolYear` | 3.5.4 | `Win32` |`SchoolYear` |
+|`SchoolYear` | 3.7.10 | `Win32` |`SchoolYear` |
|`School Manager` | 3.6.10-1149 | `Win32` |`Linewize` |
|`Schoolnet Secure Tester` | 2.1.0 | `Win32` |`School Net` |
|`Scratch` | 3.0 | `Win32` |`MIT` |
@@ -188,8 +188,8 @@ The following applications can also run on Windows 11 SE, and can be deployed us
| `Windows SEB` | 3.4.0 | `Win32` | `Illinois Stateboard of Education` |
| `Windows Notepad` | 12.0.78 | `Store` | `Microsoft Corporation` |
| `Zoom` | 5.12.8 (10232) | `Win32` | `Zoom` |
-| `ZoomText Fusion` | 2024.2310.13.400 | `Win32` | `Freedom Scientific` |
-| `ZoomText Magnifier/Reader` | 2024.2312.26.400 | `Win32` | `Freedom Scientific` |
+| `ZoomText Fusion` | 2024.2403.1.400 | `Win32` | `Freedom Scientific` |
+| `ZoomText Magnifier/Reader` | 2024.2402.66.400 | `Win32` | `Freedom Scientific` |
## Add your own applications
diff --git a/includes/configure/tab-intro.md b/includes/configure/tab-intro.md
index c9c293a8c5..31046b2203 100644
--- a/includes/configure/tab-intro.md
+++ b/includes/configure/tab-intro.md
@@ -1,9 +1,9 @@
---
author: paolomatarazzo
ms.author: paoloma
-ms.date: 08/15/2023
+ms.date: 08/20/2024
ms.topic: include
ms.service: windows-client
---
-The following instructions provide details how to configure your devices. Select the option that best suits your needs.
\ No newline at end of file
+The following instructions provide details about how to configure your devices. Select the option that best suits your needs.
\ No newline at end of file
diff --git a/store-for-business/TOC.yml b/store-for-business/TOC.yml
deleted file mode 100644
index 03ce31fa9e..0000000000
--- a/store-for-business/TOC.yml
+++ /dev/null
@@ -1,84 +0,0 @@
-- name: Microsoft Store for Business
- href: index.md
- items:
- - name: What's new in Microsoft Store for Business and Education
- href: whats-new-microsoft-store-business-education.md
- - name: Sign up and get started
- href: sign-up-microsoft-store-for-business-overview.md
- items:
- - name: Microsoft Store for Business and Microsoft Store for Education overview
- href: microsoft-store-for-business-overview.md
- - name: Prerequisites for Microsoft Store for Business and Education
- href: prerequisites-microsoft-store-for-business.md
- - name: Roles and permissions in the Microsoft Store for Business and Education
- href: roles-and-permissions-microsoft-store-for-business.md
- - name: "Settings reference: Microsoft Store for Business and Education"
- href: settings-reference-microsoft-store-for-business.md
- - name: Find and acquire apps
- href: find-and-acquire-apps-overview.md
- items:
- - name: Apps in the Microsoft Store for Business and Education
- href: apps-in-microsoft-store-for-business.md
- - name: Acquire apps
- href: acquire-apps-microsoft-store-for-business.md
- - name: Working with line-of-business apps
- href: working-with-line-of-business-apps.md
- - name: Distribute apps
- href: distribute-apps-to-your-employees-microsoft-store-for-business.md
- items:
- - name: Distribute apps using your private store
- href: distribute-apps-from-your-private-store.md
- - name: Assign apps to employees
- href: assign-apps-to-employees.md
- - name: Distribute apps with a management tool
- href: distribute-apps-with-management-tool.md
- - name: Distribute offline apps
- href: distribute-offline-apps.md
- - name: Manage products and services
- href: manage-apps-microsoft-store-for-business-overview.md
- items:
- - name: App inventory management
- href: app-inventory-management-microsoft-store-for-business.md
- - name: Manage orders
- href: manage-orders-microsoft-store-for-business.md
- - name: Manage access to private store
- href: manage-access-to-private-store.md
- - name: Manage private store settings
- href: manage-private-store-settings.md
- - name: Configure MDM provider
- href: configure-mdm-provider-microsoft-store-for-business.md
- - name: Manage Windows device deployment with Windows Autopilot Deployment
- href: add-profile-to-devices.md
- - name: Microsoft Store for Business and Education PowerShell module - preview
- href: microsoft-store-for-business-education-powershell-module.md
- - name: Working with solution providers
- href: /microsoft-365/commerce/manage-partners
- - name: Billing and payments
- href: billing-payments-overview.md
- items:
- - name: Understand your invoice
- href: billing-understand-your-invoice-msfb.md
- - name: Payment methods
- href: payment-methods.md
- - name: Understand billing profiles
- href: billing-profile.md
- - name: Manage settings in the Microsoft Store for Business and Education
- href: manage-settings-microsoft-store-for-business.md
- items:
- - name: Update account settings
- href: update-microsoft-store-for-business-account-settings.md
- - name: Manage user accounts
- href: manage-users-and-groups-microsoft-store-for-business.md
- - name: Device Guard signing portal
- href: device-guard-signing-portal.md
- items:
- - name: Add unsigned app to code integrity policy
- href: add-unsigned-app-to-code-integrity-policy.md
- - name: Sign code integrity policy with Device Guard signing
- href: sign-code-integrity-policy-with-device-guard-signing.md
- - name: Troubleshoot
- href: troubleshoot-microsoft-store-for-business.md
- - name: Notifications
- href: notifications-microsoft-store-business.md
- - name: Change history
- href: sfb-change-history.md
diff --git a/store-for-business/acquire-apps-microsoft-store-for-business.md b/store-for-business/acquire-apps-microsoft-store-for-business.md
deleted file mode 100644
index a5cee55a8b..0000000000
--- a/store-for-business/acquire-apps-microsoft-store-for-business.md
+++ /dev/null
@@ -1,100 +0,0 @@
----
-title: Acquire apps in Microsoft Store for Business (Windows 10)
-description: As an admin, you can acquire apps from the Microsoft Store for Business for your employees. Some apps are free, and some have a price. For info on app types that are supported, see Apps in the Microsoft Store for Business.
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.reviewer:
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Acquire apps in Microsoft Store for Business and Education
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-> [!NOTE]
-> As of April 14th, 2021, only free apps are available in Microsoft Store for Business and Education. For more information, see [Microsoft Store for Business and Education](index.md).
-
-As an admin, you can acquire apps from the Microsoft Store for Business and Education for your employees. Some apps are free, and some have a price. For info on app types that are supported, see [Apps in the Microsoft Store for Business](apps-in-microsoft-store-for-business.md). The following sections explain some of the settings for shopping.
-
-## App licensing model
-
-The Microsoft Store supports two options to license apps: online and offline. **Online** licensing is the default licensing model. Online licensed apps require users and devices to connect to the Microsoft Store services to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Admins control whether or not offline apps are available in Microsoft Store with an offline app visibility setting.
-
-For more information on the Microsoft Store licensing model, see [licensing model](./apps-in-microsoft-store-for-business.md#licensing-model).
-
-## Payment options
-
-Some apps are free, and some have a price. Apps can be purchased in the Microsoft Store using your credit card. You can enter your credit card information on **Account Information**, or when you purchase an app. Currently, we accept these credit cards:
-
-- VISA
-- MasterCard
-- Discover
-- American Express
-- Japan Commercial Bureau (JCB)
-
-## Organization info
-
-There are a couple of things we need to know when you pay for apps. You can add this info to the **Account information** or **Payments & billing** page before you buy apps. If you haven't provided it, we'll ask when you make a purchase. Either way works. Here's the info you'll need to provide:
-
-- Legal business address
-- Payment option (credit card)
-
-## Allow users to shop
-
-**Allow users to shop** controls the shopping experience in Microsoft Store for Education. When this setting is on, **Purchasers** and **Basic Purchasers** can purchase products and services from Microsoft Store for Education. If your school chooses to closely control how purchases are made, admins can turn off **Allow users to shop**. When the setting is off:
-
-- The shopping experience is not available
-- **Purchasers** and **Basic Purchasers** can't purchase products and services from Microsoft Store for Education
-- Admins can't assign shopping roles to users
-- Products and services previously purchased by **Basic Purchasers** can be managed by admins.
-
-**To manage Allow users to shop setting**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com)
-2. Select **Manage**, and then select **Settings**.
-3. On **Shop**, , under **Shopping behavior**, turn on or turn off **Allow users to shop**.
-
-
-
-## Allow app requests
-
-People in your org can request license for apps that they need, or that others need. When **Allow app requests** is turned on, app requests are sent to org admins. Admins for your tenant will receive an email with the request, and can decide about making the purchase.
-
-**To manage Allow app requests**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com)
-2. Select **Manage**, and then select **Settings**.
-3. On **Shop**, under **Shopping behavior** turn on or turn off **Allow app requests**.
-
-## Acquire apps
-
-**To acquire an app**
-
-1. Sign in to https://businessstore.microsoft.com
-2. Select **Shop for my group**, or use Search to find an app.
-3. Select the app you want to purchase.
-4. On the product description page, choose your license type - either online or offline.
-5. Free apps will be added to **Products & services**. For apps with a price, you can set the quantity you want to buy. Type the quantity and select **Next**.
-6. If you don't have a payment method saved in **Billing & payments**, we will prompt you for one.
-7. Add your credit card or debit card info, and select **Next**. Your card info is saved as a payment option on **Billing & payments - Payment methods**.
-
-You'll also need to have your business address saved on **My organization - Profile**. The address is used to generate tax rates. For more information on taxes for apps, see [organization tax information](./update-microsoft-store-for-business-account-settings.md#organization-tax-information).
-
-Microsoft Store adds the app to your inventory. From **Products & services**, you can:
-
-- Distribute the app: add to private store, or assign licenses
-- View app licenses: review current licenses, reclaim and reassign licenses
-- View app details: review the app details page and purchase more licenses
-
-For info on distributing apps, see [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-microsoft-store-for-business.md).
-
-For info on offline-licensed apps, see [Distribute offline apps](distribute-offline-apps.md).
\ No newline at end of file
diff --git a/store-for-business/add-profile-to-devices.md b/store-for-business/add-profile-to-devices.md
deleted file mode 100644
index 73cb1cafc3..0000000000
--- a/store-for-business/add-profile-to-devices.md
+++ /dev/null
@@ -1,148 +0,0 @@
----
-title: Manage Windows device deployment with Windows Autopilot Deployment
-description: Add an Autopilot profile to devices. Autopilot profiles control what is included in Windows set up experience for your employees.
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.date: 05/24/2023
-ms.reviewer:
-ms.topic: conceptual
-ms.localizationpriority: medium
----
-
-# Manage Windows device deployment with Windows Autopilot Deployment
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Windows Autopilot simplifies device set up for IT Admins. For an overview of benefits, scenarios, and prerequisites, see [Overview of Windows Autopilot](/windows/deployment/windows-autopilot/windows-10-autopilot).
-
-Watch this video to learn more about Windows Autopilot in Microsoft Store for Business.
-
-> [!video https://www.microsoft.com/videoplayer/embed/3b30f2c2-a3e2-4778-aa92-f65dbc3ecf54?autoplay=false]
-
-## What is Windows Autopilot?
-In Microsoft Store for Business, you can manage devices for your organization and apply an *Autopilot deployment profile* to your devices. When people in your organization run the out-of-box experience on the device, the profile configures Windows based on the Autopilot deployment profile you applied to the device.
-
-You can create and apply Autopilot deployment profiles to these devices. The overall process looks like this.
-
-
-
-Figure 1 - Windows Autopilot Deployment Program process
-
-Autopilot deployment profiles have two main parts: default settings that can't be changed, and optional settings that you can include.
-
-### Autopilot deployment profiles - default settings
-These settings are configured with all Autopilot deployment profiles:
-- Skip Cortana, OneDrive, and OEM registration setup pages
-- Automatically setup for work or school
-- Sign in experience with company or school brand
-
-### Autopilot deployment profiles - optional settings
-These settings are off by default. You can turn them on for your Autopilot deployment profiles:
-- Skip privacy settings
-
-### Support for Autopilot profile settings
-Autopilot profile settings are supported beginning with the version of Windows they were introduced in. This table summarizes the settings and what they are supported on.
-
-| Setting | Supported on |
-| ------- | ------------- |
-| Deployment default features| Windows 10, version 1703 or later |
-| Skip privacy settings | Windows 10, version 1703 or later |
-| Disable local admin account creation on the device | Windows 10, version 1703 or later |
-| Skip End User License Agreement (EULA) | Windows 10, version 1709 or later. [Learn about Windows Autopilot EULA dismissal](/windows/deployment/Windows-Autopilot-EULA-note) |
-
-
-## Windows Autopilot deployment profiles in Microsoft Store for Business and Education
-You can manage new devices in Microsoft Store for Business or Microsoft Store for Education. Devices need to meet these requirements:
-- Windows 10, version 1703 or later
-- New devices that have not been through Windows out-of-box experience.
-
-## Add devices and apply Autopilot deployment profile
-To manage devices through Microsoft Store for Business and Education, you'll need a .csv file that contains specific information about the devices. You should be able to get this from your Microsoft account contact, or the store where you purchased the devices. Upload the .csv file to Microsoft Store to add the devices.
-
-### Device information file format
-Columns in the device information file need to use this naming and be in this order:
-- Column A: Device Serial Number
-- Column B: Windows Product ID (optional, typically blank)
-- Column C: Hardware Hash
-
-Here's a sample device information file:
-
-
-
-When you add devices, you need to add them to an *Autopilot deployment group*. Use these groups to apply Autopilot deployment profiles to a group of devices. The first time you add devices to a group, you'll need to create an Autopilot deployment group.
-
-> [!NOTE]
-> You can only add devices to a group when you add devices to **Microsoft Store for Business and Education**. If you decide to reorganize devices into different groups, you'll need to delete them from **Devices** in **Microsoft Store**, and add them again.
-
-**Add and group devices**
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then click **Devices**.
-3. Click **Add devices**, navigate to the *.csv file and select it.
-4. Type a name for a new Autopilot deployment group, or choose one from the list, and then click **Add**.
-If you don't add devices to a group, you can select the individual devices to apply a profile to.
-
-
-5. Click the devices or Autopilot deployment group that you want to manage. You need to select devices before you can apply an Autopilot deployment profile. You can switch between seeing groups or devices by clicking **View groups** or **View devices**.
-
-**Apply Autopilot deployment profile**
-1. When you have devices selected, click **Autopilot deployment**.
-2. Choose the Autopilot deployment profile to apply to the selected devices.
-
- > [!NOTE]
- > The first time you use Autopilot deployment profiles, you'll need to create one. See [Create Autopilot profile](#create-autopilot-profile).
-
-3. Microsoft Store for Business applies the profile to your selected devices, and shows the profile name on **Devices**.
-
-## Manage Autopilot deployment profiles
-You can manage the Autopilot deployment profiles created in Microsoft Store. You can create a new profile, edit, or delete a profile.
-
-### Create Autopilot profile
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then click **Devices**.
-3. Click **Autopilot deployment**, and then click **Create new profile**.
-4. Name the profile, choose the settings to include, and then click **Create**.
-The new profile is added to the **Autopilot deployment** list.
-
-### Edit or delete Autopilot profile
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then click **Devices**.
-3. Click **Autopilot deployment**, click **Edit your profiles**, and then choose the profile to edit.
-TBD: art
-4. Change settings for the profile, and then click **Save**.
--or-
-Click **Delete profile** to delete the profile.
-
-## Apply a different Autopilot deployment profile to devices
-After you've applied an Autopilot deployment profile to a device, if you decide to apply a different profile, you can remove the profile and apply a new profile.
-
-> [!NOTE]
-> The new profile will only be applied if the device has not been started, and gone through the out-of-box experience. Settings from a different profile can't be applied when another profile has been applied. Windows would need to be reinstalled on the device for the second profile to be applied to the device.
-
-## Autopilot device information file error messages
-Here's info on some of the errors you might see while working with Autopilot deployment profiles in **Microsoft Store for Business and Education**.
-
-| Message Id | Message explanation |
-| ---------- | ------------------- |
-| wadp001 | Check your file, or ask your device partner for a complete .csv file. This file is missing Serial Number and Product Id info. |
-| wadp002 | Check your file, or ask your device partner for updated hardware hash info in the .csv file. Hardware hash info is invalid in the current .csv file. |
-| wadp003 | Looks like you need more than one .csv file for your devices. The maximum allowed is 1,000 items. You're over the limit! Divide this device data into multiple .csv files. |
-| wadp004 | Try that again. Something happened on our end. Waiting a bit might help. |
-| wadp005 | Check your .csv file with your device provider. One of the devices on your list has been claimed by another organization. |
-| wadp006 | Try that again. Something happened on our end. Waiting a bit might help. |
-| wadp007 | Check the info for this device in your .csv file. The device is already registered in your organization. |
-| wadp008 | The device does not meet Autopilot Deployment requirements. |
-| wadp009 | Check with your device provider for an update .csv file. The current file doesn't work |
-| wadp010 | Try that again. Something happened on our end. Waiting a bit might help. |
\ No newline at end of file
diff --git a/store-for-business/app-inventory-management-microsoft-store-for-business.md b/store-for-business/app-inventory-management-microsoft-store-for-business.md
deleted file mode 100644
index 950fe7b629..0000000000
--- a/store-for-business/app-inventory-management-microsoft-store-for-business.md
+++ /dev/null
@@ -1,206 +0,0 @@
----
-title: App inventory management for Microsoft Store for Business and Microsoft Store for Education (Windows 10)
-description: You can manage all apps that you've acquired on your Apps & Software page.
-ms.assetid: 44211937-801B-4B85-8810-9CA055CDB1B2
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.date: 05/24/2023
----
-
-# App inventory management for Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-You can manage all apps that you've acquired on your **Apps & software** page. This page shows all of the content you've acquired, including apps that from Microsoft Store, and line-of-business (LOB) apps that you've accepted into your inventory. After LOB apps are submitted to your organization, you'll see a notification on your **Apps & software** page. On the **New LOB apps** tab, you can accept, or reject the LOB apps. For more information on LOB apps, see [Working with line-of-business apps](working-with-line-of-business-apps.md). The inventory page includes apps acquired by all people in your organization with the Store for Business Admin role.
-
-All of these apps are treated the same once they are in your inventory and you can perform app lifecycle tasks for them: distribute apps, add apps to private store, review license details, and reclaim app licenses.
-
-
-
-Microsoft Store for Business and Education shows this info for each app in your inventory:
-- Name
-- Last modified
-- Private store status
-- Available licenses
-- Supported devices
-- Access to actions for the app
-
-The last modified date tracks changes about the app as an item in your inventory. The last modified date changes when one of the following happens:
-- First purchase (the date you acquire the app from Microsoft Store for Business)
-- Purchase additional licenses
-- Assign license
-- Reclaim license
-- Refund order (applies to purchased apps, not free apps)
-
-The last modified date does not correspond to when an app was last updated in Microsoft Store. It tracks activity for that app, as an item in your inventory.
-
-## Find apps in your inventory
-
-There are a couple of ways to find specific apps, or groups of apps in your inventory.
-
-**Search** - Use the Search box to search for an app.
-**Refine results** - Use **Refine results** to scope your list of apps by one or more of these app attributes:
-- **License type** - Online or offline licenses. For more info, see [Apps in Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model).
-- **Supported devices** - Lists the devices that apps in your inventory were originally written to support. This list is cumulative for all apps in your inventory.
-- **Source** - **Store**, for apps acquired from Store for Business, or LOB, for line-of-business apps.
-- **Product type** - Product categories, such as app, or game.
-- **Private store** - Whether or not the app is in the private store, or status if the app is being added or removed from private store.
-
-## Manage apps in your inventory
-Each app in the Store for Business has an online, or an offline license. For more information on Store for Business licensing model, see [Apps in the Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model). There are different actions you can take depending on the app license type. They're summarized in this table.
-
-| Action | Online-licensed app | Offline-licensed app |
-| ------ | ------------------- | -------------------- |
-| Assign to employees | ✔️ | |
-| Add to private store | ✔️ | |
-| Remove from private store | ✔️ | |
-| View license details | ✔️ | |
-| View product details | ✔️ | ✔️ |
-| Download for offline use | | ✔️ |
-
-The actions in the table are how you distribute apps, and manage app licenses. We'll cover those in the next sections. Working with offline-licensed apps has different steps. For more information on distributing offline-licensed apps, see [Distribute offline apps](distribute-offline-apps.md).
-
-## Assign apps
-For online-licensed apps, you can assign apps directly to people in your organization.
-
-**To assign an app to an employee**
-
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com).
-2. Click **Manage**, and then choose **Inventory**.
-3. Find an app, click the ellipses, and then choose **Assign to people**.
-4. Type the email address for the employee that you're assigning the app to, and click **Confirm**.
-
-Employees will receive an email with a link that will install the app on their device. Click the link to start the Microsoft Store app, and then click **Install**. Also, in the Microsoft Store app, they can find the app under **My Library**.
-
-There are other options for distributing apps:
-- **Use a management tool** - If you use a management tool that supports Microsoft Store, you can distribute apps with your management tool. Once it is configured to work with Store for Business, your management tool will have access to all apps in your inventory. For more information, see [Distribute apps with a management tool](distribute-apps-with-management-tool.md).
-- **Distribute from private store** - You can also add apps to your private store, and let people get them on their own. For more information, see [Distribute apps from private store](#distribute-apps-from-private-store)
-
-## Distribute apps from private store
-Once an app is in your private store, people in your org can install the app on their devices. For more information, see [Distribute apps using your private store](distribute-apps-from-your-private-store.md).
-
-### Add apps to your private store
-**To make an app in Apps & software available in your private store**
-
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com).
-2. Click **Manage**, and then choose **Apps & software**.
-3. Use **Refine results** to search for online-licensed apps under **License type**.
-4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**.
-
-The value under **Private store** for the app will change to pending. It will take approximately thirty-six hours before the app is available in the private store.
-Employees can claim apps that admins added to the private store by doing the following.
-
-### Get and remove private store apps
-**To claim an app from the private store**
-
-1. Sign in to your computer with your Microsoft Entra credentials, and start the Microsoft Store app.
-2. Click the private store tab.
-3. Click the app you want to install, and then click **Install**.
-
-Another way to distribute apps is by assigning them to people in your organization.
-
-If you decide that you don't want an app available for employees to install on their own, you can remove it from your private store.
-
-**To remove an app from the private store**
-
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com).
-2. Click **Manage**, and then choose **Products & services**.
-3. Find an app, click the ellipses, choose **Remove from private store**, and then click **Remove**.
-4. Choose the private store collection, and then under **In collection**, switch to **Off**.
-
-The app will still be in your inventory, but your employees will not have access to the app from your private store.
-
-### Private store availability
-On the details page for each app, you can directly assign an app to a user, or for apps in your private store, you can set **Private store availability**.
-
-**Private store availability** allows you to choose which groups of people can see an app in the private store:
-- No one - The app isn't in your private store
-- Everyone - The app is available to anyone in your organization
-- Specific groups - The app is available to all users in assigned security groups
-
-**To assign security groups to an app**
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com).
-2. Click **Manage**, and then choose **Products & services**.
-3. Find an app, choose the ellipses, and then choose **View license details**.
-4. Click **Private store availability**, select **Specific groups**, and then click **Assign groups**.
-5. Enter a name or email address for the security group you want to use, and then click **Add groups**.
-
-## Manage app licenses
-
-For each app in your inventory, you can view and manage license details. This give you another way to assign apps to people in your organization. It also allows you to reclaim app licenses after they've been assigned to people, or claimed by people in your organization.
-
-**To view license details**
-
-1. Sign in to [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Microsoft Store for Education](https://businessstore.microsoft.com).
-2. Click **Manage**, and then choose **Products & services**.
-3. Click an app you want to manage.
-4. On the app details page, you'll see the names of people in your organization who have installed the app and are using one of the licenses. From here, you can:
-
- - Assign the app to other people in your organization.
- - Reclaim app licenses.
- - View app details.
- - Add the app to your private store, if it is not in the private store.
-
-You can assign the app to more people in your organization, or reclaim licenses.
-
-**To assign an app to more people**
-
-- On the app page, click **Assign users**, type the email address for the person that you're assigning the app to, and click **Assign**.
-
-Microsoft Store updates the list of assigned licenses.
-
-**To reclaim licenses**
-
-- On the app page, choose the person you want to reclaim the license from, click the ellipses, and then click **Reclaim licenses**.
-
-Microsoft Store updates the list of assigned licenses.
-
-## Purchase additional licenses
-You can purchase additional licenses for apps in your Inventory.
-
-**To purchase additional app licenses**
-
-1. Sign in to [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Microsoft Store for Education](https://businessstore.microsoft.com)
-2. Click **Manage**, and then choose **Apps & software**.
-3. From **Apps & software**, click an app.
-4. On the app page, click **Buy more** for additional licenses, or click **Assign users** to manage your current licenses.
-
-You'll have a summary of current license availability.
-
-## Download offline-licensed app
-Offline licensing is a new feature in Windows 10 and allows apps to be deployed to devices that are not connected to the Internet. This means organizations can deploy apps when users or devices do not have connectivity to the Store.
-
-You can download offline-licensed apps from your inventory. You'll need to download these items:
-- App metadata
-- App package
-- App license
-- App framework
-
-For more information about online and offline licenses, see [Apps in the Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model).
-
-For more information about downloading offline-licensed apps, see [Download offline apps](distribute-offline-apps.md).
-
-## Manage products programmatically
-
-Microsoft Store for Business and Education provides a set of Admin management APIs. If you organization develops scripts or tools, these APIs allow Admins to programmatically manage items in **Apps & software**. For more information, see [REST API reference for Microsoft Store for Business](/windows/client-management/mdm/rest-api-reference-windows-store-for-business).
-
-You can download a preview PowerShell script that uses REST APIs. The script is available from PowerShell Gallery. You can use to the script to:
-- View items in inventory (**Apps & software**)
-- Manage licenses - assigning and removing
-- Perform bulk options using .csv files - this automates license management for customers with large numbers of licenses
-
-> [!NOTE]
-> The Microsoft Store for Business and Education Admin role is required to manage products and to use the MSStore module. This requires advanced knowledge of PowerShell.
diff --git a/store-for-business/apps-in-microsoft-store-for-business.md b/store-for-business/apps-in-microsoft-store-for-business.md
deleted file mode 100644
index 4438a5efb2..0000000000
--- a/store-for-business/apps-in-microsoft-store-for-business.md
+++ /dev/null
@@ -1,81 +0,0 @@
----
-title: Apps in Microsoft Store for Business and Education (Windows 10)
-description: Microsoft Store for Business has thousands of apps from many different categories.
-ms.assetid: CC5641DA-3CEA-4950-AD81-1AF1AE876926
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Apps in Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Microsoft Store for Business and Education has thousands of apps from many different categories.
-
-These app types are supported in Microsoft Store for Business and Education:
-
-- Universal Windows apps for Windows 10
-- Universal Windows apps, by device: phone, Surface Hub, IoT, HoloLens
-
-Apps in your inventory will have at least one of these supported platforms listed for the app:
-
-- Windows 10 desktops
-- Windows 10 phones
-- Windows 10 xbox
-- Windows 10 IOT devices
-- Windows 10 servers
-- Windows 10 \*all devices\*
-- Windows 10 Surface Hub
-- Windows 10 HoloLens
-
-Apps that you acquire from Microsoft Store only work on Windows 10-based devices. Even though an app might list Windows 8 as its supported platform, that tells you what platform the app was originally written for. Apps developed for Windows 8, or Windows Phone 8 will work on Windows 10.
-
-Some apps are free, and some apps charge a price. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time.
-
-Some apps which are available to consumers in Microsoft Store might not be available to organizations in Microsoft Store for Business and Education. App developers can opt-out their apps, and they also need to meet eligibility requirements for Microsoft Store for Business and Education. For more information, see [Organizational licensing options](/windows/uwp/publish/organizational-licensing).
-
-Line-of-business (LOB) apps are also supported using Microsoft Store. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to Microsoft Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
-
-## In-app purchases
-
-Some apps offer you the option to make in-app purchases. In-app purchases are not currently supported for apps that are acquired through Microsoft Store and distributed to employees.
-
-If an employee makes an in-app purchase, they'll make it with their personal Microsoft account and pay for it with a personal payment method. The employee will own the item purchased, and it cannot be transferred to your organization's inventory.
-
-## Licensing model: online and offline licenses
-
-Microsoft Store supports two options to license apps: online and offline.
-
-### Online licensing
-Online licensing is the default licensing model and is similar to the model used by Microsoft Store. Online licensed apps require customers and devices to connect to Microsoft Store service to acquire an app and its license. License management is enforced based on the user's Microsoft Entra identity and maintained by Microsoft Store as well as the management tool. By default app updates are handled by Windows Update.
-
-Distribution options for online-licensed apps include the ability to:
-
-- Assign an app to employees.
-- Add an app to your private store, allowing employees to download the app.
-- Distribute through a management tool.
-
-### Offline licensing
-Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Microsoft Store. This model means organizations can deploy apps when users or devices do not have connectivity to Microsoft Store. Admins control whether or not offline apps are available in Microsoft Store with an offline app visibility setting.
-
-You have the following distribution options for offline-licensed apps:
-
-- Include the app in a provisioning package, and then use it as part of imaging a device.
-- Distribute the app through a management tool.
-
-For more information, see [Distribute apps to your employees from Microsoft Store for Business](distribute-apps-to-your-employees-microsoft-store-for-business.md).
diff --git a/store-for-business/assign-apps-to-employees.md b/store-for-business/assign-apps-to-employees.md
deleted file mode 100644
index db0e139ab0..0000000000
--- a/store-for-business/assign-apps-to-employees.md
+++ /dev/null
@@ -1,48 +0,0 @@
----
-title: Assign apps to employees (Windows 10)
-description: Administrators can assign online-licensed apps to employees and students in their organization.
-ms.assetid: A0DF4EC2-BE33-41E1-8832-DBB0EBECA31A
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/27/2023
----
-
-# Assign apps to employees
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Admins, Purchasers, and Basic Purchasers can assign online-licensed apps to employees or students in their organization.
-
-**To assign an app to an employee**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then choose **Apps & software**.
-3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**.
--OR-
- Click the app, and then click **Assign User**.
-4. Type the email address for the person you're assigning the app to, and click **Assign**.
-
-Employees will receive an email with a link that will install the app on their device. Click the link to start Microsoft Store app, and then click **Install**. Also, in Microsoft Store app, they can find the app under **My Library**.
-
-
-
-
-
-
-
-
-
diff --git a/store-for-business/billing-payments-overview.md b/store-for-business/billing-payments-overview.md
deleted file mode 100644
index 08d60c558e..0000000000
--- a/store-for-business/billing-payments-overview.md
+++ /dev/null
@@ -1,31 +0,0 @@
----
-title: Billing and payments overview
-description: Find topics about billing and payment support in Microsoft Store for Business.
-keywords: billing, payment methods, invoices, credit card, debit card
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Billing and payments
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Access invoices and managed your payment methods.
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Understand your invoice](billing-understand-your-invoice-msfb.md) | Information about invoices provided by Microsoft Store for Business. |
-| [Understand billing profiles](billing-profile.md) | Information about billing profiles and how they relate to invoices. |
-| [Payment methods](payment-methods.md) | Information about managing payment methods. |
diff --git a/store-for-business/billing-profile.md b/store-for-business/billing-profile.md
deleted file mode 100644
index 43924342b2..0000000000
--- a/store-for-business/billing-profile.md
+++ /dev/null
@@ -1,51 +0,0 @@
----
-title: Understand billing profiles
-description: Learn how billing profiles support invoices
-keywords: billing profile, invoices, charges, managed charges
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/23/2023
-ms.reviewer:
----
-
-# Understand billing profiles
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-For commercial customers purchasing software or hardware products from Microsoft using a Microsoft customer agreement, billing profiles let you customize what products are included on your invoice, and how you pay your invoices.
-
-Billing profiles include:
-
-- **Payment methods** – Credit cards or check/wire transfer
-- **Contact info** - Billing address and a contact name
-- **Permissions** – Permissions that allow you to change the billing profile, pay bills, or use the payment method on the billing profile to make purchases
-
-Use billing profiles to control your purchases and customize your invoice. A monthly invoice is generated for the products bought using the billing profile. You can customize the invoice such as update the purchase order number and email invoice preference.
-
-A billing profile is automatically created for your billing account during your first purchase. You can create new billing profiles to set up additional invoices when you make a purchase. For example, you use different billing profiles when you make purchases for each department in your organization. On your next billing date, you'll receive an invoice for each billing profile.
-
-Roles on the billing profiles have permissions to control purchases, and view and manage invoices. Assign these roles to users who track, organize, and pay invoices like members of the procurement team in your organization.
-
-## View billing profile
-**To view billing profiles**
-1. Sign in to [Microsoft Store for Business]( https://businessstore.microsoft.com/), or M365 admin center.
-2. Select **Manage**, and then select **Billing and payments**.
-3. Select **Billing profiles**, and then select a billing profile from the list to see details.
- - On **Overview**, you can edit billing profile details, and turn on or off sending an invoice by email.
- - On **Permissions**, you can assign roles to users to pay invoices.
- - On **Azure credit balance**, Azure customers can see transaction balance history for the azure credits used by that billing profile.
- - On **Azure credits**, Azure customers can see a list of Azure credits associated with that billing profile, and their expiration dates.
-
-## Need help? Contact us.
-If you have questions or need help with your Azure charges, [create a support request with Azure support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/newsupportrequest).
-
-If you have questions or need help with your invoice in Microsoft Store for Business, [create a support request with Store for Business support](https://businessstore.microsoft.com).
diff --git a/store-for-business/billing-understand-your-invoice-msfb.md b/store-for-business/billing-understand-your-invoice-msfb.md
deleted file mode 100644
index 7a196272c8..0000000000
--- a/store-for-business/billing-understand-your-invoice-msfb.md
+++ /dev/null
@@ -1,121 +0,0 @@
----
-title: Understand your Microsoft Customer Agreement invoice
-description: Learn how to read and understand your MCA bill
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
-ms.reviewer:
----
-
-# Understand your Microsoft Customer Agreement invoice
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-The invoice provides a summary of your charges and provides instructions for payment. It's available for
-download in the Portable Document Format (.pdf) for commercial customers from Microsoft Store for Business [Microsoft Store for Business - Invoice](https://businessstore.microsoft.com/manage/payments-billing/invoices) or can be sent via email. This article applies to invoices generated for a Microsoft Customer Agreement billing account. Check if you have a [Microsoft Customer Agreement](https://businessstore.microsoft.com/manage/organization/agreements).
-
-## General invoice information
-
-Invoices are your bill from Microsoft. A few things to note:
-
-- **Invoice schedule** - You're invoiced on a monthly basis. You can find out which day of the month you receive invoices by checking invoice date under billing profile overview in [Microsoft Store for Business](https://businessstore.microsoft.com/manage/payments-billing/billing-profiles). Charges that occur between the end of the billing period and the invoice date are included in the next month's invoice, since they are in the next billing period. The billing period start and end dates for each invoice are listed in the invoice PDF above **Billing Summary**.
-- **Billing profile** - Billing profiles are created during your purchase. Invoices are created for each billing profile. Billing profiles let you customize what products are purchased, how you pay for them, and who can make purchases. For more information, see [Understand billing profiles](billing-profile.md)
-- **Items included** - Your invoice includes total charges for all first and third-party software and hardware products purchased under a Microsoft Customer Agreement. That includes items purchased from Microsoft Store for Business and Azure Marketplace.
-- **Charges** - Your invoice provides information about products purchased and their related charges and taxes. Purchases are aggregated to provide a concise view of your bill.
-
-## Online invoice
-For Store for Business customers, invoices are also available online. A few things to note:
-- **Link to online invoice** - Available from your PDF invoice, and from an email notification.
-- **Invoice details** - Expandable view of the charges on your invoice, so you can see more details for each item.
-- **Pricing details** - Additional information including discounting and pricing details.
-- **Pay online** - Option to make a payment online from the invoice.
-- **Azure cost management** - For Azure customers, online invoices include a link to Azure cost management.
-
-**To view your online invoice**
-1. Sign in to [Microsoft Store for Business]( https://businessstore.microsoft.com/).
-2. Select **Manage**, and then select **Billing and payments**.
-3. Select an invoice from the list to view your online invoice.
-
-## Detailed terms and descriptions of your invoice
-The following sections list the important terms that you see on your
-invoice and descriptions for each term.
-
-### Understand the invoice summary
-
-The **Invoice Summary** is on the top of the first page and shows information about your billing profile and how you pay.
-
-
-
-
-| Term | Description |
-| --- | --- |
-| Sold to |Address of your legal entity, found in billing account properties|
-| Bill to |Billing address of the billing profile receiving the invoice, found in billing profile properties|
-| Billing Profile |The name of the billing profile receiving the invoice |
-| P.O. number |An optional purchase order number, assigned by you for tracking |
-| Invoice number |A unique, Microsoft-generated invoice number used for tracking purposes |
-| Invoice date |Date that the invoice is generated, typically five to 12 days after end of the Billing cycle. You can check your invoice date in billing profile properties.|
-| Payment terms |How you pay for your Microsoft bill. *Net 30 days* means you pay by following instructions on your invoice, within 30 days of the invoice date. |
-
-### Understand the billing summary
-The **Billing Summary** shows the charges against the billing profile since the previous billing period, any credits that were applied, tax, and the total amount due.
-
-
-
-
-| Term | Description |
-| --- | --- |
-| Charges|Total number of Microsoft charges for this billing profile since the last billing period |
-| Credits |Credits you received from returns |
-| Azure credits applied |Your Azure credits that are automatically applied to Azure charges each billing period |
-| Subtotal |The pre-tax amount due |
-| Tax |The type and amount of tax that you pay, depending on the country/region of your billing profile. If you don't have to pay tax, then you won't see tax on your invoice. |
-| Estimated total savings |The estimated total amount you saved from effective discounts. If applicable, effective discount rates are listed beneath the purchase line items in Details by Invoice Section. |
-
-### Understand your charges
-You'll see the charges, tax, and the total amount due. Azure customers will also see the amount of Azure credits applied.
-
-`Total = Charges - Azure Credit + Tax`
-
-The details show the cost broken down by product order name. For Azure customers, this might be organized by invoice section. For more information about how invoice sections are used with Azure products, see [Understand invoice sections](/azure/billing/billing-mca-overview#understand-invoice-sections).
-Within each product order, cost is broken down by service family.
-
-The total amount due for each service family is calculated by subtracting Azure credits from credits/charges and adding tax:
-
-`Total = Charges/Credits - Azure Credit + Tax`
-
-
-
-| Term |Description |
-| --- | --- |
-| Unit price | The effective unit price of the service (in pricing currency) that is used to the rate the usage. This is unique for a product, service family, meter, and offer. |
-| Qty | Quantity purchased or consumed during the billing period |
-| Charges/Credits | Net amount of charges after credits/refunds are applied |
-| Azure Credit | The amount of Azure credits applied to the Charges/Credits|
-| Tax rate | Tax rate(s) depending on country/region |
-| Tax amount | Amount of tax applied to purchase based on tax rate |
-| Total | The total amount due for the purchase |
-
-### How to pay
-At the bottom of the invoice, there are instructions for paying your bill. You can pay by wire or online. If you pay online, you can use a credit or debit card, or Azure credits, if applicable.
-
-### Publisher information
-If you have third-party services in your bill, the name and address of each publisher is listed at the bottom of your invoice.
-
-## Next steps
-If there are Azure charges on your invoice that you would like more details on, see [Understand the Azure charges on your Microsoft Customer Agreement invoice](/azure/cost-management-billing/understand/mca-understand-your-invoice).
-
-## Need help? Contact us.
-
-If you have questions or need help with your Azure charges, [create a support request with Azure support](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/newsupportrequest).
-
-If you have questions or need help with your invoice in Microsoft Store for Business, [create a support request with Store for Business support](https://businessstore.microsoft.com/manage/support/summary).
diff --git a/store-for-business/configure-mdm-provider-microsoft-store-for-business.md b/store-for-business/configure-mdm-provider-microsoft-store-for-business.md
deleted file mode 100644
index 74d05180b7..0000000000
--- a/store-for-business/configure-mdm-provider-microsoft-store-for-business.md
+++ /dev/null
@@ -1,52 +0,0 @@
----
-title: Configure an MDM provider (Windows 10)
-description: For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Microsoft Store for Business inventory to manage apps with offline licenses.
-ms.assetid: B3A45C8C-A96C-4254-9659-A9B364784673
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Configure an MDM provider
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Microsoft Store for Business inventory to manage apps with offline licenses. Store for Business management tool services work with your third-party management tool to manage content.
-
-Your management tool needs to be installed and configured with Microsoft Entra ID, in the same directory that you are using for Store for Business. Once that's done, you can configure it to work with Store for Business
-
-**To configure a management tool in Microsoft Entra ID**
-
-1. Sign in to the Azure Portal as an Administrator.
-2. Click **Microsoft Entra ID**, and then choose your directory.
-4. Click **Mobility (MDM and MAM)**.
-3. Click **+Add Applications**, find the application, and add it to your directory.
-
-After your management tool is added to your Microsoft Entra directory, you can configure it to work with Microsoft Store. You can configure multiple management tools - just repeat the following procedure.
-
-**To configure a management tool in Microsoft Store for Business**
-
-1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com)
-2. Click **Manage**, click **Settings**.
-3. Under **Distribute**, click **Management tools**.
-3. From the list of MDM tools, select the one you want to synchronize with Microsoft Store, and then click **Activate.**
-
-Your MDM tool is ready to use with Microsoft Store. To learn how to configure synchronization and deploy apps, see these topics:
-- [Manage apps you purchased from Microsoft Store for Business with Microsoft Intune](/mem/intune/apps/windows-store-for-business)
-- [Manage apps from Microsoft Store for Business with Microsoft Configuration Manager](/configmgr/apps/deploy-use/manage-apps-from-the-windows-store-for-business)
-
-For third-party MDM providers or management servers, check your product documentation.
diff --git a/store-for-business/distribute-apps-from-your-private-store.md b/store-for-business/distribute-apps-from-your-private-store.md
deleted file mode 100644
index a7c0db425c..0000000000
--- a/store-for-business/distribute-apps-from-your-private-store.md
+++ /dev/null
@@ -1,72 +0,0 @@
----
-title: Distribute apps using your private store (Windows 10)
-description: The private store is a feature in Microsoft Store for Business and Microsoft Store for Education that organizations receive during the signup process.
-ms.assetid: C4644035-845C-4C84-87F0-D87EA8F5BA19
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Distribute apps using your private store
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Microsoft Store app, and is usually named for your company or organization. Only apps with online licenses can be added to the private store.
-
-You can make an app available in your private store when you acquire the app, or you can do it later from your inventory. Once the app is in your private store, employees can claim and install the app.
-
-**To acquire an app and make it available in your private store**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-
-2. Click an app, choose the license type, and then click **Get the app** to acquire the app for your organization.
-
-
-
-Microsoft Store adds the app to **Products and services**. Click **Manage**, **Apps & software** for app distribution options.
-
-**To make an app in Apps & software available in your private store**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then choose **Products and services**.
-
-
-
-3. Click on the application to open the application settings, then select **Private store availability**.
-4. Select **Everyone** to make application available for all people in your organization.
-
-
-
->[!Note]
- > If you are working with a new Line-of-Business (LOB) app, you have to wait for the app to be available in **Products & services** before adding it to your private store. For more information, see [Working with line-of-business apps](working-with-line-of-business-apps.md).
-
-## Private store availability
-You can use security groups to scope which users can install an app from your private store. For more information, see [Private store availability](app-inventory-management-microsoft-store-for-business.md#private-store-availability).
-
-Employees can claim apps that admins added to the private store by doing the following.
-
-**To claim an app from the private store**
-
-1. Sign in to your computer with your Microsoft Entra credentials, and start Microsoft Store app.
-2. Click the **private store** tab.
-3. Click the app you want to install, and then click **Install**.
-
-
-## Related topics
-- [Manage access to private store](manage-access-to-private-store.md)
-- [Manage private store settings](manage-private-store-settings.md)
-- [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-microsoft-store)
diff --git a/store-for-business/distribute-apps-to-your-employees-microsoft-store-for-business.md b/store-for-business/distribute-apps-to-your-employees-microsoft-store-for-business.md
deleted file mode 100644
index ed5f058ffe..0000000000
--- a/store-for-business/distribute-apps-to-your-employees-microsoft-store-for-business.md
+++ /dev/null
@@ -1,37 +0,0 @@
----
-title: Distribute apps to your employees from the Microsoft Store for Business and Education (Windows 10)
-description: Distribute apps to your employees from Microsoft Store for Business or Microsoft Store for Education. You can assign apps to employees,or let employees install them from your private store.
-ms.assetid: E591497C-6DFA-49C1-8329-4670F2164E9E
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Distribute apps to your employees from Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Distribute apps to your employees from Microsoft Store for Business and Microsoft Store for Education. You can assign apps to employees, or let employees install them from your private store.
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Distribute apps using your private store](distribute-apps-from-your-private-store.md) | The private store is a feature in Microsoft Store that organizations and schools receive during the signup process. When admins add apps to the private store, all people in the organization can view and download the apps. Only apps with online licenses can be added to the private store. |
-| [Assign apps to employees](assign-apps-to-employees.md) | Admins can assign online-licensed apps to people in their organization. |
-| [Distribute apps with a management tool](distribute-apps-with-management-tool.md) | Admins can configure a mobile device management (MDM) tool to synchronize your Microsoft Store inventory. Microsoft Store management tool services work with MDM tools to manage content. |
-| [Distribute offline apps](distribute-offline-apps.md) | Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can download apps and their licenses to deploy within their network, or on devices that are not connected to the Internet. This allows organizations to deploy apps to devices without connectivity to the Store. |
diff --git a/store-for-business/distribute-apps-with-management-tool.md b/store-for-business/distribute-apps-with-management-tool.md
deleted file mode 100644
index 0d0f36b0db..0000000000
--- a/store-for-business/distribute-apps-with-management-tool.md
+++ /dev/null
@@ -1,65 +0,0 @@
----
-title: Distribute apps with a management tool (Windows 10)
-description: You can configure a mobile device management (MDM) tool to synchronize your Microsoft Store for Business or Microsoft Store for Education inventory. Microsoft Store management tool services work with MDM tools to manage content.
-ms.assetid: 006F5FB1-E688-4769-BD9A-CFA6F5829016
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Distribute apps with a management tool
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-You can configure a mobile device management (MDM) tool to synchronize your Microsoft Store for Business or Microsoft Store for Education inventory. Microsoft Store management tool services work with MDM tools to manage content.
-
-Your MDM tool needs to be installed and configured in Microsoft Entra ID, in the same Microsoft Entra directory used with Microsoft Store.
-
-In Microsoft Entra management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Microsoft Entra ID, you can authorize the tool to work with the Microsoft Store for Business or Microsoft Store for Education. This allows the MDM tool to call Microsoft Store management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md) and [Manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](/mem/intune/apps/windows-store-for-business).
-
-Microsoft Store services provide:
-
-- Services for third-party MDM tools.
-- Synchronize app purchases and updates.
-- Synchronize metadata. For offline-licensed apps, also synchronize offline app package and offline licenses.
-- The ability to download offline-licensed apps from Store for Business.
-
-MDM tool requirements:
-
-- Must be a Microsoft Entra application to authenticate against the Store for Business services.
-- Must be configured in Microsoft Entra ID, and Microsoft Store.
-- Microsoft Entra identity is required to authorize Microsoft Store services.
-
-## Distribute offline-licensed apps
-
-If your vendor doesn't support the ability to synchronize applications from the management tool services, or can't connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Microsoft Store for Business](./apps-in-microsoft-store-for-business.md#licensing-model).
-
-This diagram shows how you can use a management tool to distribute offline-licensed app to employees in your organization. Once synchronized from Store for Business, management tools can use the Windows Management framework to distribute applications to devices.
-
-
-
-## Distribute online-licensed apps
-
-This diagram shows how you can use a management tool to distribute an online-licensed app to employees in your organization. Once synchronized from Microsoft Store, management tools use the Windows Management framework to distribute applications to devices. For online-licensed applications, the management tool calls back to Microsoft Store management services to assign an application prior to issuing the policy to install the application.
-
-
-
-## Related topics
-
-[Configure MDM Provider](configure-mdm-provider-microsoft-store-for-business.md)
-
-[Manage apps you purchased from the Microsoft Store for Business and Education with Microsoft Intune](/mem/intune/apps/windows-store-for-business)
diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md
deleted file mode 100644
index eefa9c7b90..0000000000
--- a/store-for-business/distribute-offline-apps.md
+++ /dev/null
@@ -1,82 +0,0 @@
----
-title: Distribute offline apps (Windows 10)
-description: Offline licensing is a new licensing option for Windows 10.
-ms.assetid: 6B9F6876-AA66-4EE4-A448-1371511AC95E
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Distribute offline apps
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Offline licensing is a new licensing option for Windows 10 with Microsoft Store for Business and Microsoft Store for Education. With offline licenses, organizations can download apps and their licenses to deploy within their network, or on devices that are not connected to the Internet. ISVs or devs can opt-in their apps for offline licensing when they submit them to the Windows Dev Center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Microsoft Store for Business and Microsoft Store for Education. This model allows organizations to deploy apps when users or devices do not have connectivity to the Store.
-
-## Why offline-licensed apps?
-
-Offline-licensed apps offer an alternative to online apps, and provide additional deployment options. Some reasons to use offline-licensed apps:
-
-- **You don't have access to Microsoft Store services** - If your employees don't have access to the Internet and Microsoft Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps.
-
-- **You use imaging to manage devices in your organization** - Offline-licensed apps can be added to images and deployed with Deployment Image Servicing and Management (DISM), or Windows Imaging and Configuration Designer (ICD).
-
-- **Your employees do not have Microsoft Entra accounts** - Microsoft Entra accounts are required for employees that install apps assigned to them from Microsoft Store or that claim apps from a private store.
-
-## Distribution options for offline-licensed apps
-
-You can't distribute offline-licensed apps directly from Microsoft Store. Once you download the items for the offline-licensed app, you have options for distributing the apps:
-
-- **Deployment Image Servicing and Management**. DISM is a command-line tool that is used to mount and service Microsoft Windows images before deployment. You can also use DISM to install, uninstall, configure, and update Windows features, packages, drivers, and international settings in a .wim file or VHD using the DISM servicing commands. DISM commands are used on offline images. For more information, see [Deployment Image Servicing and Management](/windows-hardware/manufacture/desktop/dism---deployment-image-servicing-and-management-technical-reference-for-windows).
-
-- **Create provisioning package**. You can use Windows Imaging and Configuration Designer (ICD) to create a provisioning package for your offline app. Once you have the package, there are options to [apply the provisioning package](/windows/configuration/provisioning-packages/provisioning-apply-package). For more information, see [Provisioning Packages for Windows 10](/windows/configuration/provisioning-packages/provisioning-packages).
-
-- **Mobile device management provider or management server.** You can use a mobile device management (MDM) provider or management server to distribute offline apps. For more information, see these topics:
-
- - [Manage apps from Microsoft Store for Business with Microsoft Configuration Manager](/configmgr/apps/deploy-use/manage-apps-from-the-windows-store-for-business)
- - [Manage apps from Microsoft Store for Business with Microsoft Intune](/mem/intune/apps/windows-store-for-business)
-
-For third-party MDM providers or management servers, check your product documentation.
-
-## Download an offline-licensed app
-
-There are several items to download or create for offline-licensed apps. The app package and app license are required; app metadata and app frameworks are optional. This section includes more info on each item, and tells you how to download an offline-licensed app.
-
-- **App metadata** - App metadata is optional. The metadata includes app details, links to icons, product id, localized product ids, and other items. Devs who plan to use an app as part of another app or tool, might want the app metadata.
-
-- **App package** - App packages are required for distributing offline apps. There are app packages for different combinations of app platform and device architecture. You'll need to know what device architectures you have in your organization to know if there are app packages to support your devices.
-
-- **App license** - App licenses are required for distributing offline apps. Use encoded licenses when you distribute offline-licensed apps using a management tool or ICD. Use unencoded licenses when you distribute offline-licensed apps using DISM.
-
-- **App frameworks** - App frameworks are optional. If you already have the required framework, you don't need to download another copy. The Store for Business will select the app framework needed for the app platform and architecture that you selected.
-
-**To download an offline-licensed app**
-
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**.
-3. Click **Settings**.
-4. Click **Shop**. Search for the **Shopping experience** section, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory.
-5. Click **Manage**. You now have access to download the appx bundle package metadata and license file.
-6. Go to **Products & services**, and select **Apps & software**. (The list may be empty, but it will auto-populate after some time.)
-
- - **To download app metadata**: Choose the language for the app metadata, and then click **Download**. Save the downloaded app metadata. This is optional.
- - **To download app package**: Click to expand the package details information, choose the Platform and Architecture combination that you need for your organization, and then click **Download**. Save the downloaded app package. This is required.
- - **To download an app license**: Choose either **Encoded**, or **Unencoded**, and then click **Generate license**. Save the downloaded license. This is required.
- - **To download an app framework**: Find the framework you need to support your app package, and click **Download**. This is optional.
-
-> [!NOTE]
-> You need the framework to support your app package, but if you already have a copy, you don't need to download it again. Frameworks are backward compatible.
diff --git a/store-for-business/docfx.json b/store-for-business/docfx.json
index 4d87a128eb..e29e3bfdae 100644
--- a/store-for-business/docfx.json
+++ b/store-for-business/docfx.json
@@ -37,7 +37,10 @@
"tier2"
],
"breadcrumb_path": "/microsoft-store/breadcrumb/toc.json",
- "uhfHeaderId": "MSDocsHeader-M365-IT",
+ "uhfHeaderId": "MSDocsHeader-Archive",
+ "is_archived": true,
+ "is_retired": true,
+ "ROBOTS": "NOINDEX,NOFOLLOW",
"ms.author": "trudyha",
"audience": "ITPro",
"ms.service": "store-for-business",
@@ -65,7 +68,9 @@
"Stacyrch140",
"garycentric",
"dstrome",
- "alekyaj"
+ "alekyaj",
+ "aditisrivastava07",
+ "padmagit77"
]
},
"fileMetadata": {},
diff --git a/store-for-business/education/TOC.yml b/store-for-business/education/TOC.yml
deleted file mode 100644
index edb38bce1a..0000000000
--- a/store-for-business/education/TOC.yml
+++ /dev/null
@@ -1,86 +0,0 @@
-- name: Microsoft Store for Education
- href: ../index.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: What's new in Microsoft Store for Business and Education
- href: ../whats-new-microsoft-store-business-education.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Sign up and get started
- href: ../sign-up-microsoft-store-for-business-overview.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: Microsoft Store for Business and Education overview
- href: ../microsoft-store-for-business-overview.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Prerequisites for Microsoft Store for Business and Education
- href: ../prerequisites-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Sign up for Microsoft Store for Business or Microsoft Store for Education
- href: /microsoft-store/sign-up-microsoft-store-for-business?toc=/microsoft-store/education/toc.json
- - name: Roles and permissions in the Microsoft Store for Business and Education
- href: ../roles-and-permissions-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: "Settings reference: Microsoft Store for Business and Education"
- href: ../settings-reference-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Working with Microsoft Store for Education
- href: /education/windows/education-scenarios-store-for-business?toc=/microsoft-store/education/toc.json
- - name: Find and acquire apps
- href: ../find-and-acquire-apps-overview.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: Apps in the Microsoft Store for Business and Education
- href: ../apps-in-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Acquire apps in the Microsoft Store for Business and Education
- href: ../acquire-apps-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Working with line-of-business apps
- href: ../working-with-line-of-business-apps.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: "Get Minecraft: Education Edition"
- href: /education/windows/get-minecraft-for-education?toc=/microsoft-store/education/toc.json
- items:
- - name: "For teachers: get Minecraft Education Edition"
- href: /education/windows/teacher-get-minecraft?toc=/microsoft-store/education/toc.json
- - name: "For IT administrators: get Minecraft Education Edition"
- href: /education/windows/school-get-minecraft?toc=/microsoft-store/education/toc.json
- - name: "Get Minecraft: Education Edition with Windows 10 device promotion"
- href: /education/windows/get-minecraft-device-promotion?toc=/microsoft-store/education/toc.json
- - name: Distribute apps to your employees from the Microsoft Store for Business and Education
- href: ../distribute-apps-to-your-employees-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: Distribute apps using your private store
- href: ../distribute-apps-from-your-private-store.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Assign apps to employees
- href: ../assign-apps-to-employees.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Distribute apps with a management tool
- href: ../distribute-apps-with-management-tool.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Distribute offline apps
- href: ../distribute-offline-apps.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage products and services
- href: ../manage-apps-microsoft-store-for-business-overview.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: App inventory management for Microsoft Store for Business
- href: ../app-inventory-management-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage app orders in Microsoft Store for Business and Education
- href: ../manage-orders-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage access to private store
- href: ../manage-access-to-private-store.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage private store settings
- href: ../manage-private-store-settings.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Configure MDM provider
- href: ../configure-mdm-provider-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage Windows device deployment with Windows Autopilot Deployment
- href: ../add-profile-to-devices.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Microsoft Store for Business and Education PowerShell module - preview
- href: ../microsoft-store-for-business-education-powershell-module.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business
- href: ../manage-mpsa-software-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Device Guard signing portal
- href: ../device-guard-signing-portal.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: Add unsigned app to code integrity policy
- href: ../add-unsigned-app-to-code-integrity-policy.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Sign code integrity policy with Device Guard signing
- href: ../sign-code-integrity-policy-with-device-guard-signing.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage settings in the Microsoft Store for Business and Education
- href: ../manage-settings-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- items:
- - name: Update Microsoft Store for Business and Microsoft Store for Education account settings
- href: ../update-microsoft-store-for-business-account-settings.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Manage user accounts in Microsoft Store for Business and Education
- href: ../manage-users-and-groups-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Troubleshoot Microsoft Store for Business
- href: ../troubleshoot-microsoft-store-for-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
- - name: Notifications in Microsoft Store for Business and Education
- href: ../notifications-microsoft-store-business.md?toc=%2fmicrosoft-store%2feducation%2ftoc.json
diff --git a/store-for-business/find-and-acquire-apps-overview.md b/store-for-business/find-and-acquire-apps-overview.md
deleted file mode 100644
index 0226497186..0000000000
--- a/store-for-business/find-and-acquire-apps-overview.md
+++ /dev/null
@@ -1,37 +0,0 @@
----
-title: Find and acquire apps (Windows 10)
-description: Use the Microsoft Store for Business and Education to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization.
-ms.assetid: 274A5003-5F15-4635-BB8B-953953FD209A
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Find and acquire apps
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Use the Microsoft Store for Business and Education to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization.
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Apps in the Microsoft Store for Business and Education](apps-in-microsoft-store-for-business.md) | Store for Business and Education has thousands of apps from many different categories. |
-| [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-microsoft-store-for-business.md) | You can acquire apps from the Microsoft Store for Business and Education for your employees. |
-| [Working with line-of-business apps](working-with-line-of-business-apps.md) | Your company can make line-of-business (LOB) applications available through Microsoft Store for Business and Education. These apps are custom to your company – they might be internal business apps, or apps specific to your business or industry. |
-
diff --git a/store-for-business/images/aadjwsfb.jpg b/store-for-business/images/aadjwsfb.jpg
deleted file mode 100644
index 428f1a26d4..0000000000
Binary files a/store-for-business/images/aadjwsfb.jpg and /dev/null differ
diff --git a/store-for-business/images/add-devices.png b/store-for-business/images/add-devices.png
deleted file mode 100644
index b8f274c600..0000000000
Binary files a/store-for-business/images/add-devices.png and /dev/null differ
diff --git a/store-for-business/images/autopilot-process.png b/store-for-business/images/autopilot-process.png
deleted file mode 100644
index 56c379fd5f..0000000000
Binary files a/store-for-business/images/autopilot-process.png and /dev/null differ
diff --git a/store-for-business/images/bank-account-icon.png b/store-for-business/images/bank-account-icon.png
deleted file mode 100644
index 664f8c7a6f..0000000000
Binary files a/store-for-business/images/bank-account-icon.png and /dev/null differ
diff --git a/store-for-business/images/billing-acct-roles.png b/store-for-business/images/billing-acct-roles.png
deleted file mode 100644
index 6977bef250..0000000000
Binary files a/store-for-business/images/billing-acct-roles.png and /dev/null differ
diff --git a/store-for-business/images/billingsummary.png b/store-for-business/images/billingsummary.png
deleted file mode 100644
index 9f45179ead..0000000000
Binary files a/store-for-business/images/billingsummary.png and /dev/null differ
diff --git a/store-for-business/images/edu-icon.png b/store-for-business/images/edu-icon.png
deleted file mode 100644
index 49009f7085..0000000000
Binary files a/store-for-business/images/edu-icon.png and /dev/null differ
diff --git a/store-for-business/images/invite-people.png b/store-for-business/images/invite-people.png
deleted file mode 100644
index b004d3ad7f..0000000000
Binary files a/store-for-business/images/invite-people.png and /dev/null differ
diff --git a/store-for-business/images/invoicesectiondetails.png b/store-for-business/images/invoicesectiondetails.png
deleted file mode 100644
index cdaac8423e..0000000000
Binary files a/store-for-business/images/invoicesectiondetails.png and /dev/null differ
diff --git a/store-for-business/images/invoicesummary.png b/store-for-business/images/invoicesummary.png
deleted file mode 100644
index c17e7f0713..0000000000
Binary files a/store-for-business/images/invoicesummary.png and /dev/null differ
diff --git a/store-for-business/images/license-assign-icon.png b/store-for-business/images/license-assign-icon.png
deleted file mode 100644
index 4a5daa933c..0000000000
Binary files a/store-for-business/images/license-assign-icon.png and /dev/null differ
diff --git a/store-for-business/images/lob-sku.png b/store-for-business/images/lob-sku.png
deleted file mode 100644
index 8637fd3f3d..0000000000
Binary files a/store-for-business/images/lob-sku.png and /dev/null differ
diff --git a/store-for-business/images/lob-workflow.png b/store-for-business/images/lob-workflow.png
deleted file mode 100644
index 954b787e6d..0000000000
Binary files a/store-for-business/images/lob-workflow.png and /dev/null differ
diff --git a/store-for-business/images/mc-ee-video-icon.png b/store-for-business/images/mc-ee-video-icon.png
deleted file mode 100644
index 61c8a0f681..0000000000
Binary files a/store-for-business/images/mc-ee-video-icon.png and /dev/null differ
diff --git a/store-for-business/images/mpsa-link.png b/store-for-business/images/mpsa-link.png
deleted file mode 100644
index 74f1496935..0000000000
Binary files a/store-for-business/images/mpsa-link.png and /dev/null differ
diff --git a/store-for-business/images/msfb-add-collection.png b/store-for-business/images/msfb-add-collection.png
deleted file mode 100644
index 0cf1a7d0af..0000000000
Binary files a/store-for-business/images/msfb-add-collection.png and /dev/null differ
diff --git a/store-for-business/images/msfb-autopilot-csv.png b/store-for-business/images/msfb-autopilot-csv.png
deleted file mode 100644
index d150ae4f42..0000000000
Binary files a/store-for-business/images/msfb-autopilot-csv.png and /dev/null differ
diff --git a/store-for-business/images/msfb-click-private-store.png b/store-for-business/images/msfb-click-private-store.png
deleted file mode 100644
index 35642c740e..0000000000
Binary files a/store-for-business/images/msfb-click-private-store.png and /dev/null differ
diff --git a/store-for-business/images/msfb-find-partner.png b/store-for-business/images/msfb-find-partner.png
deleted file mode 100644
index 23759cfb5f..0000000000
Binary files a/store-for-business/images/msfb-find-partner.png and /dev/null differ
diff --git a/store-for-business/images/msfb-products-services.png b/store-for-business/images/msfb-products-services.png
deleted file mode 100644
index 1ddba79518..0000000000
Binary files a/store-for-business/images/msfb-products-services.png and /dev/null differ
diff --git a/store-for-business/images/msfb-provider-list.png b/store-for-business/images/msfb-provider-list.png
deleted file mode 100644
index 2fbafca80f..0000000000
Binary files a/store-for-business/images/msfb-provider-list.png and /dev/null differ
diff --git a/store-for-business/images/msfb-ps-collection-idp.png b/store-for-business/images/msfb-ps-collection-idp.png
deleted file mode 100644
index ddd8907d6b..0000000000
Binary files a/store-for-business/images/msfb-ps-collection-idp.png and /dev/null differ
diff --git a/store-for-business/images/msfb-settings-icon.png b/store-for-business/images/msfb-settings-icon.png
deleted file mode 100644
index 1601965566..0000000000
Binary files a/store-for-business/images/msfb-settings-icon.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1709-app-request.png b/store-for-business/images/msfb-wn-1709-app-request.png
deleted file mode 100644
index e454aca9a9..0000000000
Binary files a/store-for-business/images/msfb-wn-1709-app-request.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1709-edge-ext.png b/store-for-business/images/msfb-wn-1709-edge-ext.png
deleted file mode 100644
index 15170ecfc3..0000000000
Binary files a/store-for-business/images/msfb-wn-1709-edge-ext.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1709-my-org.png b/store-for-business/images/msfb-wn-1709-my-org.png
deleted file mode 100644
index ecb47b6e8a..0000000000
Binary files a/store-for-business/images/msfb-wn-1709-my-org.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1709-o365-csp.png b/store-for-business/images/msfb-wn-1709-o365-csp.png
deleted file mode 100644
index b51d32923a..0000000000
Binary files a/store-for-business/images/msfb-wn-1709-o365-csp.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1709-o365-prepaid.png b/store-for-business/images/msfb-wn-1709-o365-prepaid.png
deleted file mode 100644
index 9bdb360a31..0000000000
Binary files a/store-for-business/images/msfb-wn-1709-o365-prepaid.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1709-search-result-sub-cat.png b/store-for-business/images/msfb-wn-1709-search-result-sub-cat.png
deleted file mode 100644
index de246824f5..0000000000
Binary files a/store-for-business/images/msfb-wn-1709-search-result-sub-cat.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1711-export-user.png b/store-for-business/images/msfb-wn-1711-export-user.png
deleted file mode 100644
index 61efc7307e..0000000000
Binary files a/store-for-business/images/msfb-wn-1711-export-user.png and /dev/null differ
diff --git a/store-for-business/images/msfb-wn-1801-products-services.png b/store-for-business/images/msfb-wn-1801-products-services.png
deleted file mode 100644
index dc98ffd2e4..0000000000
Binary files a/store-for-business/images/msfb-wn-1801-products-services.png and /dev/null differ
diff --git a/store-for-business/images/msft-accept-partner.png b/store-for-business/images/msft-accept-partner.png
deleted file mode 100644
index 6b04d822a4..0000000000
Binary files a/store-for-business/images/msft-accept-partner.png and /dev/null differ
diff --git a/store-for-business/images/office-logo.png b/store-for-business/images/office-logo.png
deleted file mode 100644
index 04d970bb47..0000000000
Binary files a/store-for-business/images/office-logo.png and /dev/null differ
diff --git a/store-for-business/images/perf-improvement-icon.png b/store-for-business/images/perf-improvement-icon.png
deleted file mode 100644
index 74be488894..0000000000
Binary files a/store-for-business/images/perf-improvement-icon.png and /dev/null differ
diff --git a/store-for-business/images/private-store-icon.png b/store-for-business/images/private-store-icon.png
deleted file mode 100644
index f09679693f..0000000000
Binary files a/store-for-business/images/private-store-icon.png and /dev/null differ
diff --git a/store-for-business/images/product-and-service-icon.png b/store-for-business/images/product-and-service-icon.png
deleted file mode 100644
index c18d3c8266..0000000000
Binary files a/store-for-business/images/product-and-service-icon.png and /dev/null differ
diff --git a/store-for-business/images/products-and-services-photoshop.png b/store-for-business/images/products-and-services-photoshop.png
deleted file mode 100644
index f20c074aeb..0000000000
Binary files a/store-for-business/images/products-and-services-photoshop.png and /dev/null differ
diff --git a/store-for-business/images/products-and-services-ppt.png b/store-for-business/images/products-and-services-ppt.png
deleted file mode 100644
index 9b4d77fb7c..0000000000
Binary files a/store-for-business/images/products-and-services-ppt.png and /dev/null differ
diff --git a/store-for-business/images/purchasing-roles.png b/store-for-business/images/purchasing-roles.png
deleted file mode 100644
index e45d9294f5..0000000000
Binary files a/store-for-business/images/purchasing-roles.png and /dev/null differ
diff --git a/store-for-business/images/security-groups-icon.png b/store-for-business/images/security-groups-icon.png
deleted file mode 100644
index 328a60837d..0000000000
Binary files a/store-for-business/images/security-groups-icon.png and /dev/null differ
diff --git a/store-for-business/images/sfb-allow-shop-setting.png b/store-for-business/images/sfb-allow-shop-setting.png
deleted file mode 100644
index 52320751ac..0000000000
Binary files a/store-for-business/images/sfb-allow-shop-setting.png and /dev/null differ
diff --git a/store-for-business/images/skype-icon-wn.png b/store-for-business/images/skype-icon-wn.png
deleted file mode 100644
index d9819ae0ae..0000000000
Binary files a/store-for-business/images/skype-icon-wn.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-distribute.png b/store-for-business/images/wsfb-distribute.png
deleted file mode 100644
index d0482f6ebe..0000000000
Binary files a/store-for-business/images/wsfb-distribute.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-firstrun.png b/store-for-business/images/wsfb-firstrun.png
deleted file mode 100644
index 2673567a1e..0000000000
Binary files a/store-for-business/images/wsfb-firstrun.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-inventory-viewlicense.png b/store-for-business/images/wsfb-inventory-viewlicense.png
deleted file mode 100644
index 9fafad1aff..0000000000
Binary files a/store-for-business/images/wsfb-inventory-viewlicense.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-inventory.png b/store-for-business/images/wsfb-inventory.png
deleted file mode 100644
index b060fb30e4..0000000000
Binary files a/store-for-business/images/wsfb-inventory.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-inventoryaddprivatestore.png b/store-for-business/images/wsfb-inventoryaddprivatestore.png
deleted file mode 100644
index bb1152e35b..0000000000
Binary files a/store-for-business/images/wsfb-inventoryaddprivatestore.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-landing.png b/store-for-business/images/wsfb-landing.png
deleted file mode 100644
index beae0b52af..0000000000
Binary files a/store-for-business/images/wsfb-landing.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-licenseassign.png b/store-for-business/images/wsfb-licenseassign.png
deleted file mode 100644
index 5904abb3b9..0000000000
Binary files a/store-for-business/images/wsfb-licenseassign.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-licensedetails.png b/store-for-business/images/wsfb-licensedetails.png
deleted file mode 100644
index 53e0f5c935..0000000000
Binary files a/store-for-business/images/wsfb-licensedetails.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-licensereclaim.png b/store-for-business/images/wsfb-licensereclaim.png
deleted file mode 100644
index 9f94cd3600..0000000000
Binary files a/store-for-business/images/wsfb-licensereclaim.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-manageinventory.png b/store-for-business/images/wsfb-manageinventory.png
deleted file mode 100644
index 9a544ddc21..0000000000
Binary files a/store-for-business/images/wsfb-manageinventory.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-offline-distribute-mdm.png b/store-for-business/images/wsfb-offline-distribute-mdm.png
deleted file mode 100644
index ec0e77a9a9..0000000000
Binary files a/store-for-business/images/wsfb-offline-distribute-mdm.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-onboard-1.png b/store-for-business/images/wsfb-onboard-1.png
deleted file mode 100644
index 012e91a845..0000000000
Binary files a/store-for-business/images/wsfb-onboard-1.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-onboard-2.png b/store-for-business/images/wsfb-onboard-2.png
deleted file mode 100644
index 2ff98fb1f7..0000000000
Binary files a/store-for-business/images/wsfb-onboard-2.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-onboard-3.png b/store-for-business/images/wsfb-onboard-3.png
deleted file mode 100644
index ed9a61d353..0000000000
Binary files a/store-for-business/images/wsfb-onboard-3.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-onboard-4.png b/store-for-business/images/wsfb-onboard-4.png
deleted file mode 100644
index d99185ddc6..0000000000
Binary files a/store-for-business/images/wsfb-onboard-4.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-onboard-5.png b/store-for-business/images/wsfb-onboard-5.png
deleted file mode 100644
index 68049f4425..0000000000
Binary files a/store-for-business/images/wsfb-onboard-5.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-onboard-7.png b/store-for-business/images/wsfb-onboard-7.png
deleted file mode 100644
index 38b7348b21..0000000000
Binary files a/store-for-business/images/wsfb-onboard-7.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-online-distribute-mdm.png b/store-for-business/images/wsfb-online-distribute-mdm.png
deleted file mode 100644
index 4b0f7cbf3a..0000000000
Binary files a/store-for-business/images/wsfb-online-distribute-mdm.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-paid-app-temp.png b/store-for-business/images/wsfb-paid-app-temp.png
deleted file mode 100644
index 89e3857d07..0000000000
Binary files a/store-for-business/images/wsfb-paid-app-temp.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-permissions-assignrole.png b/store-for-business/images/wsfb-permissions-assignrole.png
deleted file mode 100644
index de2e1785ba..0000000000
Binary files a/store-for-business/images/wsfb-permissions-assignrole.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-private-store-gpo.png b/store-for-business/images/wsfb-private-store-gpo.png
deleted file mode 100644
index 5e7fe44ec2..0000000000
Binary files a/store-for-business/images/wsfb-private-store-gpo.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-privatestore.png b/store-for-business/images/wsfb-privatestore.png
deleted file mode 100644
index 74c9f1690d..0000000000
Binary files a/store-for-business/images/wsfb-privatestore.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-privatestoreapps.png b/store-for-business/images/wsfb-privatestoreapps.png
deleted file mode 100644
index 1ddb543796..0000000000
Binary files a/store-for-business/images/wsfb-privatestoreapps.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-renameprivatestore.png b/store-for-business/images/wsfb-renameprivatestore.png
deleted file mode 100644
index c6db282581..0000000000
Binary files a/store-for-business/images/wsfb-renameprivatestore.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-settings-mgmt.png b/store-for-business/images/wsfb-settings-mgmt.png
deleted file mode 100644
index 2a7b590d19..0000000000
Binary files a/store-for-business/images/wsfb-settings-mgmt.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-settings-permissions.png b/store-for-business/images/wsfb-settings-permissions.png
deleted file mode 100644
index 63d04d270b..0000000000
Binary files a/store-for-business/images/wsfb-settings-permissions.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-wsappaddacct.png b/store-for-business/images/wsfb-wsappaddacct.png
deleted file mode 100644
index 5c0bd9a4ce..0000000000
Binary files a/store-for-business/images/wsfb-wsappaddacct.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-wsappprivatestore.png b/store-for-business/images/wsfb-wsappprivatestore.png
deleted file mode 100644
index 48d9f79892..0000000000
Binary files a/store-for-business/images/wsfb-wsappprivatestore.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-wsappsignin.png b/store-for-business/images/wsfb-wsappsignin.png
deleted file mode 100644
index c2c2631a94..0000000000
Binary files a/store-for-business/images/wsfb-wsappsignin.png and /dev/null differ
diff --git a/store-for-business/images/wsfb-wsappworkacct.png b/store-for-business/images/wsfb-wsappworkacct.png
deleted file mode 100644
index 5eb9035124..0000000000
Binary files a/store-for-business/images/wsfb-wsappworkacct.png and /dev/null differ
diff --git a/store-for-business/index.md b/store-for-business/index.md
deleted file mode 100644
index b018c5e595..0000000000
--- a/store-for-business/index.md
+++ /dev/null
@@ -1,44 +0,0 @@
----
-title: Microsoft Store for Business and Education (Windows 10)
-description: Welcome to the Microsoft Store for Business and Education. You can use Microsoft Store, to find, acquire, distribute, and manage apps for your organization or school.
-ms.assetid: 527E611E-4D47-44F0-9422-DCC2D1ACBAB8
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: high
-ms.date: 05/24/2023
----
-
-# Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Welcome to the Microsoft Store for Business and Education! You can use Microsoft Store to find, acquire, distribute, and manage apps for your organization or school.
-
-> [!NOTE]
->
-> - As of April 14, 2021, all apps that charge a base price above free are no longer available to buy in the Microsoft Store for Business and Education. If you've already bought a paid app, you can still use it, but no new purchases are possible from businessstore.microsoft.com or educationstore.microsoft.com. Also, you can't buy additional licenses for apps you already bought. You can still assign and reassign licenses for apps that you already own and use from the private store. Apps with a base price of "free" are still available. This change doesn't impact apps in the Microsoft Store on Windows 10.
->
-> - Also as of April 14, 2021, you must sign in with your Microsoft Entra account before you browse Microsoft Store for Business and Education.
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Sign up and get started](sign-up-microsoft-store-for-business-overview.md) | IT admins can sign up for the Microsoft Store for Business and Education, and get started working with apps. |
-| [Find and acquire apps](find-and-acquire-apps-overview.md) | Use the Microsoft Store for Business and Education to find apps for your organization. You can also work with developers to create line-of-business apps that are only available to your organization. |
-| [Manage apps](manage-apps-microsoft-store-for-business-overview.md) | Manage settings and access to apps in Microsoft Store for Business and Education. |
-| [Device Guard signing portal](device-guard-signing-portal.md) | Device Guard signing is a Device Guard feature that is available in the Microsoft Store for Business and Education. It gives admins a single place to sign catalog files and code integrity policies. After admins have created catalog files for unsigned apps and signed the catalog files, they can add the signers to a code integrity policy. You can merge the code integrity policy with your existing policy to include your custom signing certificate. This allows you to trust the catalog files. |
-| [Manage settings in the Microsoft Store for Business and Education](manage-settings-microsoft-store-for-business.md) | You can add users and groups, as well as update some of the settings associated with the Microsoft Entra tenant |
-| [Troubleshoot Microsoft Store for Business and Education](troubleshoot-microsoft-store-for-business.md) | Troubleshooting topics for Microsoft Store for Business and Education. |
diff --git a/store-for-business/manage-access-to-private-store.md b/store-for-business/manage-access-to-private-store.md
deleted file mode 100644
index 7ebf151814..0000000000
--- a/store-for-business/manage-access-to-private-store.md
+++ /dev/null
@@ -1,46 +0,0 @@
----
-title: Manage access to private store (Windows 10)
-description: You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
-ms.assetid: 4E00109C-2782-474D-98C0-02A05BE613A5
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.date: 05/24/2023
----
-
-# Manage access to private store
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
-> The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-
-## Microsoft Store for Business tab removed
-
-In April 2023, the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. The Microsoft Store for Business tab will continue to be available on Hololens devices. Users will no longer be able to see products added to the private store within the Microsoft Store app and will need to go to the [Microsoft Store for Business](https://businessstore.microsoft.com/) website to access the private store.
-
-The [ApplicationManagement/RequirePrivateStoreOnly](/windows/client-management/mdm/policy-configuration-service-provider#ApplicationManagement_RequirePrivateStoreOnly) MDM policy and **Only display the private store within the Microsoft Store app** Group policy will block access to the Microsoft Store app entirely. With those policies in place, users may see one of the following errors in the Microsoft Store app.
-
-1. Microsoft Store is blocked + Check with your IT or system administrator + Report this problem + Code 0x700704E
-2. Try that again + Page could not be loaded. Please try that again + Refresh the page + Code 0x80131500
-3. This place is off-limits + Not sure how you got here, but there's nothing for you here. + Report this problem + Refresh this Page.
-
-## Manage private store access
-
-You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education.
-
-You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in Microsoft Store. Using the private store with the Microsoft Store for Business and Education, admins can curate the set of apps that are available.
-
-The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab on the [Microsoft Store for Business site](https://businessstore.microsoft.com/store/private-store), and is usually named for your company or organization. Only apps with online licenses can be added to the private store.
-
-## Related topics
-
-[Distribute apps using your private store](distribute-apps-from-your-private-store.md)\
-[Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-microsoft-store)
diff --git a/store-for-business/manage-apps-microsoft-store-for-business-overview.md b/store-for-business/manage-apps-microsoft-store-for-business-overview.md
deleted file mode 100644
index ead437bd5b..0000000000
--- a/store-for-business/manage-apps-microsoft-store-for-business-overview.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-title: Manage products and services in Microsoft Store for Business (Windows 10)
-description: Manage apps, software, devices, products and services in Microsoft Store for Business.
-ms.assetid: 2F65D4C3-B02C-41CC-92F0-5D9937228202
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Manage apps in Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Manage products and services in Microsoft Store for Business and Microsoft Store for Education. This includes apps, software, products, devices, and services available under **Products & services**.
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Manage access to private store](manage-access-to-private-store.md) | You can manage access to your private store in Store for Business. |
-| [App inventory management for Microsoft Store for Business and Education](app-inventory-management-microsoft-store-for-business.md) | You can manage all apps that you've acquired on your **Apps & software** page. |
-| [Manage private store settings](manage-private-store-settings.md) | The private store is a feature in Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store. |
-| [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md) | For companies or organizations using mobile device management (MDM) tools, those tools can synchronize with Microsoft Store for Business inventory to manage apps with offline licenses. Microsoft Store management tool services work with your third-party management tool to manage content. |
-| [Manage Windows device deployment with Windows Autopilot Deployment](add-profile-to-devices.md) | In Microsoft Store for Business, you can manage devices for your organization and apply an Autopilot deployment profile to your devices. When people in your organization run the out-of-box experience on the device, the profile configures Windows based on the Autopilot deployment profile you applied to the device. |
-| [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) | Use PowerShell cmdlets to automate basic app license assignment. |
-| [Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business](manage-mpsa-software-microsoft-store-for-business.md) | Software purchased with the Microsoft Products and Services Agreement (MPSA) can be managed in Microsoft Store for Business and Education. This allows customers to manage online software purchases in one location. |
diff --git a/store-for-business/manage-orders-microsoft-store-for-business.md b/store-for-business/manage-orders-microsoft-store-for-business.md
deleted file mode 100644
index 22ae3cf389..0000000000
--- a/store-for-business/manage-orders-microsoft-store-for-business.md
+++ /dev/null
@@ -1,72 +0,0 @@
----
-title: Manage app orders in Microsoft Store for Business or Microsoft Store for Education (Windows 10)
-description: You can view your order history with Microsoft Store for Business or Microsoft Store for Education.
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
-ms.reviewer:
----
-
-# Manage app orders in Microsoft Store for Business and Education
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-After you've acquired apps, you can review order information and invoices on **Order history**. On this page, you can view invoices, and request refunds.
-
-**Order history** lists orders in chronological order and shows:
-
-- Date ordered
-- Product name
-- Product publisher
-- Total cost
-- Order status.
-
-Click to expand an order, and the following info is available:
-
-- Who purchased the app
-- Order number
-- Quantity purchased
-- Cost breakdown
-- Links to view your invoice, buy more, or request a refund
-
-## Invoices
-
-Invoices for orders are available approximately 24 hours after your purchase. The link opens a .pdf that you can save for your records.
-
-## Refund an order
-
-Refunds work a little differently for free apps, and apps that have a price. In both cases, you must reclaim licenses before requesting a refund.
-
-**Refunds for free apps**
-
-For free apps, there isn't really a refund to request -- you're removing the app from your inventory. You must first reclaim any assigned licenses, and then you can remove the app from your organization's inventory.
-
-**Refunds for apps that have a price**
-
-There are a few requirements for apps that have a price:
-
-- **Timing** - Refunds are available for the first 30 days after you place your order. For example, if your order is placed on June 1, you can self-refund through June 30.
-- **Available licenses** - You need to have enough available licenses to cover the number of licenses in the order you are refunding. For example, if you purchased 10 copies of an app and you want to request a refund, you must have at least 10 licenses of the app available in your inventory -- those 10 licenses can't be assigned to people in your organization.
-- **Whole order refunds only** - You must refund the complete amount of apps in an order. You can't refund a part of an order. For example, if you purchased 10 copies of an app, but later found you only needed 5 copies, you'll need to request a refund for the 10 apps, and then make a separate order for 5 apps. If you have had multiple orders of the same app, you can refund one order but still keep the rest of the inventory.
-
-**To refund an order**
-
-Reclaim licenses, and then request a refund. If you haven't assigned licenses, start on step 5.
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then choose **Apps & software**.
-3. Find the app you want to refund, click the ellipses under **Actions**, and then choose **View license details**.
-4. Select the people who you want to reclaim license from, click the ellipses under **Actions**, and then choose **Reclaim licenses**.
-5. Click **Order history**, click the order you want to refund, and click **Refund order**.
-
-For free apps, the app will be removed from your inventory in **Apps & software**.
-
-For apps with a price, your payment option will be refunded with the cost of the app, and the app will be removed from your inventory.
diff --git a/store-for-business/manage-private-store-settings.md b/store-for-business/manage-private-store-settings.md
deleted file mode 100644
index fe4d105828..0000000000
--- a/store-for-business/manage-private-store-settings.md
+++ /dev/null
@@ -1,115 +0,0 @@
----
-title: Manage private store settings (Windows 10)
-description: The private store is a feature in the Microsoft Store for Business and Microsoft Store for Education that organizations receive during the sign up process.
-ms.assetid: 2D501538-0C6E-4408-948A-2BF5B05F7A0C
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.date: 05/24/2023
-ms.localizationpriority: medium
----
-
-# Manage private store settings
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-The private store is a feature in Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store.
-
-The name of your private store is shown on a tab in Microsoft Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com).
-
-
-
-You can change the name of your private store in Microsoft Store.
-
-## Change private store name
-**To change the name of your private store**
-
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Settings**, click **Distribute**.
-3. In the **Private store** section, click **Change**.
-4. Type a new display name for your private store, and click **Save**.
-
- 
-
-## Private store collections
-You can create collections of apps within your private store. Collections allow you to group or categorize apps - you might want a group of apps for different job functions in your company, or classes in your school.
-
-**To add a Collection to your private store**
-
-You can add a collection to your private store from the private store, or from the details page for an app.
-
-**From private store**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click your private store.
-
- 
-3. Click **Add a Collection**.
-
- 
-
-4. Type a name for your collection, and then click **Next**.
-5. Add at least one product to your collection, and then click **Done**. You can search for apps and refine results based on the source of the app, or the supported devices.
-
-> [!NOTE]
-> New collections require at least one app, or they will not be created.
-
-**From app details page**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then click **Products & services**.
-3. Under **Apps & software**, choose an app you want to include in a new collection.
-4. Under **Private Store Collections**, click **Add a collection**.
-
- 
-
-5. Type a name for your collection, and then click **Next**.
-6. Add at least one product to your collection, and then click **Done**.
-
-Currently, changes to collections will generally show within minutes in the Microsoft Store app on Windows 10. In some cases, it may take up an hour.
-
-## Edit Collections
-If you've already added a Collection to your private store, you can easily add and remove products, or rename the collection.
-
-**To add or remove products from a collection**
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click your private store.
-
- 
-
-3. Click the ellipses next to the collection name, and click **Edit collection**.
-4. Add or remove products from the collection, and then click **Done**.
-
-You can also add an app to a collection from the app details page.
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, and then click **Products & services**.
-3. Under **Apps & software**, choose an app you want to include in a new collection.
-4. Under **Private Store Collections**, turn on the collection you want to add the app to.
-
- 
-
-## Private store performance
-We've recently made performance improvements for changes in the private store. This table includes common actions, and the current estimate for amount of time required for the change.
-
-| Action | Estimated time |
-| ------------------------------------------------------ | -------------- |
-| Add a product to the private store - Apps recently added to your inventory, including line-of-business (LOB) apps and new purchases, will take up to 36 hours to add to the private store. That time begins when the product is purchased, or added to your inventory. - It will take an additional 36 hours for the product to be searchable in private store, even if you see the app available from the private store tab. | - 15 minutes: available on private store tab - 36 hours: searchable in private store - 36 hours: searchable in private store tab |
-| Remove a product from private store | - 15 minutes: private store tab - 36 hours: searchable in private store |
-| Accept a new LOB app into your inventory (under **Products & services**) | - 15 minutes: available on private store tab - 36 hours: searchable in private store |
-| Create a new collection | 15 minutes|
-| Edit or remove a collection | 15 minutes |
-| Create private store tab | 4-6 hours |
-| Rename private store tab | 4-6 hours |
diff --git a/store-for-business/manage-settings-microsoft-store-for-business.md b/store-for-business/manage-settings-microsoft-store-for-business.md
deleted file mode 100644
index 7ae3789d4b..0000000000
--- a/store-for-business/manage-settings-microsoft-store-for-business.md
+++ /dev/null
@@ -1,36 +0,0 @@
----
-title: Manage settings for Microsoft Store for Business and Microsoft Store for Education (Windows 10)
-description: You can add users and groups, as well as update some of the settings associated with the Microsoft Entra tenant.
-ms.assetid: E3283D77-4DB2-40A9-9479-DDBC33D5A895
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Manage settings for Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-You can add users and groups, as well as update some of the settings associated with the Microsoft Entra tenant.
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Update Microsoft Store for Business and Education account settings](update-microsoft-store-for-business-account-settings.md) | **Billing - Account profile** in Microsoft Store for Business shows information about your organization that you can update. Payment options can be managed on **Billing - Payment methods**, and offline license settings can be managed on **Settings - Shop**. |
-| [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-microsoft-store-for-business.md) | Microsoft Store for Business manages permissions with a set of roles. You can [assign these roles to individuals in your organization](roles-and-permissions-microsoft-store-for-business.md) and to groups.|
-| [Understand your invoice](billing-understand-your-invoice-msfb.md) | Information on invoices for products and services bought under the Microsoft Customer Agreement.|
diff --git a/store-for-business/manage-users-and-groups-microsoft-store-for-business.md b/store-for-business/manage-users-and-groups-microsoft-store-for-business.md
deleted file mode 100644
index 792c6de5e0..0000000000
--- a/store-for-business/manage-users-and-groups-microsoft-store-for-business.md
+++ /dev/null
@@ -1,52 +0,0 @@
----
-title: Manage user accounts in Microsoft Store for Business and Microsoft Store for Education (Windows 10)
-description: Microsoft Store for Business and Microsoft Store for Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.
-ms.assetid: 5E7FA071-CABD-4ACA-8AAE-F549EFCE922F
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Manage user accounts in Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can [assign these roles to individuals in your organization](roles-and-permissions-microsoft-store-for-business.md), but not to groups.
-
-
-
-## Why Microsoft Entra accounts?
-For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and Microsoft Store for Business.
-
-Microsoft Entra ID is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Microsoft Entra identity and access management includes:
-
-- Single sign-on to any cloud and on-premises web app.
-- Works with multiple platforms and devices.
-- Integrate with on-premises Active Directory.
-
-For more information on Microsoft Entra ID, see [About Office 365 and Microsoft Entra ID](/previous-versions//dn509517(v=technet.10)), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
-
-
-
-## Add user accounts to your Microsoft Entra directory
-If you created a new Microsoft Entra directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Microsoft Entra directory. However, adding user accounts to your Microsoft Entra directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see [Roles and permissions in the Store for Business.](roles-and-permissions-microsoft-store-for-business.md)
-
-You can use the [Office 365 admin dashboard](https://portal.office.com/adminportal) or [Azure management portal](https://portal.azure.com/) to add user accounts to your Microsoft Entra directory. If you'll be using Azure management portal, you'll need an active subscription to [Azure management portal](https://go.microsoft.com/fwlink/p/?LinkId=708617).
-
-For more information, see:
-- [Add user accounts using Office 365 admin dashboard](/microsoft-365/admin/add-users)
-- [Add user accounts using Azure management portal](/azure/active-directory/fundamentals/add-users-azure-active-directory)
diff --git a/store-for-business/microsoft-store-for-business-education-powershell-module.md b/store-for-business/microsoft-store-for-business-education-powershell-module.md
deleted file mode 100644
index cc4aa9686d..0000000000
--- a/store-for-business/microsoft-store-for-business-education-powershell-module.md
+++ /dev/null
@@ -1,156 +0,0 @@
----
-title: Microsoft Store for Business and Education PowerShell module - preview
-description: Preview version of PowerShell module
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done
-ms.date: 05/24/2023
-ms.reviewer:
----
-
-# Microsoft Store for Business and Education PowerShell module - preview
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Microsoft Store for Business and Education PowerShell module (preview) is now available on [PowerShell Gallery](https://go.microsoft.com/fwlink/?linkid=853459).
-
-> [!NOTE]
-> This is a preview and not intended for production environments. For production environments, continue to use **Microsoft Store for Business and Education** or your MDM tool to manage licenses. The sample scripts are not supported under any Microsoft standard support program or service. The sample scripts are provided AS IS without warranty of any kind. Microsoft further disclaims all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample scripts and documentation remains with you. In no event shall Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has been advised of the possibility of such damages.
-
-You can use the PowerShell module to:
-- View items you've purchased - shown in **Products & services**
-- Manage licenses - assigning and removing
-- Perform bulk operations with .csv files - automates license management for customers with larger numbers of licenses
-
->[!NOTE]
->Assigning apps to groups is not supported via this module. Instead, we recommend leveraging the Microsoft Entra ID or [Microsoft Graph PowerShell](/powershell/microsoftgraph/overview) Modules to save members of a group to a CSV file and follow instructions below on how to use CSV file to manage assignments.
-
-## Requirements
-To use the Microsoft Store for Business and Education PowerShell module, you'll need:
-- Administrator permission for the device
-- Admin role for Microsoft Store for Business and Education
-
-
-## Get started with Microsoft Store for Business and Education PowerShell module
-All of the **Microsoft Store for Business and Education** PowerShell cmdlets follow the *Verb*-MSStore*Noun* pattern to clearly indicate that they work with **Microsoft Store for Business and Education** PowerShell module. You will need to install the module on your Windows 10 device once and then import it into each PowerShell session you start.
-
-## Install Microsoft Store for Business and Education PowerShell module
-> [!NOTE]
-> Installing **Microsoft Store for Business and Education** PowerShell model using **PowerShellGet** requires [Windows Management Framework 5.0](https://www.microsoft.com/download/details.aspx?id=54616). The framework is included with Windows 10 by default).
-
-To install **Microsoft Store for Business and Education PowerShell** with PowerShellGet, run this command:
-
-```powershell
-# Install the Microsoft Store for Business and Education PowerShell module from PowerShell Gallery
-
-Install-Module -Name MSStore
-```
-
-## Import Microsoft Store for Business and Education PowerShell module into the PowerShell session
-Once you install the module on your Windows 10 device, you will need to then import it into each PowerShell session you start.
-
-```powershell
-# Import the MSStore module into this session
-
-Import-Module -Name MSStore
-```
-
-Next, authorize the module to call **Microsoft Store for Business and Education** on your behalf. This step is required once, per user of the PowerShell module.
-
-To authorize the PowerShell module, run this command. You'll need to sign-in with your work or school account, and authorize the module to access your tenant.
-
-```powershell
-# Grant MSStore Access to your Microsoft Store for Business and Education
-
-Grant-MSStoreClientAppAccess
-```
-You will be prompted to sign in with your work or school account and then to authorize the PowerShell Module to access your **Microsoft Store for Business and Education** account. Once the module has been imported into the current PowerShell session and authorized to call into your **Microsoft Store for Business and Education** account, Microsoft Graph PowerShell cmdlets are loaded and ready to be used.
-
-## View items in Products and Services
-Service management should encounter no breaking changes as a result of the separation of Azure Service Management and **Microsoft Store for Business and Education PowerShell** preview.
-
-```powershell
-# View items in inventory (Apps & software)
-
-Get-MSStoreInventory
-```
-
->[!TIP]
->**Get-MSStoreInventory** won't return the product name for line-of-business apps. To get the product ID and SKU for a line-of-business app:
->
->1. Sign in to [Microsoft Store for Business](https://go.microsoft.com/fwlink/p/?LinkId=691845) or [Microsoft Store for Education](https://businessstore.microsoft.com/).
->2. Click **Manage** and then choose **Apps & software**.
->3. Click the line-of-business app. The URL of the page will contain the product ID and SKU as part of the URL. For example:
->
-
-## View people assigned to a product
-Most items in **Products and Services** in **Microsoft Store for Business and Education** need to be assigned to people in your org. You can view the people in your org assigned to a specific product by using these commands:
-
-```powershell
-# View products assigned to people
-
-Get-MSStoreSeatAssignments -ProductId 9NBLGGH4R2R6 -SkuId 0016
-```
-
-> [!Important]
-> Microsoft Store for Business and Education identifies Minecraft: Education Edition license types using a combination of Product ID and SKU ID. To manage license assignments for your Minecraft: Education Edition, you need to specify Product and SKU IDs for the licenses you want to manage in the cmdlet. The following table lists the Product and SKU IDs.
-
-
-| License Type | Product ID | SKU ID |
-| ------------ | -----------| -------|
-| Purchased through Microsoft Store for Business and Education with a credit card | CFQ7TTC0K5DR | 0001 |
-| Purchased through Microsoft Store for Business and Education with an invoice | CFQ7TTC0K5DR | 0004 |
-| Purchased through Microsoft Volume Licensing Agreement | CFQ7TTC0K5DR | 0002 |
-| Acquired through Windows 10 device promotion | CFQ7TTC0K5DR | 0005 |
-
-## Assign or reclaim products
-Once you have enumerated items in **Products and Service**, you can assign or reclaim licenses to and from people in your org.
-
-These commands assign a product to a user and then reclaim it.
-
-```powershell
-# Assign Product (Product ID and SKU ID combination) to a User (user@host.com)
-
-Add-MSStoreSeatAssignment -ProductId 9NBLGGH4R2R6 -SkuId 0016 -Username 'user@myorganization.onmicrosoft.com'
-
-# Reclaim a product (Product ID and SKU ID combination) from a User (user@host.com)
-
-Remove-MSStoreSeatAssignment -ProductId 9NBLGGH4R2R6 -SkuId 0016 -Username 'user@myorganization.onmicrosoft.com'
-```
-
-## Assign or reclaim a product with a .csv file
-You can also use the PowerShell module to perform bulk operations on items in **Product and Services**. You'll need a .CSV file with at least one column for "Principal Names" (for example, user@host.com). You can create such a CSV using the AzureAD PowerShell Module.
-
-**To assign or reclaim seats in bulk:**
-
-```powershell
-# Assign Product (Product ID and SKU ID combination) to a User (user@host.com)
-
-Add-MSStoreSeatAssignments -ProductId 9NBLGGH4R2R6 -SkuId 0016 -PathToCsv C:\People.csv -ColumnName UserPrincipalName
-
-# Reclaim a product (Product ID and SKU ID combination) from a User (user@host.com)
-
-Remove-MSStoreSeatAssignments -ProductId 9NBLGGH4R2R6 -SkuId 0016 -PathToCsv C:\People.csv -ColumnName UserPrincipalName
-```
-
-## Uninstall Microsoft Store for Business and Education PowerShell module
-You can remove **Microsoft Store for Business and Education PowerShell** from your computer by running the following PowerShell Command.
-
-```powershell
-# Uninstall the MSStore Module
-
-Get-InstalledModule -Name "MSStore" -RequiredVersion 1.0 | Uninstall-Module
-```
diff --git a/store-for-business/microsoft-store-for-business-overview.md b/store-for-business/microsoft-store-for-business-overview.md
deleted file mode 100644
index c0e3db882e..0000000000
--- a/store-for-business/microsoft-store-for-business-overview.md
+++ /dev/null
@@ -1,389 +0,0 @@
----
-title: Microsoft Store for Business and Microsoft Store for Education overview (Windows 10)
-description: With Microsoft Store for Business and Microsoft Store for Education, organizations and schools can make volume purchases of Windows apps.
-ms.assetid: 9DA71F6B-654D-4121-9A40-D473CC654A1C
-ms.reviewer:
-ms.pagetype: store
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Microsoft Store for Business and Microsoft Store for Education overview
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-> [!NOTE]
-> As of April 14th, 2021, only free apps are available in Microsoft Store for Business and Education. For more information, see [Microsoft Store for Business and Education](index.md).
-
-Designed for organizations, Microsoft Store for Business and Microsoft Store for Education give IT decision makers and administrators in businesses or schools a flexible way to find, acquire, manage, and distribute free and paid apps in select markets to Windows 10 devices in volume. IT administrators can manage Microsoft Store apps and private line-of-business apps in one inventory, plus assign and re-use licenses as needed. You can choose the best distribution method for your organization: directly assign apps to individuals and teams, publish apps to private pages in Microsoft Store, or connect with management solutions for more options. There will be no support for Microsoft Store for Business and Education on Windows 11.
-
-> [!IMPORTANT]
-> Customers who are in the Office 365 GCC environment or are eligible to buy with government pricing cannot use Microsoft Store for Business.
-
-## Features
-Organizations or schools of any size can benefit from using Microsoft Store for Business or Microsoft Store for Education:
-
-- **Scales to fit the size of your business** - For smaller businesses, with Microsoft Entra accounts or Office 365 accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate Microsoft Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts.
-- **Bulk app acquisition** - Acquire apps in volume from Microsoft Store for Business.
-- **Centralized management** – Microsoft Store provides centralized management for inventory, billing, permissions, and order history. You can use Microsoft Store to view, manage and distribute items purchased from:
- - **Microsoft Store for Business** – Apps acquired from Microsoft Store for Business
- - **Microsoft Store for Education** – Apps acquired from Microsoft Store for Education
- - **Office 365** – Subscriptions
- - **Volume licensing** - Apps purchased with volume licensing
-- **Private store** - Create a private store for your business that's easily available from any Windows 10 device. Your private store is available from Microsoft Store on Windows 10, or with a browser on the Web. People in your organization can download apps from your organization's private store on Windows 10 devices.
-- **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices:
- - Distribute through Microsoft Store services. You can assign apps to individual employees, or make apps available to all employees in your private store.
- - Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images.
- - Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images.
-- **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options.
-- **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps.
-- **Up-to-date apps** - Microsoft Store manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees.
-- **Office app launcher** Office apps while working with Microsoft Store for Business.
-- **Find a partner** – Search and find a Microsoft Partner who can assist you with Microsoft solutions for your business.
-
-## Prerequisites
-
-You'll need this software to work with Store for Business and Education.
-
-### Required
-
-- Admins working with Store for Business and Education need a browser compatible with Microsoft Store running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, or current versions of Microsoft Edge, Chrome or Firefox. JavaScript must be supported and enabled.
-- Employees using apps from Store for Business and Education need at least Windows 10, version 1511 running on a PC or mobile device.
-
-Microsoft Entra accounts for your employees:
-
-- Admins need Microsoft Entra accounts to sign up for Store for Business and Education, and then to sign in, get apps, distribute apps, and manage app licenses. You can sign up for Microsoft Entra accounts as part of signing up for Store for Business and Education.
-- Employees need Microsoft Entra account when they access Store for Business content from Windows devices.
-- If you use a management tool to distribute and manage online-licensed apps, all employees will need a Microsoft Entra account
-- For offline-licensed apps, Microsoft Entra accounts are not required for employees.
-- Admins can add or remove user accounts in the Microsoft 365 admin center, even if you don't have an Office 365 subscription. You can access the Office 365 admin portal directly from the Store for Business and Education.
-
-For more information on Microsoft Entra ID, see [About Office 365 and Microsoft Entra ID](/previous-versions//dn509517(v=technet.10)), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
-
-### Optional
-
-While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. A couple of things to note about management tools:
-
-- Need to integrate with Windows 10 management framework and Microsoft Entra ID.
-- Need to sync with the Store for Business inventory to distribute apps.
-
-## How does the Store for Business and Education work?
-
-## Sign up!
-
-The first step for getting your organization started with Store for Business and Education is signing up. Sign up using an existing account (the same one you use for Office 365, Dynamics 365, Intune, Azure, etc.) or we'll quickly create an account for you. You must be a Global Administrator for your organization.
-
-## Set up
-
-After your admin signs up for the Store for Business and Education, they can assign roles to other employees in your company or school. The admin needs Microsoft Entra user Admin permissions to assign Microsoft Store for Business and Education roles. These are the roles and their permissions.
-
-| Permission | Account settings | Acquire apps | Distribute apps | Device Guard signing |
-| ---------- | ---------------- | ------------ | --------------- | -------------------- |
-| Admin | ✔️ | ✔️ | ✔️ | |
-| Purchaser | | ✔️ | ✔️ | |
-| Device Guard signer | | | | ✔️ |
-| Basic purchaser | | ✔️ | ✔️ | |
-
-> [!NOTE]
-> Currently, the Basic purchaser role is only available for schools using Microsoft Store for Education. For more information, see [Microsoft Store for Education permissions](/education/windows/education-scenarios-store-for-business?toc=%2fmicrosoft-store%2feducation%2ftoc.json#manage-domain-settings).
-
-In some cases, admins will need to add Microsoft Entra accounts for their employees. For more information, see [Manage user accounts and groups](manage-users-and-groups-microsoft-store-for-business.md).
-
-Also, if your organization plans to use a management tool, you'll need to configure your management tool to sync with Store for Business and Education.
-
-## Get apps and content
-
-Once signed in to the Microsoft Store, you can browse and search for all products in the Store for Business and Education catalog. Some apps are free, and some apps charge a price. We're continuing to add more paid apps to the Store for Business and Education. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card, and some items can be paid for with an invoice. We'll be adding more payment options over time.
-
-**App types** - These app types are supported in the Store for Business and Education:
-
-- Universal Windows Platform apps
-- Universal Windows apps, by device: Phone, Surface Hub, IOT devices, HoloLens
-
-Apps purchased from the Store for Business and Education only work on Windows 10 devices.
-
-Line-of-business (LOB) apps are also supported through Microsoft Store. You can invite IT developers or ISVs to be LOB publishers for your organization. This allows them to submit apps via the developer center that are only available to your organization through Store for Business and Education. These apps can be distributed using the distribution methods discussed in this topic. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
-
-**App licensing model**
-
- Store for Business and Education supports two license options for apps: online and offline. **Online** licensing is the default licensing model and is similar to the licensing model for Microsoft Store. Online licensed apps require users and devices to connect to Microsoft Store services to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt in their apps for offline licensing when they submit them to the developer center.
-
-For more information, see [Apps in Microsoft Store for Business](apps-in-microsoft-store-for-business.md#licensing-model).
-
-## Distribute apps and content
-
-App distribution is handled through two channels, either through the Microsoft Store for Business, or using a management tool. You can use either, or both distribution methods in your organization.
-
-**Distribute with Store for Business and Education**:
-- Email link – After purchasing an app, Admins can send employees a link in an email message. Employees can click the link to install the app.
-- Curate private store for all employees – A private store can include content you've purchased from Microsoft Store for Business, and your line-of-business apps that you've submitted to Microsoft Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed.
-- To use the options above users must be signed in with a Microsoft Entra account on a Windows 10 device. Licenses are assigned as individuals install apps.
-
-**Using a management tool** – For larger organizations that want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options:
-- Scoped content distribution – Ability to scope content distribution to specific groups of employees.
-- Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees.
-
-Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata, management tools can enable portals or apps as a destination for employees to acquire apps.
-
-For more information, see [Distribute apps to your employees from Microsoft Store for Business](distribute-apps-to-your-employees-microsoft-store-for-business.md).
-
-## Manage Microsoft Store for Business settings and content
-
-Once you are signed up with the Business store and have purchased apps, Admins can manage Store for Business settings and inventory.
-
-**Manage Microsoft Store for Business settings**
-- Assign and change roles for employees or groups
-- Device Guard signing
-- Register a management server to deploy and install content
-- Manage relationships with LOB publishers
-- Manage offline licenses
-- Update the name of your private store
-
-**Manage inventory**
-- Assign app licenses to employees
-- Reclaim and reassign app licenses
-- Manage app updates for all apps, or customize updates for each app. Online apps will automatically update from the Store. Offline apps can be updated using a management server.
-- Download apps for offline installs
-
-For more information, see [Manage settings in the Store for Business](manage-settings-microsoft-store-for-business.md) and [Manage apps](manage-apps-microsoft-store-for-business-overview.md).
-
-## Supported markets
-
-Store for Business and Education is currently available in these markets.
-
-### Support for free and paid products
-
-- Afghanistan
-- Algeria
-- Andorra
-- Angola
-- Anguilla
-- Antigua and Barbuda
-- Argentina
-- Australia
-- Austria
-- Bahamas
-- Bahrain
-- Bangladesh
-- Barbados
-- Belgium
-- Belize
-- Bermuda
-- Benin
-- Bhutan
-- Bolivia
-- Bonaire
-- Botswana
-- Brunei Darussalam
-- Bulgaria
-- Burundi
-- Cambodia
-- Cameroon
-- Canada
-- Cayman Islands
-- Chile
-- Colombia
-- Comoros
-- Costa Rica
-- Côte D'ivoire
-- Croatia
-- Curçao
-- Cyprus
-- Czech Republic
-- Denmark
-- Dominican Republic
-- Ecuador
-- Egypt
-- El Salvador
-- Estonia
-- Ethiopia
-- Faroe Islands
-- Fiji
-- Finland
-- France
-- French Guiana
-- French Polynesia
-- Germany
-- Ghana
-- Greece
-- Greenland
-- Guadeloupe
-- Guatemala
-- Honduras
-- Hong Kong SAR
-- Hungary
-- Iceland
-- Indonesia
-- Iraq
-- Ireland
-- Israel
-- Italy
-- Jamaica
-- Japan
-- Jersey
-- Jordan
-- Kenya
-- Kuwait
-- Laos
-- Latvia
-- Lebanon
-- Libya
-- Liechtenstein
-- Lithuania
-- Luxembourg
-- Madagascar
-- Malawi
-- Malaysia
-- Maldives
-- Mali
-- Malta
-- Marshall Islands
-- Martinique
-- Mauritius
-- Mayotte
-- Mexico
-- Mongolia
-- Montenegro
-- Morocco
-- Mozambique
-- Myanamar
-- Namibia
-- Nepal
-- Netherlands
-- New Caledonia
-- New Zealand
-- Nicaragua
-- Nigeria
-- North Macedonia
-- Norway
-- Oman
-- Pakistan
-- Palestinian Authority
-- Panama
-- Papua New Guinea
-- Paraguay
-- Peru
-- Philippines
-- Poland
-- Portugal
-- Qatar
-- Republic of Cabo Verde
-- Reunion
-- Romania
-- Rwanda
-- Saint Kitts and Nevis
-- Saint Lucia
-- Saint Martin
-- Saint Vincent and the Grenadines
-- San marino
-- Saudi Arabia
-- Senegal
-- Serbia
-- Seychelles
-- Singapore
-- Sint Maarten
-- Slovakia
-- Slovenia
-- South Africa
-- Spain
-- Sri Lanka
-- Suriname
-- Sweden
-- Switzerland
-- Tanzania
-- Thailand
-- Timor-Leste
-- Togo
-- Tonga
-- Trinidad and Tobago
-- Tunisia
-- Türkiye
-- Turks and Caicos Islands
-- Uganda
-- United Arab Emirates
-- United Kingdom
-- United States
-- Uruguay
-- Vatican City
-- Viet Nam
-- Virgin Islands, U.S.
-- Zambia
-- Zimbabwe
-
-
-### Support for free apps
-Customers in these markets can use Microsoft Store for Business and Education to acquire free apps:
-- Russia
-
-### Support for free apps and Minecraft: Education Edition
-Customers in these markets can use Microsoft Store for Business and Education to acquire free apps and Minecraft: Education Edition:
-- Albania
-- Aremenia
-- Azerbaijan
-- Belarus
-- Bosnia and Herzegovina
-- Brazil
-- Georgia
-- India
-- Isle of Man
-- Kazakhstan
-- Korea
-- Monaco
-- Republic of Moldova
-- Taiwan
-- Tajikistan
-- Ukraine
-
-### Support to only manage products
-Customers in these markets can use Microsoft Store for Business and Education only to manage products that they've purchased from other channels. For example, they might have purchased products through Volume Licensing Service Center. However, they can't purchase apps directly from Microsoft Store for Business and Education.
-- Puerto Rico
-
-This table summarize what customers can purchase, depending on which Microsoft Store they are using.
-
-| Store | Free apps | Minecraft: Education Edition |
-| ----- | --------- | ---------------------------- |
-| Microsoft Store for Business | supported | not supported |
-| Microsoft Store for Education | supported | supported; invoice payment required |
-
-> [!NOTE]
-> **Microsoft Store for Education customers with support for free apps and Minecraft: Education Edition**
-> - Admins can acquire free apps from **Microsoft Store for Education**.
-> - Admins need to use an invoice to purchase **Minecraft: Education Edition**. For more information, see [Invoice payment option](/education/windows/school-get-minecraft#invoices).
-> - Teachers, or people with the Basic Purchaser role, can acquire free apps, but not **Minecraft: Education Edition**.
-
-## Privacy notice
-
-Store for Business and Education services get names and email addresses of people in your organization from Microsoft Entra ID. This information is needed for these admin functions:
-- Granting and managing permissions
-- Managing app licenses
-- Distributing apps to people (names appear in a list that admins can select from)
-
-Store for Business and Education does not save names, or email addresses.
-
-Your use of Store for Business and Education is also governed by the [Microsoft Store for Business and Education Services Agreement](https://businessstore.microsoft.com/servicesagreement).
-
-Information sent to Store for Business and Education is subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement/).
-
-## ISVs and Store for Business and Education
-
-Developers in your organization, or ISVs can create content specific to your organization. In Store for Business and Education, we call these line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this:
-- Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs.
-- LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization.
-- Admin adds the app to Microsoft Store for Business or Microsoft Store for Education inventory.
-
-Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in Store for Business and Education. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in Store for Business and Education will work only on Windows 10.
-
-For more information on line-of-business apps, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md).
diff --git a/store-for-business/notifications-microsoft-store-business.md b/store-for-business/notifications-microsoft-store-business.md
deleted file mode 100644
index e1edf848cc..0000000000
--- a/store-for-business/notifications-microsoft-store-business.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-title: Notifications in Microsoft Store for Business and Education (Windows 10)
-description: Notifications alert you to issues or outages with Microsoft Store for Business and Education.
-keywords: notifications, alerts
-ms.assetid:
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Notifications in Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Microsoft Store for Business and Microsoft Store for Education use a set of notifications to alert admins if there is an issue or outage with Microsoft Store.
-
-## Notifications for admins
-
-| Store area | Notification message | Customer impact |
-| ---------- | -------------------- | --------------- |
-| General | We're on it. Something happened on our end with the Store. Waiting a bit might help. | You might be unable to sign in. There might be an intermittent Microsoft Entra outage. |
-| Manage | We're on it. Something happened on our end with management for apps and software. We're working to fix the problem. | You might be unable to manage inventory, including viewing inventory, distributing apps, assigning licenses, or viewing and managing order history. |
-| Shop | We're on it. Something happened on our end with purchasing. We're working to fix the problem. | Shop might not be available. You might not be able to purchase new, or additional licenses. |
-| Private store | We're on it. Something happened on our end with your organization's private store. People in your organization can't download apps right now. We're working to fix the problem. | People in your organization might not be able to view the private store, or get apps. |
-| Acquisition and licensing | We're on it. People in your org might not be able to install or use certain apps. We're working to fix the problem. | People in your org might not be able to claim a license from your private store. |
-| Partner | We're on it. Something happened on our end with Find a Partner. We're working to fix the problem. | You might not be able to search for a partner. |
diff --git a/store-for-business/payment-methods.md b/store-for-business/payment-methods.md
deleted file mode 100644
index 0e5b708958..0000000000
--- a/store-for-business/payment-methods.md
+++ /dev/null
@@ -1,59 +0,0 @@
----
-title: Payment methods for commercial customers
-description: Learn what payment methods are available in Store for Business and M365 admin center
-keywords: payment method, credit card, debit card, add credit card, update payment method
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
-ms.reviewer:
----
-
-# Payment methods
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-You can purchase products and services from Microsoft Store for Business using your credit card. You can enter your credit card information on **Payment methods**, or when you purchase an app. We currently accept these credit cards:
-- VISA
-- MasterCard
-- Discover
-- American Express
-- Japan Commercial Bureau (JCB)
-
-> [!NOTE]
-> Not all cards available in all countries/regions. When you add a payment option, Microsoft Store for Business shows which cards are available in your region.
-
-## Add a payment method
-
-**To add a new payment option**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
-2. Select **Manage**, select **Billing & payments**, and then select **Payments methods**.
-3. Select **Add a payment options**, and then select the type of credit card that you want to add.
-4. Add information to required fields, and then select **Add**.
-
-Once you select **Add**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any issues.
-
-> [!NOTE]
-> When adding credit or debit cards, you may be prompted to enter a CVV. The CVV is only used for verification purposes and is not stored in our systems after validation.
-
-## Edit payment method
-**To update a payment option**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com).
-2. Click **Manage**, click **Billing & payments**, and then click **Payments methods**.
-3. Select the payment option that you want to update, select the ellipses, and then choose **Edit payment method**.
-4. Enter any updated information in the appropriate fields, and then se;ect**Save**.
-
-Once you click **Update**, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems.
-
-> [!NOTE]
-> Certain actions, like updating or adding a payment option, require temporary "test authorization" transactions to validate the payment option. These may appear on your statement as $0.00 authorizations or as small pending transactions. These transactions are temporary and should not impact your account unless you make several changes in a short period of time, or have a low balance.
diff --git a/store-for-business/prerequisites-microsoft-store-for-business.md b/store-for-business/prerequisites-microsoft-store-for-business.md
deleted file mode 100644
index ac4b271b5d..0000000000
--- a/store-for-business/prerequisites-microsoft-store-for-business.md
+++ /dev/null
@@ -1,74 +0,0 @@
----
-title: Prerequisites for Microsoft Store for Business and Education (Windows 10)
-description: There are a few prerequisites for using Microsoft Store for Business or Microsoft Store for Education.
-ms.assetid: CEBC6870-FFDD-48AD-8650-8B0DC6B2651D
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Prerequisites for Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-> [!NOTE]
-> As of April 14th, 2021, only free apps are available in Microsoft Store for Business and Education. For more information, see [Microsoft Store for Business and Education](index.md).
-
-> [!IMPORTANT]
-> Customers who are in the Office 365 GCC environment or are eligible to buy with government pricing cannot use Microsoft Store for Business.
-
-There are a few prerequisites for using Microsoft Store for Business or Microsoft Store for Education.
-
-## Prerequisites
-
-You'll need this software to work with Microsoft Store for Business or Education.
-
-### Required
-
-- IT Pros that are administering Microsoft Store for Business and Education need a browser compatible with Microsoft Store for Business and Education running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox. Javascript needs to be supported and enabled.
-- Employees using apps from Microsoft Store for Business and Education need at least Windows 10, version 1511 running on a PC or mobile device.
-
-Microsoft Entra ID or Office 365 accounts for your employees:
-- IT Pros need Microsoft Entra ID or Office 365 accounts to sign up for Microsoft Store for Business and Education, and then to sign in, get apps, distribute apps, and manage app licenses.
-- Employees need Microsoft Entra accounts when they access Microsoft Store for Business or Education content from Windows-based devices.
-- If you use a management tool to distribute and manage online-licensed apps, all employees will need a Microsoft Entra account.
-
-For more information on Microsoft Entra ID, see [About Office 365 and Microsoft Entra ID](/previous-versions//dn509517(v=technet.10)), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).
-
-### Optional
-
-While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. If you're considering using management tools, check with the management tool vendor to see if they support Microsoft Store for Business and Education. The management tool will need to:
-
-- Integrate with the Windows 10 management framework and Microsoft Entra ID.
-- Sync with Microsoft Store for Business and Education inventory to distribute apps.
-
-## Proxy configuration
-
-If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy server to block traffic, your configuration needs to allow these URLs:
-
-- `login.live.com`
-- `login.windows.net`
-- `account.live.com`
-- `clientconfig.passport.net`
-- `windowsphone.com`
-- `*.wns.windows.com`
-- `*.microsoft.com`
-- `*.s-microsoft.com`
-- `www.msftncsi.com` (prior to Windows 10, version 1607)
-- `www.msftconnecttest.com/connecttest.txt` (replaces `www.msftncsi.com` starting with Windows 10, version 1607)
-
-Store for Business requires Microsoft Windows HTTP Services (WinHTTP) to install, or update apps.
diff --git a/store-for-business/release-history-microsoft-store-business-education.md b/store-for-business/release-history-microsoft-store-business-education.md
deleted file mode 100644
index 368df86b94..0000000000
--- a/store-for-business/release-history-microsoft-store-business-education.md
+++ /dev/null
@@ -1,125 +0,0 @@
----
-title: Microsoft Store for Business and Education release history
-description: Know the release history of Microsoft Store for Business and Microsoft Store for Education.
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.date: 01/11/2024
-ms.reviewer:
----
-
-# Microsoft Store for Business and Education release history
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-
-Because Microsoft Store for Business and Education will be retired, we no longer release new and improved features. Here's a summary of new or updated features in previous releases.
-
-Looking for info on the latest release? Check out [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md)
-
-## January 2024
-
-**Removal of private store capability from Microsoft Store for Business and Education**
-
-The private store tab and associated functionality was removed from the Microsoft Store for Business and Education portal. This includes the ability to add apps to private groups and to download and install apps from the private store.
-
-We recommend customers use the [Private app repository, Windows Package Manager, and Company Portal app](/windows/application-management/private-app-repository-mdm-company-portal-windows-11) to provide a private app repository within their organization.
-
-## May 2023
-
-**Removal of Microsoft Store for Business tab from Microsoft Store app on Windows 10 PCs**
-
-The Microsoft Store for Business tab was removed from the Microsoft Store app on Windows 10. The Microsoft Store for Business tab is still available on HoloLens devices.
-
-Users on Windows 10 PCs can no longer do the following tasks:
-
-- see Line of Business (LOB) products listed in the Microsoft Store for Business tab
-- acquire or install [online apps](/mem/configmgr/apps/deploy-use/manage-apps-from-the-windows-store-for-business#online-and-offline-apps)
-- assign licenses for existing [online apps](/mem/configmgr/apps/deploy-use/manage-apps-from-the-windows-store-for-business#online-and-offline-apps) using the Store for Business portal or Store for Business app
-
-[Offline app](/mem/configmgr/apps/deploy-use/manage-apps-from-the-windows-store-for-business#online-and-offline-apps) distribution and licensing scenarios aren't impacted by this change.
-
-We recommend that you add your apps through the new Microsoft Store app experience in Intune. If an app isn’t available in the Microsoft Store, you must retrieve an app package from the vendor and install it as an LOB app or Win32 app. For instructions, read the following articles:
-
-- [Add Microsoft Store apps to Microsoft Intune](/mem/intune/apps/store-apps-microsoft)
-- [Add a Windows line-of-business app to Microsoft Intune](/mem/intune/apps/lob-apps-windows)
-- [Add, assign, and monitor a Win32 app in Microsoft Intune](/mem/intune/apps/apps-win32-add)
-
-Follow the [Intune Customer Success blog](https://aka.ms/IntuneCustomerSuccess) where we will publish more information about this change.
-
-## April 2023
-
-- **Tab removed from Microsoft Store apps on Windows 11 PCs** – The Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. [Get more info](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed)
-
-## October 2018
-
-- **Use security groups with Private store apps** - On the details page for apps in your private store, you can set Private store availability. This allows you to choose which security groups can see an app in the private store. [Get more info](app-inventory-management-microsoft-store-for-business.md)
-
-## September 2018
-
-- **Performance improvements** - With updates and improvements in the private store, most changes, like adding an app, will take fifteen minutes or less. [Get more info](/microsoft-store/manage-private-store-settings#private-store-performance)
-
-## August 2018
-- **App requests** - People in your organization can make requests for apps that they need. hey can also request them on behalf of other people. Admins review requests and can decide on purchases. [Get more info](./acquire-apps-microsoft-store-for-business.md#allow-app-requests)
-
-## July 2018
-
-- Bug fixes and performance improvements.
-
-## June 2018
-
-- **Change order within private store collection** - Continuing our focus on improvements for private store, now you can customize the order of products in each private store collection.
-- **Performance improvements in private store** - We continue to work on performance improvements in the private store. Now, most products new to your inventory are available in your private store within 15 minutes of adding them. [Get more info](./manage-private-store-settings.md#private-store-performance)
-
-## May 2018
-
-- **Immersive Reader app available in Microsoft Store for Education** - This app is a free tool that uses proven techniques to improve reading and writing for people regardless of their age or ability. You can add the app to your private store, so students can easily install and use it.
-
-## April 2018
-
-- **Assign apps to larger groups** - We're making it easier for admins to assign apps to groups of people. Admins can assign licenses to groups of any size, and include subgroups within those groups. We'll figure out who's in those groups, and assign licenses to people in the groups (skipping people who already have licenses). Along the way, we'll let you know how many licenses are needed, and provide an estimate on the time required to assign licenses.
-- **Change collection order in private store** - Private store collections make it easy for groups of people to find the apps that they need. Now, you can customize the order of your private store collections.
-- **Office 365 subscription management** - We know that sometimes customers need to cancel a subscription. While we don't want to lose a customer, we want the process for managing subscriptions to be easy. Now, you can delete your Office 365 subscription without calling Support. From Microsoft Store for Business and Education, you can request to delete an Office 365 subscription. We'll wait three days before permanently deleting the subscription. In case of a mistake, customers are welcome to reactivate subscriptions during the three-day period.
-
-## March 2018
-
-- **Performance improvements in private store** - We've made it significantly faster for you to update the private store. Many changes to the private store are available immediately after you make them. [Get more info](./manage-private-store-settings.md#private-store-performance)
-- **Private store collection updates** - We've made it easier to find apps when creating private store collections – now you can search and filter results.
- [Get more info](./manage-private-store-settings.md#private-store-collections)
-- **Manage Skype Communication credits** - Office 365 customers that own Skype Communication Credits can now see and manage them in Microsoft Store for Business. You can view your account, add funds to your account, and manage auto-recharge settings.
-- **Upgrade Microsoft 365 trial subscription** - Customers with Office 365 can upgrade their subscription and automatically re-assign their user licenses over to a new target subscription. For example, you could upgrade your Office 365 for business subscription to a Microsoft 365 for business subscription.
-
-## January and February 2018
-
-- **One place for apps, software, and subscriptions** - The new **Products & services** page in Microsoft Store for Business and Education gives customers a single place to manage all products and services.
-- **Create collections of apps in your private store** - Use **collections** to customize your private store. Collections allow you to create groups of apps that are commonly used in your organization or school -- you might create a collection for a Finance department, or a 6th-grade class. [Get more info](./manage-private-store-settings.md#private-store-collections)
-- **Upgrade Office 365 trial subscription** - Customers with Office 365 trials can now transition their trial to a paid subscription in Microsoft Store for Business. This works for trials you acquired from Microsoft Store for Business, or Office Admin Portal.
-- **Supporting Microsoft Product and Services Agreement customers** - If you are purchasing under the Microsoft Products and Services Agreement (MPSA), you can use Microsoft Store for Business. Here you will find access to Products & Services purchased, Downloads & Keys, Software Assurance benefits, Order history, and Agreement details.
-- **Microsoft Product and Services Agreement customers can invite people to take roles** - MPSA admins can invite people to take Microsoft Store for Business roles even if the person is not in their tenant. You provide an email address when you assign the role, and we'll add the account to your tenant and assign the role.
-
-## December 2017
-
-- Bug fixes and performance improvements.
-
-## November 2017
-
-- **Export list of Minecraft: Education Edition users** - Admins and teachers can now export a list of users who have Minecraft: Education Edition licenses assigned to them. Click **Export users**, and Store for Education creates an Excel spreadsheet for you, and saves it as a .csv file.
-
-## October 2017
-
-- Bug fixes and performance improvements.
-
-## September 2017
-
-- **Manage Windows device deployment with Windows Autopilot Deployment** - In Microsoft Store for Business, you can manage devices for your organization and apply an Autopilot deployment profile to your devices. When people in your organization run the out-of-box experience on the device, the profile configures Windows, based on the Autopilot deployment profile you applied to the device. [Get more info](add-profile-to-devices.md)
-- **Request an app** - People in your organization can request additional licenses for apps in your private store, and then Admins or Purchasers can make the purchases. [Get more info](./acquire-apps-microsoft-store-for-business.md#acquire-apps)
-- **My organization** - **My organization** shows you all Agreements that apply to your organization. You can also update profile info for you org, such as mailing address and email associated with your account.
-- **Manage prepaid Office 365 subscriptions** - Office 365 prepaid subscriptions can be redeemed using a prepaid token. Tokens are available through 3rd-party businesses, outside of Microsoft Store for Business or the Office 365 Admin portal. After redeeming prepaid subscriptions, Admins can add more licenses or extend the subscription's expiration date.
-- **Manage Office 365 subscriptions acquired by partners** - Office 365 subscriptions purchased for your organization by a partner or reseller can be managed in Microsoft Store for Business. Admins can assign and manage licenses for these subscriptions.
-- **Edge extensions in Microsoft Store** - Edge Extensions are now available from Microsoft Store! You can acquire and distribute them from Microsoft Store for Business just like any other app.
-- **Search results in Microsoft Store for Business** - Search results now have sub categories to help you refine search results.
diff --git a/store-for-business/roles-and-permissions-microsoft-store-for-business.md b/store-for-business/roles-and-permissions-microsoft-store-for-business.md
deleted file mode 100644
index 842c7e3e8e..0000000000
--- a/store-for-business/roles-and-permissions-microsoft-store-for-business.md
+++ /dev/null
@@ -1,103 +0,0 @@
----
-title: Roles and permissions in Microsoft Store for Business and Education (Windows 10)
-description: The first person to sign in to Microsoft Store for Business or Microsoft Store for Education must be a Global Admin of the Microsoft Entra tenant. Once the Global Admin has signed in, they can give permissions to others employees.
-keywords: roles, permissions
-ms.assetid: CB6281E1-37B1-4B8B-991D-BC5ED361F1EE
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Roles and permissions in Microsoft Store for Business and Education
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-> [!NOTE]
-> As of April 14th, 2021, only free apps are available in Microsoft Store for Business and Education. For more information, see [Microsoft Store for Business and Education](index.md).
-
-The first person to sign in to Microsoft Store for Business or Microsoft Store for Education must be a Global Admin of the Microsoft Entra tenant. Once the Global Admin has signed in, they can give permissions to others employees.
-
-Microsoft Store for Business and Education has a set of roles that help admins and employees manage access to apps and tasks for Microsoft Store. Employees with these roles will need to use their Microsoft Entra account to access the Store. Global Administrators and global user accounts that are used with other Microsoft services, such as Azure, or Office 365 can sign in to Microsoft Store. Global user accounts have some permissions in Microsoft Store, and Microsoft Store has a set of roles that help IT admins and employees manage access to apps and tasks for Microsoft Store.
-
-## Global user account permissions in Microsoft Store
-
-This table lists the global user accounts and the permissions they have in Microsoft Store.
-
-|| Global Administrator | Billing Administrator |
-| ------------------------------ | --------------------- | --------------------- |
-| **Sign up for Microsoft Store for Business and Education** | ✔️ | ✔️ |
-| **Modify company profile settings** | ✔️ | ✔️ |
-| **Purchase apps** | ✔️ | ✔️ |
-| **Distribute apps** | ✔️ | ✔️ |
-| **Purchase subscription-based software** | ✔️ | ✔️ |
-
-- **Global Administrator** and **Billing Administrator** - IT Pros with these accounts have full access to Microsoft Store. They can do everything allowed in the Microsoft Store Admin role, plus they can sign up for Microsoft Store.
-
-## Microsoft Store roles and permissions
-
-Microsoft Store for Business has a set of roles that help IT admins and employees manage access to apps and tasks for Microsoft Store. Employees with these roles will need to use their Microsoft Entra account to access Microsoft Store.
-
-This table lists the roles and their permissions.
-
-|| Admin | Purchaser | Device Guard signer |
-| ------------------------------ | ------ | -------- | ------------------- |
-| **Assign roles** | ✔️ | | |
-| **Manage Microsoft Store for Business and Education settings** | ✔️ | | |
-| **Acquire apps** | ✔️ | ✔️ | |
-| **Distribute apps** | ✔️ | ✔️ | |
-| **Sign policies and catalogs** | ✔️ | | |
-| **Sign Device Guard changes** | ✔️ | | ✔️ |
-
-These permissions allow people to:
-
-- **Manage Microsoft Store settings**:
- - Account information (view only)
- - Device Guard signing
- - LOB publishers
- - Management tools
- - Offline licensing
- - Permissions
- - Private store
-
-- **Acquire apps** - Acquire apps from Microsoft Store and add them to your inventory.
-
-- **Distribute apps** - Distribute apps that are in your inventory.
- - Admins can assign apps to people, add apps to the private store, or use a management tool.
- - Purchasers can assign apps to people.
-
-**To assign roles to people**
-
-1. Sign in to Microsoft Store for Business or Microsoft Store for Education.
-
- >[!Note]
- >You need to be a Global Administrator, or have the Microsoft Store Admin role to access the **Permissions** page.
-
- To assign roles, you need to be a Global Administrator or a Store Administrator.
-
-2. Click **Settings**, and then choose **Permissions**.
-
- OR
-
- Click **Manage**, and then click **Permissions** on the left-hand menu.
-
-
-
-3. Click **Add people**, type a name, choose the role you want to assign, and click **Save**.
-
-
-
-4. If you don't find the name you want, you might need to add people to your Microsoft Entra directory. For more information, see [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-microsoft-store-for-business.md).
diff --git a/store-for-business/settings-reference-microsoft-store-for-business.md b/store-for-business/settings-reference-microsoft-store-for-business.md
deleted file mode 100644
index 365a4304f2..0000000000
--- a/store-for-business/settings-reference-microsoft-store-for-business.md
+++ /dev/null
@@ -1,38 +0,0 @@
----
-title: Settings reference Microsoft Store for Business and Education (Windows 10)
-description: The Microsoft Store for Business and Education has a group of settings that admins use to manage the store.
-ms.assetid: 34F7FA2B-B848-454B-AC00-ECA49D87B678
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Settings reference: Microsoft Store for Business and Education
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-The Microsoft Store for Business and Education has a group of settings that admins use to manage the store.
-
-| Setting | Description | Location under **Manage** |
-| ------- | ----------- | ------------------------------ |
-| Billing account information | Manage organization information. For more information, see [Manage settings for the Microsoft Store for Business and Education](update-microsoft-store-for-business-account-settings.md).| **Billing accounts** |
-| Payment options | Manage payment options. For more information, see [Manage settings for the Microsoft Store for Business and Education](payment-methods.md).| **Billing & payments - Payment methods** |
-| Private store | Update the name for your private store. The new name will be displayed on a tab in the Store. For more information, see [Manage private store settings](manage-private-store-settings.md). | **Settings - Distribute** |
-| Offline licensing | Configure whether or not to make offline-licensed apps available in the Microsoft Store for Business and Education. For more information, see [Distribute offline apps](distribute-offline-apps.md). | **Settings - Shop** |
-| Allow users to shop | Configure whether or not people in your organization or school can see and use the shop function in Store for Business or Store for Education. For more information, see [Allow users to shop](acquire-apps-microsoft-store-for-business.md#allow-users-to-shop). | **Settings - Shop** |
-| Make everyone a Basic Purchaser | Allow everyone in your organization to automatically become a Basic Purchaser. This allows them to purchase apps and manage them. For more information, see [Make everyone a Basic Purchaser](/education/windows/education-scenarios-store-for-business#basic-purchaser-role). | **Settings - Shop** |
-| App request | Configure whether or not people in your organization can request apps for admins to purchase. For more information, see [Distribute offline apps](acquire-apps-microsoft-store-for-business.md). | **Settings - Shop** |
-| Management tools | Management tools that are synced with Microsoft Entra ID are listed on this page. You can choose one to use for managing app updates and distribution. For more information, see [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md). | **Settings - Distribute** |
-| Device Guard signing | Use the Device Guard signing portal to add unsigned apps to a code integrity policy, or to sign code integrity policies. For more information, see [Device Guard signing portal](device-guard-signing-portal.md). | **Settings - Devices** |
-| Permissions | Manage permissions for your employees. For more information, see [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-microsoft-store-for-business.md). | **Permissions - Roles**, **Permissions - Purchasing roles**, and **Permissions - Blocked basic purchasers** |
-| Line-of-business (LOB) publishers | Invite devs to become LOB publishers for your organization. Existing LOB publishers are listed on the page, and you can deactivate or invite them again. For more information, see [Work with line-of-business apps](working-with-line-of-business-apps.md). | **Permissions - Line-of-business apps** |
diff --git a/store-for-business/sfb-change-history.md b/store-for-business/sfb-change-history.md
deleted file mode 100644
index 0bd887f0d4..0000000000
--- a/store-for-business/sfb-change-history.md
+++ /dev/null
@@ -1,86 +0,0 @@
----
-title: Change history for Microsoft Store for Business and Education
-description: Summary of topic changes for Microsoft Store for Business and Microsoft Store for Education.
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-author: TrudyHa
-ms.author: TrudyHa
-ms.topic: conceptual
-ms.date: 3/2/2019
-ms.reviewer:
-manager: dansimp
-ms.localizationpriority: medium
----
-
-# Change history for Microsoft Store for Business and Microsoft Store for Education
-
-## March 2019
-
-| New or changed topic | Description |
-| --- | --- |
-| [Understand your Microsoft Customer Agreement invoice](billing-understand-your-invoice-msfb.md) | New topic |
-| [Understand billing profiles](billing-profile.md) | New topic |
-| [Payment methods](payment-methods.md) | New topic |
-| [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-microsoft-store-for-business-account-settings.md) | Update with information on billing accounts. |
-| [Roles and permissions in Microsoft Store for Business and Education](roles-and-permissions-microsoft-store-for-business.md) | Add info for purchasing roles and permissions. |
-
-## April 2018
-
-| New or changed topic | Description |
-| --- | --- |
-| [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-microsoft-store#a-href-idblock-store-group-policyablock-microsoft-store-using-group-policy) | Update on app updates when Microsoft Store is blocked. |
-| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | Update |
-
-## March 2018
-
-| New or changed topic | Description |
-| --- | --- |
-| [Manage software purchased with Microsoft Products and Services agreement in Microsoft Store for Business](manage-mpsa-software-microsoft-store-for-business.md) | New |
-| [Manage private store settings](manage-private-store-settings.md) | Update for adding private store performance improvements. |
-| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | Update |
-| [Roles and permissions in Microsoft Store for Business](roles-and-permissions-microsoft-store-for-business.md) | Update |
-
-## February 2018
-
-| New or changed topic | Description |
-| --- | --- |
-| [Manage private store settings](manage-private-store-settings.md) | Update for adding private store collections. |
-| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | Update |
-
-## November 2017
-
-| New or changed topic | Description |
-| --- | --- |
-| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | Update |
-
-## October 2017
-
-| New or changed topic | Description |
-| --- | --- |
-| [Manage Windows device deployment with Windows Autopilot Deployment](add-profile-to-devices.md) | Update. Add profile settings with supported build info. |
-| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | Update |
-
-## September 2017
-
-| New or changed topic | Description |
-| --- | --- |
-| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | New |
-| [Acquire apps](acquire-apps-microsoft-store-for-business.md#acquire-apps) | New |
-| [Settings reference: Microsoft Store for Business and Education](manage-settings-microsoft-store-for-business.md) and [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-microsoft-store-for-business-account-settings.md) | Updates for UI changes in **Settings**. |
-
-## July 2017
-
-| New or changed topic | Description |
-| --- | --- |
-| [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) | New |
-| [Microsoft Store for Business and Education overview - supported markets](./microsoft-store-for-business-overview.md#supported-markets) | Updates for added market support. |
-| [Manage Windows device deployment with Windows Autopilot Deployment](add-profile-to-devices.md) | New. Information about Windows Autopilot Deployment Program and how it is used in Microsoft Store for Business and Education. |
-
-## June 2017
-
-| New or changed topic | Description |
-| -------------------- | ----------- |
-| [Notifications in Microsoft Store for Business and Education](notifications-microsoft-store-business.md) | New. Information about notification model in Microsoft Store for Business and Education. |
-| [Get Minecraft: Education Edition with Windows 10 device promotion](/education/windows/get-minecraft-device-promotion) | New. Information about redeeming Minecraft: Education Edition licenses with qualifying purchases of Windows 10 devices. |
-| [Microsoft Store for Business and Education overview - supported markets](./microsoft-store-for-business-overview.md#supported-markets) | Updates for added market support. |
diff --git a/store-for-business/sign-up-microsoft-store-for-business-overview.md b/store-for-business/sign-up-microsoft-store-for-business-overview.md
deleted file mode 100644
index 7a1837372b..0000000000
--- a/store-for-business/sign-up-microsoft-store-for-business-overview.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-title: Sign up and get started (Windows 10)
-description: IT admins can sign up for the Microsoft Store for Business or Microsoft Store for Education and get started working with apps.
-ms.assetid: 87C6FA60-3AB9-4152-A85C-6A1588A20C7B
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Sign up and get started
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-IT admins can sign up for Microsoft Store for Business and Education, and get started working with apps.
-
-> [!NOTE]
-> As of April 14th, 2021, only free apps are available in Microsoft Store for Business and Education. For more information, see [Microsoft Store for Business and Education](index.md).
-
-## In this section
-
-| Topic | Description |
-| ----- | ----------- |
-| [Microsoft Store for Business and Education overview](./microsoft-store-for-business-overview.md) | Learn about Microsoft Store for Business. |
-| [Prerequisites for Microsoft Store for Business and Education](./prerequisites-microsoft-store-for-business.md) | There are a few prerequisites for using [Microsoft Store for Business and Education.](/microsoft-store/prerequisites-microsoft-store-for-business) |
-| [Roles and permissions in Microsoft Store for Business and Education](./roles-and-permissions-microsoft-store-for-business.md)| The first person to sign in to Microsoft Store for Business and Education must be a Global Admin of the Microsoft Entra tenant. Once the Global Admin has signed in, they can give permissions to others employees. |
-| [Settings reference: Microsoft Store for Business and Education](./settings-reference-microsoft-store-for-business.md) | Microsoft Store for Business and Education has a group of settings that admins use to manage the store. |
diff --git a/store-for-business/troubleshoot-microsoft-store-for-business.md b/store-for-business/troubleshoot-microsoft-store-for-business.md
deleted file mode 100644
index 80b2786116..0000000000
--- a/store-for-business/troubleshoot-microsoft-store-for-business.md
+++ /dev/null
@@ -1,70 +0,0 @@
----
-title: Troubleshoot Microsoft Store for Business (Windows 10)
-description: Troubleshooting topics for Microsoft Store for Business.
-ms.assetid: 243755A3-9B20-4032-9A77-2207320A242A
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Troubleshoot Microsoft Store for Business
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Troubleshooting topics for Microsoft Store for Business.
-
-## Can't find apps in private store
-
-The private store for your organization is a page in Microsoft Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check:
-
-- **No apps in the private store** - The private store page is only available in Microsoft Store on Windows 10 if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Microsoft Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on **Product & services - Apps**. If the status under **Private store** is **Add in progress**, wait and check back.
-- **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account.
-
-**To sign in with organization account in Microsoft Store app**
-
-1. Click the people icon in Microsoft Store app, and click **Sign in**.
-
- 
-
-2. Click **Add account**, and then click **Work or school account**.
-
- 
-
-3. Type the email account and password, and click **Sign in**.
-
- 
-
-4. You should see the private store for your organization. In our example, the page is named **Contoso publishing**.
-
- 
-
- Click the private store to see apps in your private store.
-
- 
-
-## Troubleshooting Microsoft Store for Business integration with Microsoft Configuration Manager
-
-If you encounter any problems when integrating Microsoft Store for Business with Configuration Manager, use the [troubleshooting guide](/troubleshoot/mem/configmgr/troubleshoot-microsoft-store-for-business-integration).
-
-## Still having trouble?
-
-If you are still having trouble using Microsoft Store or installing an app, Admins can sign in and look for topics on our **Support** page.
-
-**To view Support page**
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com).
-2.Choose **Manage**> **Support**.
diff --git a/store-for-business/update-microsoft-store-for-business-account-settings.md b/store-for-business/update-microsoft-store-for-business-account-settings.md
deleted file mode 100644
index 03b03469ee..0000000000
--- a/store-for-business/update-microsoft-store-for-business-account-settings.md
+++ /dev/null
@@ -1,146 +0,0 @@
----
-title: Update your Billing account settings
-description: The billing account page in Microsoft Store for Business and Microsoft Store for Education, and M365 admin center shows information about your organization that you can update, including country or region, organization contact info, agreements with Microsoft and admin approvals.
-keywords: billing accounts, organization info
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Update Billing account settings
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-A billing account contains defining information about your organization.
-
-> [!NOTE]
-> Billing accounts are available in Microsoft Store for Business, and the Microsoft 365 admin center. For more information, see [Understand your Microsoft billing account](/microsoft-365/commerce/manage-billing-accounts).
-
-The **Billing account** page allows you to manage organization information, purchasing agreements that you have with Microsoft, and admin approvals. The organization information and payment options are required before you can shop for products that have a price.
-
-## Organization information
-
-We need your business address, email contact, and tax-exemption certificates that apply to your country/region or locale.
-
-### Business address and email contact
-
-Before purchasing apps that have a fee, you need to add or update your organization's business address, contact email address, and contact name.
-
-We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we'll use the same address in Microsoft Store for Business and Microsoft Store for Education. If we don't have an address, we'll ask you to enter it during your first purchase.
-
-We need an email address in case we need to contact you about your Microsoft Store for Business and for Education account. This email account should reach the admin for your organization's Office 365 or Microsoft Entra tenant that is used with Microsoft Store.
-
-**To update billing account information**
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com)
-2. Select **Manage**, and then select **Billing accounts**.
-3. On **Overview**, select **Edit billing account information**.
-4. Make your updates, and then select **Save**.
-
-### Organization tax information
-Taxes for Microsoft Store for Business purchases are determined by your business address. Businesses in these countries/regions can provide their VAT number or local equivalent:
-- Austria
-- Belgium
-- Bulgaria
-- Croatia
-- Cyprus
-- Czech Republic
-- Denmark
-- Estonia
-- Finland
-- France
-- Germany
-- Greece
-- Hungary
-- Ireland
-- Italy
-- Latvia
-- Liechtenstein
-- Lithuania
-- Luxembourg
-- Malta
-- Monaco
-- Netherlands
-- Norway
-- Poland
-- Portugal
-- Romania
-- Slovakia
-- South Africa
-- Spain
-- Sweden
-- Switzerland
-- United Kingdom
-
-These countries can provide their VAT number or local equivalent on their **Billing account** information.
-
-|Market| Tax identifier |
-|------|----------------|
-| Australia | ABN (optional) |
-| Brazil | CNPJ (required) |
-| India | GSTIN (optional), PAN ID (required) |
-| Isle of Man | VAT ID (optional) |
-| New Zealand | GST Registration number (optional) |
-| Monaco | VAT ID (optional) |
-| Taiwan | VAT ID (optional) |
-
-### Tax-exempt status
-
-If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization.
-
-**To start a service request**
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com).
-2. Select **Manage**, click **Support**, and then under **Store settings & configuration** select **Create technical support ticket**.
-
-You'll need this documentation:
-
-|Country/Region or locale | Documentation |
-|------------------|----------------|
-| United States | Sales Tax Exemption Certificate |
-| Canada | Certificate of Exemption (or equivalent letter of authorization) |
-| Ireland | 13B/56A Tax Exemption Certificate|
-| International organizations that hold tax exemption | Certification / letter confirmation from local tax authorities |
-
-### Calculating tax
-
-Sales taxes are calculated against the unit price, and then aggregated.
-
-For example:
-(unit price X tax rate) X quantity = total sales tax
-
--or-
-
-($1.29 X .095) X 100 = $12.25
-
-## Agreements
-Each billing account includes access to the purchasing agreements your organization has signed with Microsoft. This could include:
-- Microsoft Enterprise Agreement
-- Select agreements
-- Open agreements
-- Microsoft customer agreement
-
-If you there is an updated version of the Microsoft customer agreement for you to sign, you'll be prompted to on **Agreements**, or during a purchase.
-
diff --git a/store-for-business/whats-new-microsoft-store-business-education.md b/store-for-business/whats-new-microsoft-store-business-education.md
deleted file mode 100644
index 4af32aae83..0000000000
--- a/store-for-business/whats-new-microsoft-store-business-education.md
+++ /dev/null
@@ -1,93 +0,0 @@
----
-title: Whats new in Microsoft Store for Business and Education
-description: Learn about the newest features in Microsoft Store for Business and Microsoft Store for Education.
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.date: 06/21/2024
-ms.reviewer:
----
-
-# What's new in Microsoft Store for Business and Education
-
-## Latest updates for Store for Business and Education
-
-**June 2024**
-
-The Microsoft Store for Business and Microsoft Store for Education portals will retire on August 15, 2024. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-intune-integration-with-the-microsoft-store-on-windows/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286). If you are using offline licensing, you can use the [WinGet Download command](/windows/package-manager/winget/download) to continue to access offline apps and license files.
-
-## Previous releases and updates
-
-**January 2024**
-
-**Removal of private store capability from Microsoft Store for Business and Education**
-
-The private store tab and associated functionality was removed from the Microsoft Store for Business and Education portal. This includes the ability to add apps to private groups and to download and install apps from the private store.
-
-We recommend customers use the [Private app repository, Windows Package Manager, and Company Portal app](/windows/application-management/private-app-repository-mdm-company-portal-windows-11) to provide a private app repository within their organization.
-
-[May 2023](release-history-microsoft-store-business-education.md#may-2023)
-- Tab removed from Microsoft Store apps on Windows 10 PCs.
-
-[April 2023](release-history-microsoft-store-business-education.md#april-2023)
-- Tab removed from Microsoft Store apps on Windows 11 PCs.
-
-[October 2018](release-history-microsoft-store-business-education.md#october-2018)
-- Use security groups with Private store apps
-
-[September 2018](release-history-microsoft-store-business-education.md#september-2018)
-- Performance improvements
-
-[August 2018](release-history-microsoft-store-business-education.md#august-2018)
-- App requests
-
-[July 2018](release-history-microsoft-store-business-education.md#july-2018)
-- Bug fixes and performance improvements
-
-[June 2018](release-history-microsoft-store-business-education.md#june-2018)
-- Change order within private store collection
-- Performance improvements in private store
-
-[May 2018](release-history-microsoft-store-business-education.md#may-2018)
-- Immersive Reading app available in Microsoft Store for Education
-
-[April 2018](release-history-microsoft-store-business-education.md#april-2018)
-- Assign apps to larger groups
-- Change collection order in private store
-- Office 365 subscription management
-
-[March 2018](release-history-microsoft-store-business-education.md#march-2018)
-- Performance improvements in private store
-- Private store collection updates
-- Manage Skype communication credits
-- Upgrade Office 365 trial subscription
-
-[January & February, 2018](release-history-microsoft-store-business-education.md#january-and-february-2018)
-- One place for apps, software, and subscriptions
-- Create collections of apps in your private store
-- Upgrade Office 365 trial subscription
-- Supporting Microsoft Product and Services Agreement customers
-- Microsoft Product and Services Agreement customers can invite people to take roles
-
-[December 2017](release-history-microsoft-store-business-education.md#december-2017)
-- Bug fixes and performance improvements
-
-[November 2017](release-history-microsoft-store-business-education.md#november-2017)
-- Export list of Minecraft: Education Edition users
-- Bug fixes and performance improvements
-
-[October 2017](release-history-microsoft-store-business-education.md#october-2017)
-- Bug fixes and performance improvements
-
-[September 2017](release-history-microsoft-store-business-education.md#september-2017)
-- Manage Windows device deployment with Windows Autopilot Deployment
-- Request an app
-- My organization
-- Manage prepaid Office 365 subscriptions
-- Manage Office 365 subscriptions acquired by partners
-- Edge extensions in Microsoft Store
-- Search results in Microsoft Store for Business
diff --git a/store-for-business/working-with-line-of-business-apps.md b/store-for-business/working-with-line-of-business-apps.md
deleted file mode 100644
index 408165a16a..0000000000
--- a/store-for-business/working-with-line-of-business-apps.md
+++ /dev/null
@@ -1,112 +0,0 @@
----
-title: Working with line-of-business apps (Windows 10)
-description: Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your organization – they might be internal business apps, or apps specific to your school, business, or industry.
-ms.assetid: 95EB7085-335A-447B-84BA-39C26AEB5AC7
-ms.reviewer:
-ms.mktglfcycl: manage
-ms.sitesec: library
-ms.pagetype: store
-ms.author: cmcatee
-author: cmcatee-MSFT
-manager: scotv
-ms.topic: conceptual
-ms.localizationpriority: medium
-ms.date: 05/24/2023
----
-
-# Working with line-of-business apps
-
-**Applies to:**
-
-- Windows 10
-
-> [!IMPORTANT]
->
-> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286).
-> - In April 2023 the Microsoft Store for Business tab was removed from Microsoft Store apps on Windows 10 and Windows 11 PCs. An interaction with existing MDM and GPO policies may lead to customers seeing errors when accessing the Microsoft Store app. For more information see [Microsoft Store for Business tab removed](manage-access-to-private-store.md#microsoft-store-for-business-tab-removed).
-
-Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your school or organization – they might be internal apps, or apps specific to your school, business, or industry.
-
-Developers within your organization, or ISVs that you invite, can become LOB publishers and submit apps to Microsoft Store for your company or school. Once an LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in Microsoft Store, and then can be managed or deployed using the same process as any other app that has been acquired through Microsoft Store.
-
-One advantage of making apps available through Microsoft Store for Business is that the app has been signed by Microsoft Store, and uses the standard Microsoft Store policies. For organizations that can't submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](/windows/application-management/sideload-apps-in-windows-10) is also supported on Windows 10.
-
-## Adding LOB apps to your private store
-
-Admins and ISVs each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees or students. Admins use Microsoft Store for Business or Microsoft Store for Education portal; ISVs or devs use the Windows Dev center on MSDN.
-
-Here's what's involved:
-
-- Microsoft Store for Business admin invites a developer or ISV to become an LOB publisher for your company.
-- LOB publisher develops and submits app to Microsoft Store, tagging the app so it is only available to your company.
-- Microsoft Store for Business admin accepts the app and can distribute the app to employees in your company.
-
-You'll need to set up:
-
-- Your company needs to be signed up with Microsoft Store for Business or Microsoft Store for Education.
-- LOB publishers need to have an active developer account. To learn more about account options, see [Ready to sign up](https://go.microsoft.com/fwlink/p/?LinkId=623432).
-- LOB publishers need to have an app in Microsoft Store, or have an app ready to submit to the Store.
-
-The process and timing look like this:
-
-
-## Add an LOB publisher (Admin)
-
-Admins need to invite developer or ISVs to become an LOB publisher.
-
-### To invite a developer to become an LOB publisher
-
-1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com).
-2. Click **Manage**, click **Permissions**, and then choose **Line-of-business publishers**.
-3. On the Line-of business publishers page, click **Invite** to send an email invitation to a developer.
-
- >[!Note]
- > This needs to be the email address listed in contact info for the developer account.
-
-## Submit apps (LOB publisher)
-
-The developer receives an email invite to become an LOB publisher for your company. Once they accept the invite, they can log in to the Windows Dev Center to create an app submission for your company. The info here assumes that devs or ISVs have an active developer account.
-
-After an app is published and available in the Store, ISVs publish an updated version by creating another submission in their dashboard. Creating a new submission allows the ISV to make the changes required to create a LOB app for your company. To learn more about updates to an app submission, see [App submissions](/windows/uwp/publish/app-submissions) and [Distributing LOB apps to enterprises](/windows/uwp/publish/distribute-lob-apps-to-enterprises).
-
-## To create a new submission for an app
-
-1. Sign in to the [Windows Dev Center](https://go.microsoft.com/fwlink/p/?LinkId=623486), go to your Dashboard, and click the app you want to make available as an LOB app.
-2. On the App overview page, under **Action**, click **Update**.
-
- -OR-
-
- Submit your app following the guidelines in [App submissions](/windows/uwp/publish/app-submissions). Be sure to completed steps 3 and 4 when you set app pricing and availability options.
-
-3. On the **Pricing and availability** page, under **Distribution and visibility**, click **Line-of-business (LOB) distribution**, and then choose the enterprise(s) who will get the LOB app. No one else will have access to the app.
-4. Under **Organizational licensing**, click **Show options**.
-
- Organizational licensing options apply to all apps, not just LOB apps:
-
- - **Store-managed (online) volume licensing** - This is required. You must select this item to make your app available as an a LOB app. By default, it will be selected. This won't make the app available to anyone outside of the enterprise(s) that you selected in **Distribution and visibility**.
-
- - **Disconnected (offline) licensing** - This is optional for LOB apps.
-
-5. Click **Save** to save your changes and start the app submission process.
-
-For more information, see [Organizational licensing options]( https://go.microsoft.com/fwlink/p/?LinkId=708615) and [Distributing LOB apps to enterprises](/windows/uwp/publish/distribute-lob-apps-to-enterprises).
-
- >[!Note]
- > In order to get the LOB app, the organization must be located in a [supported market](./microsoft-store-for-business-overview.md#supported-markets), and you must not have excluded that market when submitting your app.
-
-## Add app to inventory (admin)
-
-After an ISV submits the LOB app for your company or school, someone with Microsoft Store for Business and Education admin permissions needs to accept the app.
-
-### To add the LOB app to your inventory
-
-1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com).
-2. Click **Manage**, click **Products & services**, and then choose **New LOB apps**.
-3. Click the ellipses under **Action** for the app you want to add to your inventory, and then choose **Add to inventory**.
-
-After you add the app to your inventory, you can choose how to distribute the app. For more information, see:
-
-- [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-microsoft-store-for-business.md)
-- [Distribute apps from your private store](distribute-apps-from-your-private-store.md)
-- [Assign apps to employees](assign-apps-to-employees.md)
-- [Distribute offline apps](distribute-offline-apps.md)
diff --git a/windows/application-management/docfx.json b/windows/application-management/docfx.json
index 128c0cfc00..b3fbf2eaaa 100644
--- a/windows/application-management/docfx.json
+++ b/windows/application-management/docfx.json
@@ -51,7 +51,6 @@
"folder_relative_path_in_docset": "./"
}
},
- "titleSuffix": "Windows Application Management",
"contributors_to_exclude": [
"dstrome2",
"rjagiewich",
@@ -63,19 +62,16 @@
"Stacyrch140",
"garycentric",
"dstrome",
- "beccarobins"
+ "beccarobins",
+ "padmagit77",
+ "aditisrivastava07"
],
"searchScope": [
"Windows 10"
]
},
- "fileMetadata": {
- "feedback_system": {
- "app-v/**/*.*": "None"
- }
- },
"template": [],
"dest": "win-app-management",
"markdownEngineName": "markdig"
}
-}
\ No newline at end of file
+}
diff --git a/windows/application-management/enterprise-background-activity-controls.md b/windows/application-management/enterprise-background-activity-controls.md
index 2a00963aef..73dbb919ae 100644
--- a/windows/application-management/enterprise-background-activity-controls.md
+++ b/windows/application-management/enterprise-background-activity-controls.md
@@ -5,7 +5,7 @@ author: aczechowski
ms.author: aaroncz
manager: aaroncz
ms.date: 10/03/2017
-ms.topic: article
+ms.topic: conceptual
ms.service: windows-client
ms.subservice: itpro-apps
ms.localizationpriority: medium
diff --git a/windows/application-management/index.yml b/windows/application-management/index.yml
index 7a3b8812e1..ae406114d7 100644
--- a/windows/application-management/index.yml
+++ b/windows/application-management/index.yml
@@ -9,7 +9,7 @@ metadata:
author: aczechowski
ms.author: aaroncz
manager: aaroncz
- ms.date: 08/18/2023
+ ms.date: 06/28/2024
ms.topic: landing-page
ms.service: windows-client
ms.subservice: itpro-apps
@@ -40,22 +40,3 @@ landingContent:
url: per-user-services-in-windows.md
- text: Changes to Service Host grouping in Windows 10
url: svchost-service-refactoring.md
-
- - title: Application Virtualization (App-V)
- linkLists:
- - linkListType: overview
- links:
- - text: App-V overview
- url: /microsoft-desktop-optimization-pack/app-v/appv-for-windows
- - text: Getting started with App-V
- url: /microsoft-desktop-optimization-pack/app-v/appv-getting-started
- - text: Planning for App-V
- url: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv
- - text: Deploying App-V
- url: /microsoft-desktop-optimization-pack/app-v/appv-deploying-appv
- - text: Operations for App-V
- url: /microsoft-desktop-optimization-pack/app-v/appv-operations
- - text: Troubleshooting App-V
- url: /microsoft-desktop-optimization-pack/app-v/appv-troubleshooting
- - text: Technical Reference for App-V
- url: /microsoft-desktop-optimization-pack/app-v/appv-technical-reference
diff --git a/windows/application-management/overview-windows-apps.md b/windows/application-management/overview-windows-apps.md
index ab58f88f99..dac0bbafdb 100644
--- a/windows/application-management/overview-windows-apps.md
+++ b/windows/application-management/overview-windows-apps.md
@@ -4,7 +4,7 @@ description: Learn about the different types of apps that run on Windows. For ex
author: aczechowski
ms.author: aaroncz
manager: aaroncz
-ms.date: 08/28/2023
+ms.date: 09/03/2024
ms.topic: overview
ms.service: windows-client
ms.subservice: itpro-apps
@@ -31,7 +31,7 @@ For more information on deploying Microsoft 365 apps, see the [Deployment guide
### Power Apps
-These apps are custom, low-code apps to connect to business data, modernize processes, and solve unique challenges. Power Apps are available online and on-premises, can run in a web browser, and on mobile devices. They can be created by business analysts and professional developers.
+These apps are custom, low-code apps to connect to business data, modernize processes, and solve unique challenges. Power Apps are available online and on-premises, can run in a web browser, and on mobile devices. They can be created by business analysts and professional developers.
For more information, see [What is Power Apps?](/power-apps/powerapps-overview).
@@ -126,9 +126,7 @@ For more information, see:
When you use the Microsoft Store app, Windows users can download apps from the public store. They can also download apps provided by your organization, which is called the *private store*. If your organization creates its own apps, you can use [Windows Package Manager](/windows/package-manager) to add apps to the private store.
> [!NOTE]
-> Retirement of the Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. Customers may continue to use the current capabilities for free apps until that time. There will be no support for Microsoft Store for Business and Education for Windows 11.
->
-> For more information, see [Evolving the Microsoft Store for Business and Education](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/evolving-the-microsoft-store-for-business-and-education/bc-p/3771217). This blog post describes the new Microsoft Store experience for both Windows 11 and Windows 10. To learn about other options for getting and managing apps, see [Add Microsoft Store apps to Microsoft Intune](/mem/intune/apps/store-apps-microsoft).
+> The Microsoft Store for Business and Microsoft Store for Education are retired. For more information, see [Microsoft Store for Business and Education retiring March 31, 2023](/lifecycle/announcements/microsoft-store-for-business-education-retiring). There will be no support for Microsoft Store for Business and Education for Windows 11.
To help manage the Microsoft Store on your devices, you can use policies:
@@ -182,7 +180,7 @@ App-V allows Win32 apps to be used as virtual apps.
On an on-premises server, you install and configure the App-V server components, and then install your Win32 apps. On Windows Enterprise client devices, you use the App-V client components to run the virtualized apps. They allow users to open the virtual apps using the icons and file names they're familiar with. Users use the apps as if they're installed locally.
-The benefit is to deliver virtual apps in real time, and as-needed. For more information, see [Application Virtualization (App-V) for Windows overview](./app-v/appv-for-windows.md).
+The benefit is to deliver virtual apps in real time, and as-needed. For more information, see [Application Virtualization (App-V) for Windows overview](/microsoft-desktop-optimization-pack/app-v/appv-for-windows).
## Manage apps
diff --git a/windows/application-management/private-app-repository-mdm-company-portal-windows-11.md b/windows/application-management/private-app-repository-mdm-company-portal-windows-11.md
index 90281afcd3..65f0231016 100644
--- a/windows/application-management/private-app-repository-mdm-company-portal-windows-11.md
+++ b/windows/application-management/private-app-repository-mdm-company-portal-windows-11.md
@@ -4,8 +4,8 @@ description: Use the Company Portal app in Windows 11 devices to access the priv
author: aczechowski
ms.author: aaroncz
manager: aaroncz
-ms.date: 04/04/2023
-ms.topic: article
+ms.date: 09/03/2023
+ms.topic: conceptual
ms.service: windows-client
ms.subservice: itpro-apps
ms.localizationpriority: medium
@@ -104,4 +104,4 @@ If you use a third party or partner MDM provider, be sure to configure the setti
## Windows Package Manager
-If your organization creates its own apps, your app developers can use [Windows Package Manager](/windows/package-manager/) to deploy apps. For more information on Intune and Windows Package Manager, see [Evolving the Microsoft Store for Business and Education](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/evolving-the-microsoft-store-for-business-and-education/ba-p/2569423).
+If your organization creates its own apps, your app developers can use [Windows Package Manager](/windows/package-manager/) to deploy apps. For more information on Intune and Windows Package Manager, see [Evolving the Microsoft Store for Business and Education](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/evolving-the-microsoft-store-for-business-and-education/ba-p/2569423) and [Microsoft Store for Business and Education retiring March 31, 2023](/lifecycle/announcements/microsoft-store-for-business-education-retiring).
diff --git a/windows/application-management/toc.yml b/windows/application-management/toc.yml
index 7e86c36a76..eaea302b9c 100644
--- a/windows/application-management/toc.yml
+++ b/windows/application-management/toc.yml
@@ -1,255 +1,17 @@
items:
- name: Manage Windows applications
href: index.yml
-- name: Application management
- items:
- - name: Overview of apps in Windows
- href: overview-windows-apps.md
- - name: Sideload line of business (LOB) apps
- href: sideload-apps-in-windows.md
- - name: Private app repo on Windows 11
- href: private-app-repository-mdm-company-portal-windows-11.md
- - name: Remove background task resource restrictions
- href: enterprise-background-activity-controls.md
- - name: Service host grouping in Windows 10
- href: svchost-service-refactoring.md
- - name: Per-user services in Windows
- href: per-user-services-in-windows.md
- - name: Keep removed apps from returning during an update
- href: remove-provisioned-apps-during-update.md
-- name: Application Virtualization (App-V)
- items:
- - name: App-V for Windows overview
- href: /microsoft-desktop-optimization-pack/app-v/appv-for-windows
- - name: Getting Started
- items:
- - name: Getting Started with App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-getting-started
- - name: What's new
- items:
- - name: What's new in App-V for Windows 10, version 1703 and earlier
- href: /microsoft-desktop-optimization-pack/app-v/appv-about-appv
- - name: Release Notes for App-V for Windows 10, version 1607
- href: /microsoft-desktop-optimization-pack/app-v/appv-release-notes-for-appv-for-windows
- - name: Release Notes for App-V for Windows 10, version 1703
- href: /microsoft-desktop-optimization-pack/app-v/appv-release-notes-for-appv-for-windows-1703
- - name: Evaluating App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-evaluating-appv
- - name: High Level Architecture for App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-high-level-architecture
- - name: Planning
- items:
- - name: Planning for App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv
- - name: Preparing your environment
- items:
- - name: Preparing your environment for App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-preparing-your-environment
- - name: App-V Prerequisites
- href: /microsoft-desktop-optimization-pack/app-v/appv-prerequisites
- - name: App-V security considerations
- href: /microsoft-desktop-optimization-pack/app-v/appv-security-considerations
- - name: Planning to deploy
- items:
- - name: Planning to Deploy App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-to-deploy-appv
- - name: App-V Supported Configurations
- href: /microsoft-desktop-optimization-pack/app-v/appv-supported-configurations
- - name: App-V Capacity Planning
- href: /microsoft-desktop-optimization-pack/app-v/appv-capacity-planning
- - name: Planning for High Availability with App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-high-availability-with-appv
- - name: Planning to Deploy App-V with an Electronic Software Distribution System
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions
- - name: Planning for the App-V Server Deployment
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv-server-deployment
- - name: Planning for the App-V Sequencer and Client Deployment
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-sequencer-and-client-deployment
- - name: Planning for Using App-V with Office
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-using-appv-with-office
- - name: Planning to Use Folder Redirection with App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-folder-redirection-with-appv
- - name: App-V Planning Checklist
- href: /microsoft-desktop-optimization-pack/app-v/appv-planning-checklist
- - name: Deploying
- items:
- - name: Deploying App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-appv
- - name: App-V sequencer and client configuration
- items:
- - name: Deploying the App-V Sequencer and Configuring the Client
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-sequencer-and-client
- - name: About Client Configuration Settings
- href: /microsoft-desktop-optimization-pack/app-v/appv-client-configuration-settings
- - name: Enable the App-V desktop client
- href: /microsoft-desktop-optimization-pack/app-v/appv-enable-the-app-v-desktop-client
- - name: How to Install the Sequencer
- href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-sequencer
- - name: App-V server deployment
- items:
- - name: Deploying the App-V Server
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-server
- - name: How to Deploy the App-V Server
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-the-appv-server
- - name: How to Deploy the App-V Server Using a Script
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-the-appv-server-with-a-script
- - name: How to Deploy the App-V Databases by Using SQL Scripts
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-appv-databases-with-sql-scripts
- - name: How to Install the Publishing Server on a Remote Computer
- href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-publishing-server-on-a-remote-computer
- - name: How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services
- href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-management-and-reporting-databases-on-separate-computers
- - name: How to install the Management Server on a Standalone Computer and Connect it to the Database
- href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-management-server-on-a-standalone-computer
- - name: About App-V Reporting
- href: /microsoft-desktop-optimization-pack/app-v/appv-reporting
- - name: How to install the Reporting Server on a Standalone Computer and Connect it to the Database
- href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-reporting-server-on-a-standalone-computer
- - name: App-V Deployment Checklist
- href: /microsoft-desktop-optimization-pack/app-v/appv-deployment-checklist
- - name: Deploying Microsoft Office 2016 by Using App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2016-with-appv
- - name: Deploying Microsoft Office 2013 by Using App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2013-with-appv
- - name: Deploying Microsoft Office 2010 by Using App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2010-wth-appv
- - name: Operations
- items:
- - name: Operations for App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-operations
- - name: Creating and managing virtualized applications
- items:
- - name: Creating and Managing App-V Virtualized Applications
- href: /microsoft-desktop-optimization-pack/app-v/appv-creating-and-managing-virtualized-applications
- - name: Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)
- href: /microsoft-desktop-optimization-pack/app-v/appv-auto-provision-a-vm
- - name: Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)
- href: /microsoft-desktop-optimization-pack/app-v/appv-auto-batch-sequencing
- - name: Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)
- href: /microsoft-desktop-optimization-pack/app-v/appv-auto-batch-updating
- - name: Manually sequence a new app using Microsoft Application Virtualization Sequencer (App-V Sequencer)
- href: /microsoft-desktop-optimization-pack/app-v/appv-sequence-a-new-application
- - name: How to Modify an Existing Virtual Application Package
- href: /microsoft-desktop-optimization-pack/app-v/appv-modify-an-existing-virtual-application-package
- - name: How to Create and Use a Project Template
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-and-use-a-project-template
- - name: How to Create a Package Accelerator
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-package-accelerator
- - name: How to Create a Virtual Application Package Using an App-V Package Accelerator
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-virtual-application-package-package-accelerator
- - name: Administering App-V
- items:
- - name: Administering App-V Virtual Applications by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-administering-virtual-applications-with-the-management-console
- - name: About App-V Dynamic Configuration
- href: /microsoft-desktop-optimization-pack/app-v/appv-dynamic-configuration
- - name: How to Connect to the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-connect-to-the-management-console
- - name: How to Add or Upgrade Packages by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-add-or-upgrade-packages-with-the-management-console
- - name: How to Configure Access to Packages by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-configure-access-to-packages-with-the-management-console
- - name: How to Publish a Package by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-publish-a-packages-with-the-management-console
- - name: How to Delete a Package in the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-delete-a-package-with-the-management-console
- - name: How to Add or Remove an Administrator by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-add-or-remove-an-administrator-with-the-management-console
- - name: How to Register and Unregister a Publishing Server by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-register-and-unregister-a-publishing-server-with-the-management-console
- - name: How to Create a Custom Configuration File by Using the App-V Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-custom-configuration-file-with-the-management-console
- - name: How to Transfer Access and Configurations to Another Version of a Package by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console
- - name: How to Customize Virtual Applications Extensions for a Specific AD Group by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-customize-virtual-application-extensions-with-the-management-console
- - name: How to View and Configure Applications and Default Virtual Application Extensions by Using the Management Console
- href: /microsoft-desktop-optimization-pack/app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console
- - name: Connection groups
- items:
- - name: Managing Connection Groups
- href: /microsoft-desktop-optimization-pack/app-v/appv-managing-connection-groups
- - name: About the Connection Group Virtual Environment
- href: /microsoft-desktop-optimization-pack/app-v/appv-connection-group-virtual-environment
- - name: About the Connection Group File
- href: /microsoft-desktop-optimization-pack/app-v/appv-connection-group-file
- - name: How to Create a Connection Group
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-connection-group
- - name: How to Create a Connection Group with User-Published and Globally Published Packages
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-connection-group-with-user-published-and-globally-published-packages
- - name: How to Delete a Connection Group
- href: /microsoft-desktop-optimization-pack/app-v/appv-delete-a-connection-group
- - name: How to Publish a Connection Group
- href: /microsoft-desktop-optimization-pack/app-v/appv-publish-a-connection-group
- - name: How to Make a Connection Group Ignore the Package Version
- href: /microsoft-desktop-optimization-pack/app-v/appv-configure-connection-groups-to-ignore-the-package-version
- - name: How to Allow Only Administrators to Enable Connection Groups
- href: /microsoft-desktop-optimization-pack/app-v/appv-allow-administrators-to-enable-connection-groups
- - name: Deploying App-V packages with ESD
- items:
- - name: Deploying App-V Packages by Using Electronic Software Distribution (ESD)
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-packages-with-electronic-software-distribution-solutions
- - name: How to deploy App-V Packages Using Electronic Software Distribution
- href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions
- - name: How to Enable Only Administrators to Publish Packages by Using an ESD
- href: /microsoft-desktop-optimization-pack/app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions
- - name: Using the management console
- items:
- - name: Using the App-V client management console
- href: /microsoft-desktop-optimization-pack/app-v/appv-using-the-client-management-console
- - name: Automatically clean up unpublished packages on the App-V client
- href: /microsoft-desktop-optimization-pack/app-v/appv-auto-clean-unpublished-packages
- - name: Migrating
- items:
- - name: Migrating to App-V from a previous version
- href: /microsoft-desktop-optimization-pack/app-v/appv-migrating-to-appv-from-a-previous-version
- - name: How to convert a package created in a previous version of App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-convert-a-package-created-in-a-previous-version-of-appv
- - name: Maintenance
- items:
- - name: Maintaining App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-maintaining-appv
- - name: How to Move the App-V Server to Another Computer
- href: /microsoft-desktop-optimization-pack/app-v/appv-move-the-appv-server-to-another-computer
- - name: Administering App-V with Windows PowerShell
- items:
- - name: Administering App-V by using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-administering-appv-with-powershell
- - name: How to Load the Windows PowerShell Cmdlets for App-V and Get Cmdlet Help
- href: /microsoft-desktop-optimization-pack/app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help
- - name: How to Manage App-V Packages Running on a Stand-Alone Computer by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell
- - name: How to Manage Connection Groups on a Stand-alone Computer by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell
- - name: How to Modify Client Configuration by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-modify-client-configuration-with-powershell
- - name: How to Configure the Client to Receive Package and Connection Groups Updates From the Publishing Server
- href: /microsoft-desktop-optimization-pack/app-v/appv-configure-the-client-to-receive-updates-from-the-publishing-server
- - name: How to Apply the User Configuration File by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-apply-the-user-configuration-file-with-powershell
- - name: How to Apply the Deployment Configuration File by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-apply-the-deployment-configuration-file-with-powershell
- - name: How to Sequence a Package by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-sequence-a-package-with-powershell
- - name: How to Create a Package Accelerator by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-package-accelerator-with-powershell
- - name: How to Enable Reporting on the App-V Client by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-enable-reporting-on-the-appv-client-with-powershell
- - name: How to Install the App-V Databases and Convert the Associated Security Identifiers by Using Windows PowerShell
- href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell
- - name: Troubleshooting App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-troubleshooting
- - name: Technical Reference
- items:
- - name: Technical Reference for App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-technical-reference
- - name: Available Mobile Device Management (MDM) settings for App-V
- href: /microsoft-desktop-optimization-pack/app-v/appv-available-mdm-settings
- - name: Performance Guidance for Application Virtualization
- href: /microsoft-desktop-optimization-pack/app-v/appv-performance-guidance
- - name: Application Publishing and Client Interaction
- href: /microsoft-desktop-optimization-pack/app-v/appv-application-publishing-and-client-interaction
- - name: Viewing App-V Server Publishing Metadata
- href: /microsoft-desktop-optimization-pack/app-v/appv-viewing-appv-server-publishing-metadata
- - name: Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications
- href: /microsoft-desktop-optimization-pack/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment
+- name: Overview of apps in Windows
+ href: overview-windows-apps.md
+- name: Sideload line of business (LOB) apps
+ href: sideload-apps-in-windows.md
+- name: Private app repo on Windows 11
+ href: private-app-repository-mdm-company-portal-windows-11.md
+- name: Remove background task resource restrictions
+ href: enterprise-background-activity-controls.md
+- name: Service host grouping in Windows 10
+ href: svchost-service-refactoring.md
+- name: Per-user services in Windows
+ href: per-user-services-in-windows.md
+- name: Keep removed apps from returning during an update
+ href: remove-provisioned-apps-during-update.md
diff --git a/windows/client-management/azure-active-directory-integration-with-mdm.md b/windows/client-management/azure-active-directory-integration-with-mdm.md
index 27c5fb235c..eefc2151ab 100644
--- a/windows/client-management/azure-active-directory-integration-with-mdm.md
+++ b/windows/client-management/azure-active-directory-integration-with-mdm.md
@@ -5,18 +5,18 @@ ms.topic: conceptual
ms.collection:
- highpri
- tier2
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Microsoft Entra integration with MDM
-Microsoft Entra ID is the world's largest enterprise cloud identity management service. It's used by organizations to access Microsoft 365 and business applications from Microsoft and third-party software as a service (SaaS) vendors. Many of the rich Windows experiences for organizational users (such as store access or OS state roaming) use Microsoft Entra ID as the underlying identity infrastructure. Windows integrates with Microsoft Entra ID, allowing devices to be registered in Microsoft Entra ID and enrolled into MDM in an integrated flow.
+Microsoft Entra ID is the world's largest enterprise cloud identity management service. It's used by organizations to access Microsoft 365 and business applications from Microsoft and third-party software as a service (SaaS) vendors. Many of the rich Windows experiences for organizational users (such as store access or OS state roaming) use Microsoft Entra ID as the underlying identity infrastructure. Windows integrates with Microsoft Entra ID, allowing devices to be registered in Microsoft Entra ID and enrolled into Mobile Device Management (MDM) in an integrated flow.
Once a device is enrolled in MDM, the MDM:
- Can enforce compliance with organization policies, add or remove apps, and more.
- Can report a device's compliance in Microsoft Entra ID.
-- Microsoft Entra ID can allow access to organization resources or applications secured by Microsoft Entra ID to devices that comply with policies.
+- Can allow access to organization resources or applications secured by Microsoft Entra ID to devices that comply with policies.
To support these rich experiences with their MDM product, MDM vendors can integrate with Microsoft Entra ID.
@@ -24,23 +24,21 @@ To support these rich experiences with their MDM product, MDM vendors can integr
There are several ways to connect your devices to Microsoft Entra ID:
-- [Join device to Microsoft Entra ID](/azure/active-directory/devices/concept-azure-ad-join)
-- [Join device to on-premises AD and Microsoft Entra ID](/azure/active-directory/devices/concept-azure-ad-join-hybrid)
-- [Add a Microsoft work account to Windows](/azure/active-directory/devices/concept-azure-ad-register)
+- [Join device to Microsoft Entra ID](/entra/identity/devices/concept-directory-join)
+- [Join device to on-premises AD and Microsoft Entra ID](/entra/identity/devices/concept-hybrid-join)
+- [Add a Microsoft work account to Windows](/entra/identity/devices/concept-device-registration)
In each scenario, Microsoft Entra authenticates the user and the device. It provides a verified unique device identifier that can be used for MDM enrollment. The enrollment flow provides an opportunity for the MDM service to render its own UI, using a web view. MDM vendors should use the UI to render the Terms of Use (TOU), which can be different for company-owned and bring-your-own-device (BYOD) devices. MDM vendors can also use the web view to render more UI elements, such as asking for a one-time PIN.
In Windows 10, the web view during the out-of-the-box scenario is displayed as full-screen by default, providing MDM vendors with the capability to create a seamless edge-to-edge user experience. However, in Windows 11 the web view is rendered within an iframe. It's important that MDM vendors who integrate with Microsoft Entra ID respect the Windows design guidelines. This step includes using a responsive web design and respecting the Windows accessibility guidelines. For example, include the forward and back buttons that are properly wired to the navigation logic. More details are provided later in this article.
-For Microsoft Entra enrollment to work for an Active Directory Federated Services (AD FS) backed Microsoft Entra account, you must enable password authentication for the intranet on the ADFS service. For more information, see [Configure Azure MFA as authentication provider with AD FS](/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa).
+For Microsoft Entra enrollment to work for an Active Directory Federated Services (AD FS) backed Microsoft Entra account, you must enable password authentication for the intranet on the ADFS service. For more information, see [Configure Microsoft Entra multifactor authentication as authentication provider with AD FS](/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa).
Once a user has a Microsoft Entra account added to Windows and enrolled in MDM, the enrollment can be managed through **Settings** > **Accounts** > **Access work or school**. Device management of either Microsoft Entra join for organization scenarios or BYOD scenarios is similar.
> [!NOTE]
> Users can't remove the device enrollment through the **Access work or school** user interface because management is tied to the Microsoft Entra ID or work account.
-
-
### MDM endpoints involved in Microsoft Entra integrated enrollment
Microsoft Entra MDM enrollment is a two-step process:
@@ -64,17 +62,15 @@ To support Microsoft Entra enrollment, MDM vendors must host and expose a **Term
The MDM is expected to use this information about the device (Device ID) when reporting device compliance back to Microsoft Entra ID using the [Microsoft Graph API](/azure/active-directory/develop/active-directory-graph-api). A sample for reporting device compliance is provided later in this article.
-
-
## Make MDM a reliable party of Microsoft Entra ID
To participate in the integrated enrollment flow outlined in the previous section, the MDM must consume access tokens issued by Microsoft Entra ID. To report compliance with Microsoft Entra ID, the MDM must authenticate itself to Microsoft Entra ID and obtain authorization in the form of an access token that allows it to invoke the [Microsoft Graph API](/azure/active-directory/develop/active-directory-graph-api).
### Cloud-based MDM
-A cloud-based MDM is a SaaS application that provides device management capabilities in the cloud. It's a multi-tenant application. This application is registered with Microsoft Entra ID in the home tenant of the MDM vendor. When an IT admin decides to use this MDM solution, an instance of this application is made visible in the tenant of the customer.
+A cloud-based MDM is a SaaS application that provides device management capabilities in the cloud. It's a multitenant application. This application is registered with Microsoft Entra ID in the home tenant of the MDM vendor. When an IT admin decides to use this MDM solution, an instance of this application is made visible in the tenant of the customer.
-The MDM vendor must first register the application in their home tenant and mark it as a multi-tenant application. For more information about how to add multi-tenant applications to Microsoft Entra ID, see the [Integrate an app that authenticates users and calls Microsoft Graph using the multi-tenant integration pattern (SaaS)](https://go.microsoft.com/fwlink/p/?LinkId=613661) code sample on GitHub.
+The MDM vendor must first register the application in their home tenant and mark it as a multitenant application. For more information about how to add multitenant applications to Microsoft Entra ID, see the [Integrate an app that authenticates users and calls Microsoft Graph using the multitenant integration pattern (SaaS)](https://go.microsoft.com/fwlink/p/?LinkId=613661) code sample on GitHub.
> [!NOTE]
> For the MDM provider, if you don't have an existing Microsoft Entra tenant with a Microsoft Entra subscription that you manage, follow these step-by-step guides:
@@ -82,7 +78,7 @@ The MDM vendor must first register the application in their home tenant and mark
> - [Quickstart: Create a new tenant in Microsoft Entra ID](/azure/active-directory/fundamentals/active-directory-access-create-new-tenant) to set up a tenant.
> - [Associate or add an Azure subscription to your Microsoft Entra tenant](/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory) to add a subscription, and manage it via the Azure Portal.
-The MDM application uses keys to request access tokens from Microsoft Entra ID. These keys are managed within the tenant of the MDM provider and not visible to individual customers. The same key is used by the multi-tenant MDM application to authenticate itself with Microsoft Entra ID, in the customer tenant where the managed device belongs.
+The MDM application uses keys to request access tokens from Microsoft Entra ID. These keys are managed within the tenant of the MDM provider and not visible to individual customers. The same key is used by the multitenant MDM application to authenticate itself with Microsoft Entra ID, in the customer tenant where the managed device belongs.
> [!NOTE]
> All MDM apps must implement Microsoft Entra v2 tokens before we certify that integration works. Due to changes in the Microsoft Entra app platform, using Microsoft Entra v2 tokens is a hard requirement. For more information, see [Microsoft identity platform access tokens](/azure/active-directory/develop/access-tokens#token-formats).
@@ -107,8 +103,6 @@ For cloud-based MDM, you can roll over the application keys without requiring a
For the on-premises MDM, the Microsoft Entra authentication keys are within the customer tenant and the customer's administrator must roll over the keys. To improve security, provide guidance to customers about rolling over and protecting the keys.
-
-
## Publish your MDM app to Microsoft Entra app gallery
IT administrators use the Microsoft Entra app gallery to add an MDM for their organization to use. The app gallery is a rich store with over 2400 SaaS applications that are integrated with Microsoft Entra ID.
@@ -124,7 +118,7 @@ The following table shows the required information to create an entry in the Mic
| Item | Description |
|---------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| **Application ID** | The client ID of your MDM app that is configured within your tenant. This ID is the unique identifier for your multi-tenant app. |
+| **Application ID** | The client ID of your MDM app that is configured within your tenant. This ID is the unique identifier for your multitenant app. |
| **Publisher** | A string that identifies the publisher of the app. |
| **Application URL** | A URL to the landing page of your app where your administrators can get more information about the MDM app and contains a link to the landing page of your app. This URL isn't used for the actual enrollment. |
| **Description** | A brief description of your MDM app, which must be under 255 characters. |
@@ -191,7 +185,7 @@ The following claims are expected in the access token passed by Windows to the T
|-----------|----------------------------------------------------------------------------------------------|
| Object ID | Identifier of the user object corresponding to the authenticated user. |
| UPN | A claim containing the user principal name (UPN) of the authenticated user. |
-| TID | A claim representing the tenant ID of the tenant. In the example above, it's Fabrikam. |
+| TID | A claim representing the tenant ID of the tenant. In the previous example, it's Fabrikam. |
| Resource | A sanitized URL representing the MDM application. Example: `https://fabrikam.contosomdm.com` |
> [!NOTE]
@@ -206,7 +200,7 @@ https://fabrikam.contosomdm.com/TermsOfUse?redirect_uri=ms-appx-web://ContosoMdm
Authorization: Bearer eyJ0eXAiOi
```
-The MDM is expected to validate the signature of the access token to ensure it is issued by Microsoft Entra ID and that the recipient is appropriate.
+The MDM is expected to validate the signature of the access token to ensure it's issued by Microsoft Entra ID and that the recipient is appropriate.
### Terms of Use content
@@ -260,8 +254,6 @@ The following table shows the error codes.
| Microsoft Entra token validation failed | 302 | unauthorized_client | unauthorized_client |
| internal service error | 302 | server_error | internal service error |
-
-
## Enrollment protocol with Microsoft Entra ID
With Azure integrated MDM enrollment, there's no discovery phase and the discovery URL is directly passed down to the system from Azure. The following table shows the comparison between the traditional and Azure enrollments.
@@ -284,8 +276,6 @@ With Azure integrated MDM enrollment, there's no discovery phase and the discove
|EnrollmentData Terms of Use binary blob as AdditionalContext for EnrollmentServiceURL|Not supported|Supported|Supported|
|CSPs accessible during enrollment|Windows 10 support: - DMClient - CertificateStore - RootCATrustedCertificates - ClientCertificateInstall - EnterpriseModernAppManagement - PassportForWork - Policy - w7 APPLICATION|||
-
-
## Management protocol with Microsoft Entra ID
There are two different MDM enrollment types that integrate with Microsoft Entra ID, and use Microsoft Entra user and device identities. Depending on the enrollment type, the MDM service may need to manage a single user or multiple users.
@@ -318,8 +308,6 @@ There are two different MDM enrollment types that integrate with Microsoft Entra
- Use the JWT Token Handler extension for WIF to validate the contents of the access token and extract claims required for use. For more information, see [JwtSecurityTokenHandler Class](/dotnet/api/system.identitymodel.tokens.jwt.jwtsecuritytokenhandler).
- Refer to the Microsoft Entra authentication code samples to get a sample for working with access tokens. For an example, see [NativeClient-DotNet](https://go.microsoft.com/fwlink/p/?LinkId=613667).
-
-
## Device Alert 1224 for Microsoft Entra user token
An alert is sent when the DM session starts and there's a Microsoft Entra user logged in. The alert is sent in OMA DM package #1. Here's an example:
@@ -372,15 +360,13 @@ Here's an example.
```
-
-
## Report device compliance to Microsoft Entra ID
Once a device is enrolled with the MDM for management, organization policies configured by the IT administrator are enforced on the device. MDM evaluates the device compliance with configured policies and then reports it to Microsoft Entra ID. This section covers the Graph API call you can use to report a device compliance status to Microsoft Entra ID.
For a sample that illustrates how an MDM can obtain an access token using OAuth 2.0 client\_credentials grant type, see [Daemon\_CertificateCredential-DotNet](https://go.microsoft.com/fwlink/p/?LinkId=613822).
-- **Cloud-based MDM** - If your product is a cloud-based multi-tenant MDM service, you have a single key configured for your service within your tenant. To obtain authorization, use this key to authenticate the MDM service with Microsoft Entra ID.
+- **Cloud-based MDM** - If your product is a cloud-based multitenant MDM service, you have a single key configured for your service within your tenant. To obtain authorization, use this key to authenticate the MDM service with Microsoft Entra ID.
- **On-premises MDM** - If your product is an on-premises MDM, customers must configure your product with the key used to authenticate with Microsoft Entra ID. This key configuration is because each on-premises instance of your MDM product has a different tenant-specific key. So, you may need to expose a configuration experience in your MDM product that enables administrators to specify the key to be used to authenticate with Microsoft Entra ID.
### Use Microsoft Graph API
@@ -415,8 +401,6 @@ Response:
- Success - HTTP 204 with No Content.
- Failure/Error - HTTP 404 Not Found. This error may be returned if the specified device or tenant can't be found.
-
-
## Data loss during unenrollment from Microsoft Entra join
When a user is enrolled into MDM through Microsoft Entra join and then disconnects the enrollment, there's no warning that the user will lose Windows Information Protection (WIP) data. The disconnection message doesn't indicate the loss of WIP data.
diff --git a/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md
index ab7c3e0a1c..aca40777f6 100644
--- a/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md
+++ b/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md
@@ -2,7 +2,7 @@
title: Automatic MDM enrollment in the Intune admin center
description: Automatic MDM enrollment in the Intune admin center
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Automatic MDM enrollment in the Intune admin center
diff --git a/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md b/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md
index d9938c6409..c248120cff 100644
--- a/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md
+++ b/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md
@@ -1,13 +1,13 @@
---
title: Bulk enrollment
-description: Bulk enrollment is an efficient way to set up a large number of devices to be managed by an MDM server without the need to reimage the devices.
+description: Bulk enrollment is an efficient way to set up an MDM server to manage a large number of devices without the need to reimage the devices.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Bulk enrollment using Windows Configuration Designer
-Bulk enrollment is an efficient way to set up a large number of devices to be managed by an MDM server without the need to reimage the devices. You can use the [Provisioning CSP](mdm/provisioning-csp.md) for bulk enrollment, except for the Microsoft Entra join enrollment scenario.
+Bulk enrollment is an efficient way to set up an MDM server to manage a large number of devices without the need to reimage the devices. You can use the [Provisioning CSP](mdm/provisioning-csp.md) for bulk enrollment, except for the Microsoft Entra join enrollment scenario.
## Typical use cases
@@ -68,7 +68,7 @@ Using the WCD, create a provisioning package using the enrollment information re
1. Configure the other settings, such as the Wi-Fi connections so that the device can join a network before joining MDM (for example, **Runtime settings** > **ConnectivityProfiles** > **WLANSetting**).
-1. When you're done adding all the settings, on the **File** menu, select **Save**.
+1. After adding all the settings, select **Save** on the **File** menu.
1. On the main menu, select **Export** > **Provisioning package**.
@@ -120,7 +120,7 @@ Using the WCD, create a provisioning package using the enrollment information re
For detailed descriptions of these settings, see [Provisioning CSP](mdm/provisioning-csp.md).
1. Configure the other settings, such as the Wi-Fi connection so that the device can join a network before joining MDM (for example, **Runtime settings** > **ConnectivityProfiles** > **WLANSetting**).
-1. When you're done adding all the settings, on the **File** menu, select **Save**.
+1. After adding all the settings, select **Save** on the **File** menu.
1. Export and build the package (steps 10-13 in previous section).
1. Apply the package to some test devices and verify that they work. For more information, see [Apply a provisioning package](#apply-a-provisioning-package).
1. Apply the package to your devices.
@@ -142,7 +142,7 @@ Using the WCD, create a provisioning package using the enrollment information re
- If the provisioning engine receives a failure from a CSP, it retries provisioning three times in a row.
- If all immediate attempts fail, a delayed task is launched to try provisioning again later. It will retry four times at a decaying rate of 15 minutes -> 1 hr -> 4 hr -> "Next System Start". These attempts are run from the SYSTEM context.
- It also retries the provisioning each time it's launched, if started from somewhere else as well.
-- In addition, provisioning will be restarted in the SYSTEM context after a sign in and the [system has been idle](/windows/win32/taskschd/task-idle-conditions).
+- In addition, provisioning will be restarted in the SYSTEM context after a sign in and the [system is idle](/windows/win32/taskschd/task-idle-conditions).
## Related articles
diff --git a/windows/client-management/certificate-authentication-device-enrollment.md b/windows/client-management/certificate-authentication-device-enrollment.md
index e53a80cc55..2cea712e44 100644
--- a/windows/client-management/certificate-authentication-device-enrollment.md
+++ b/windows/client-management/certificate-authentication-device-enrollment.md
@@ -2,7 +2,7 @@
title: Certificate authentication device enrollment
description: This section provides an example of the mobile device enrollment protocol using certificate authentication policy.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Certificate authentication device enrollment
diff --git a/windows/client-management/certificate-renewal-windows-mdm.md b/windows/client-management/certificate-renewal-windows-mdm.md
index 573cbe71b2..66d42a4d90 100644
--- a/windows/client-management/certificate-renewal-windows-mdm.md
+++ b/windows/client-management/certificate-renewal-windows-mdm.md
@@ -2,7 +2,7 @@
title: Certificate Renewal
description: Learn how to find all the resources that you need to provide continuous access to client certificates.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Certificate Renewal
@@ -19,7 +19,7 @@ Windows supports automatic certificate renewal, also known as Renew On Behalf Of
> [!NOTE]
> Certificate renewal of the enrollment certificate through ROBO is only supported with Microsoft PKI.
-Auto certificate renewal is the only supported MDM client certificate renewal method for the device that's enrolled using WAB authentication. Meaning, the AuthPolicy is set to Federated. It also means if the server supports WAB authentication, then the MDM certificate enrollment server MUST also support client TLS to renew the MDM client certificate.
+Auto certificate renewal is the only supported MDM client certificate renewal method for a device enrolled using WAB authentication. Meaning, the AuthPolicy is set to Federated. It also means if the server supports WAB authentication, then the MDM certificate enrollment server MUST also support client TLS to renew the MDM client certificate.
For Windows devices, during the MDM client certificate enrollment phase or during MDM management section, the enrollment server or MDM server could configure the device to support automatic MDM client certificate renewal using [CertificateStore CSP's](mdm/certificatestore-csp.md) ROBOSupport node under `CertificateStore/My/WSTEP/Renew` URL.
@@ -89,7 +89,7 @@ In Windows, the renewal period can only be set during the MDM enrollment phase.
For more information about the parameters, see the [CertificateStore configuration service provider](mdm/certificatestore-csp.md).
-Unlike manual certificate renewal, the device doesn't perform an automatic MDM client certificate renewal if the certificate is already expired. To make sure the device has enough time to automatically renew, we recommend you set a renewal period a couple months (40-60 days) before the certificate expires. And, set the renewal retry interval to every few days, like every 4-5 days instead of every seven days (weekly). This change increases the chance that the device will try to connect at different days of the week.
+Unlike manual certificate renewal, the device doesn't perform an automatic MDM client certificate renewal if the certificate is already expired. To make sure the device has enough time to automatically renew, we recommend you set a renewal period a couple months (40-60 days) before the certificate expires. And, set the renewal retry interval to every few days, like every 4-5 days instead of every seven days (weekly). This change increases the chance that the device tries to connect at different days of the week.
## Certificate renewal response
@@ -99,7 +99,7 @@ When RequestType is set to Renew, the web service verifies the following (in add
- The client's certificate is in the renewal period
- The certificate is issued by the enrollment service
- The requester is the same as the requester for initial enrollment
-- For standard client's request, the client hasn't been blocked
+- For standard client's request, the client isn't blocked
After validation is completed, the web service retrieves the PKCS#10 content from the PKCS#7 BinarySecurityToken. The rest is the same as initial enrollment, except that the Provisioning XML only needs to have the new certificate issued by the CA.
diff --git a/windows/client-management/client-tools/add-remove-hide-features.md b/windows/client-management/client-tools/add-remove-hide-features.md
index 4fa8c60998..92fa8aaf85 100644
--- a/windows/client-management/client-tools/add-remove-hide-features.md
+++ b/windows/client-management/client-tools/add-remove-hide-features.md
@@ -1,19 +1,9 @@
---
title: Add, remove, or hide Windows features
description: Learn how to add or remove Windows optional features using the Optional features page in the Settings app. Also see the group policy objects (GPO) and MDM policies that show or hide Windows Features in the Settings app. Use Windows PowerShell to show or hide specific features in Windows Features.
-author: aczechowski
-ms.author: aaroncz
-manager: aaroncz
-ms.date: 03/28/2024
+ms.date: 07/01/2024
ms.topic: how-to
-ms.service: windows-client
-ms.subservice: itpro-apps
-ms.localizationpriority: medium
-ms.collection: tier2
zone_pivot_groups: windows-versions-11-10
-appliesto:
- - ✅ Windows 11
- - ✅ Windows 10
---
# Add, remove, or hide Windows features
@@ -29,7 +19,7 @@ Open the **Optional features** pane in the **Settings** app by selecting the fol
> [!div class="nextstepaction"]
> [Optional features](ms-settings:optionalfeatures)
-or
+Or
1. Right-click on the **Start** menu and select **Run**.
@@ -41,7 +31,7 @@ or
and then select **OK**.
-or
+Or
::: zone pivot="windows-11"
diff --git a/windows/client-management/client-tools/administrative-tools-in-windows.md b/windows/client-management/client-tools/administrative-tools-in-windows.md
index 1e319e16a4..785eb740cc 100644
--- a/windows/client-management/client-tools/administrative-tools-in-windows.md
+++ b/windows/client-management/client-tools/administrative-tools-in-windows.md
@@ -1,18 +1,28 @@
---
-title: Windows Tools/Administrative Tools
+title: Windows Tools
description: The folders for Windows Tools and Administrative Tools are folders in the Control Panel that contain tools for system administrators and advanced users.
-ms.localizationpriority: medium
-ms.date: 08/10/2023
+ms.date: 07/01/2024
ms.topic: conceptual
+zone_pivot_groups: windows-versions-11-10
ms.collection:
-- highpri
-- tier2
- essentials-manage
---
-# Windows Tools/Administrative Tools
+# Windows Tools
-**Windows Tools** is a folder in the Windows 11 Control Panel. **Administrative Tools** is a folder in the Windows 10 Control Panel. These folders contain tools for system administrators and advanced users.
+::: zone pivot="windows-11"
+
+**Windows Tools** is a folder in the Windows 11 Control Panel. This folder contains tools for system administrators and advanced users.
+
+::: zone-end
+
+::: zone pivot="windows-10"
+
+**Administrative Tools** is a folder in the Windows 10 Control Panel. This folder contains tools for system administrators and advanced users.
+
+::: zone-end
+
+::: zone pivot="windows-11"
## Windows Tools folder
@@ -24,6 +34,10 @@ The tools in the folder might vary depending on which edition of Windows you use
:::image type="content" source="images/win11-windows-tools.png" alt-text="Screenshot of the contents of the Windows Tools folder in Windows 11." lightbox="images/win11-windows-tools.png":::
+::: zone-end
+
+::: zone pivot="windows-10"
+
## Administrative Tools folder
The following graphic shows the **Administrative Tools** folder in Windows 10:
@@ -34,34 +48,7 @@ The tools in the folder might vary depending on which edition of Windows you use
-## Tools
-
-The tools are located in the folder `C:\Windows\System32\` or its subfolders.
-
-These tools were included in previous versions of Windows. The associated documentation for each tool can help you use them. The following list provides links to documentation for each tool.
-
-- [Component Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731901(v=ws.11))
-- [Computer Management](https://support.microsoft.com/topic/how-to-use-computer-management-in-windows-xp-d5872f93-4498-f4dd-3a34-36d6f569924f)
-- [Defragment and Optimize Drives](https://support.microsoft.com/windows/ways-to-improve-your-computer-s-performance-c6018c78-0edd-a71a-7040-02267d68ea90)
-- [Disk Cleanup](https://support.microsoft.com/windows/disk-cleanup-in-windows-8a96ff42-5751-39ad-23d6-434b4d5b9a68)
-- [Event Viewer](/previous-versions/windows/it-pro/windows-2000-server/cc938674(v=technet.10))
-- [iSCSI Initiator](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee338476(v=ws.10))
-- [Local Security Policy](/previous-versions/tn-archive/dd277395(v=technet.10))
-- [ODBC Data Sources](/sql/odbc/admin/odbc-data-source-administrator)
-- [Performance Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc749115(v=ws.11))
-- [Print Management](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731857(v=ws.11))
-- [Recovery Drive](https://support.microsoft.com/windows/create-a-recovery-drive-abb4691b-5324-6d4a-8766-73fab304c246)
-- [Registry Editor](/windows/win32/sysinfo/registry)
-- [Resource Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd883276(v=ws.10))
-- [Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc772408(v=ws.11))
-- [System Configuration](/troubleshoot/windows-client/performance/system-configuration-utility-troubleshoot-configuration-errors)
-- [System Information](/previous-versions/windows/it-pro/windows-2000-server/cc957818(v=technet.10))
-- [Task Scheduler](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc766428(v=ws.11))
-- [Windows Firewall with Advanced Security](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754274(v=ws.11))
-- [Windows Memory Diagnostic](/previous-versions/technet-magazine/cc745953(v=msdn.10))
-
-> [!TIP]
-> If the linked content in this list doesn't provide the information you need to use that tool, send feedback with the **This page** link in the **Feedback** section at the bottom of this article.
+::: zone-end
## Related articles
diff --git a/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md b/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md
index 685f872e8a..725c23927a 100644
--- a/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md
+++ b/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md
@@ -1,12 +1,11 @@
---
title: Windows default media removal policy
-description: In Windows 10 and later, the default removal policy for external storage media changed from Better performance to Quick removal.
-ms.date: 08/10/2023
+description: Manage default media removal policy in Windows.
+ms.date: 07/01/2024
ms.topic: conceptual
-ms.localizationpriority: medium
---
-# Change in default removal policy for external storage media in Windows
+# Manage default media removal policy
Windows defines two main policies, **Quick removal** and **Better performance**, that control how the system interacts with external storage devices such as USB thumb drives or Thunderbolt-enabled external drives. Beginning in Windows 10 version 1809, the default policy is **Quick removal**. In earlier versions of Windows, the default policy was **Better performance**.
@@ -16,7 +15,7 @@ You can change the policy setting for each external device, and the policy that
You can use the storage device policy setting to change the manner in which Windows manages storage devices to better meet your needs. The policy settings have the following effects:
-- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This may degrade system performance.
+- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This can degrade system performance.
- **Better performance**: This policy manages storage operations in a manner that improves system performance. When this policy is in effect, Windows can cache write operations to the external device. However, you must use the Safely Remove Hardware process to remove the external drive. The Safely Remove Hardware process protects the integrity of data on the device by making sure that all cached operations finish.
> [!IMPORTANT]
diff --git a/windows/client-management/client-tools/connect-to-remote-aadj-pc.md b/windows/client-management/client-tools/connect-to-remote-aadj-pc.md
index b47fad81ee..c08492c201 100644
--- a/windows/client-management/client-tools/connect-to-remote-aadj-pc.md
+++ b/windows/client-management/client-tools/connect-to-remote-aadj-pc.md
@@ -2,7 +2,7 @@
title: Connect to remote Microsoft Entra joined device
description: Learn how to use Remote Desktop Connection to connect to a Microsoft Entra joined device.
ms.localizationpriority: medium
-ms.date: 08/10/2023
+ms.date: 07/01/2024
ms.topic: conceptual
ms.collection:
- highpri
@@ -14,18 +14,16 @@ ms.collection:
Windows supports remote connections to devices joined to Active Directory s well as devices joined to Microsoft Entra ID using Remote Desktop Protocol (RDP).
- Starting in Windows 10, version 1809, you can [use biometrics to authenticate to a remote desktop session](/windows/whats-new/whats-new-windows-10-version-1809#remote-desktop-with-biometrics).
-- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-azure-ad-authentication).
+- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-microsoft-entra-authentication).
## Prerequisites
- Both devices (local and remote) must be running a supported version of Windows.
- Remote device must have the **Connect to and use this PC from another device using the Remote Desktop app** option selected under **Settings** > **System** > **Remote Desktop**.
- - It's recommended to select **Require devices to use Network Level Authentication to connect** option.
+ - Select **Require devices to use Network Level Authentication to connect** option is recommended.
- If the user who joined the device to Microsoft Entra ID is the only one who is going to connect remotely, no other configuration is needed. To allow more users or groups to connect to the device remotely, you must [add users to the Remote Desktop Users group](#add-users-to-remote-desktop-users-group) on the remote device.
- Ensure [Remote Credential Guard](/windows/access-protection/remote-credential-guard) is turned off on the device you're using to connect to the remote device.
-
-
## Connect with Microsoft Entra authentication
Microsoft Entra authentication can be used on the following operating systems for both the local and remote device:
@@ -64,8 +62,6 @@ The Windows lock screen in the remote session doesn't support Microsoft Entra au
Disconnecting the session also ensures that when the connection is relaunched after a period of inactivity, Microsoft Entra ID reevaluates the applicable conditional access policies.
-
-
## Connect without Microsoft Entra authentication
By default, RDP doesn't use Microsoft Entra authentication, even if the remote PC supports it. This method allows you to connect to the remote Microsoft Entra joined device from:
diff --git a/windows/client-management/client-tools/images/allow-rdp.png b/windows/client-management/client-tools/images/allow-rdp.png
deleted file mode 100644
index 55c13b53bc..0000000000
Binary files a/windows/client-management/client-tools/images/allow-rdp.png and /dev/null differ
diff --git a/windows/client-management/client-tools/images/change-def-rem-policy-2.png b/windows/client-management/client-tools/images/change-def-rem-policy-2.png
index d05d5dd16f..d99919de15 100644
Binary files a/windows/client-management/client-tools/images/change-def-rem-policy-2.png and b/windows/client-management/client-tools/images/change-def-rem-policy-2.png differ
diff --git a/windows/client-management/client-tools/images/crossmark.png b/windows/client-management/client-tools/images/crossmark.png
deleted file mode 100644
index 69432ff71c..0000000000
Binary files a/windows/client-management/client-tools/images/crossmark.png and /dev/null differ
diff --git a/windows/client-management/client-tools/images/quick-assist-get.png b/windows/client-management/client-tools/images/quick-assist-get.png
deleted file mode 100644
index fc7ccdd1a4..0000000000
Binary files a/windows/client-management/client-tools/images/quick-assist-get.png and /dev/null differ
diff --git a/windows/client-management/client-tools/images/rdp.png b/windows/client-management/client-tools/images/rdp.png
deleted file mode 100644
index ac088d0b06..0000000000
Binary files a/windows/client-management/client-tools/images/rdp.png and /dev/null differ
diff --git a/windows/client-management/client-tools/images/settings-page-visibility-gp.png b/windows/client-management/client-tools/images/settings-page-visibility-gp.png
index 198fc83a7c..eabe085176 100644
Binary files a/windows/client-management/client-tools/images/settings-page-visibility-gp.png and b/windows/client-management/client-tools/images/settings-page-visibility-gp.png differ
diff --git a/windows/client-management/client-tools/images/systemcollage.png b/windows/client-management/client-tools/images/systemcollage.png
deleted file mode 100644
index d1400e19f4..0000000000
Binary files a/windows/client-management/client-tools/images/systemcollage.png and /dev/null differ
diff --git a/windows/client-management/client-tools/manage-device-installation-with-group-policy.md b/windows/client-management/client-tools/manage-device-installation-with-group-policy.md
index 0aaf41776d..052dc9e72a 100644
--- a/windows/client-management/client-tools/manage-device-installation-with-group-policy.md
+++ b/windows/client-management/client-tools/manage-device-installation-with-group-policy.md
@@ -1,7 +1,7 @@
---
title: Manage Device Installation with Group Policy
description: Find out how to manage Device Installation Restrictions with Group Policy.
-ms.date: 08/10/2023
+ms.date: 07/01/2024
ms.topic: conceptual
---
diff --git a/windows/client-management/client-tools/manage-settings-app-with-group-policy.md b/windows/client-management/client-tools/manage-settings-app-with-group-policy.md
index bf19bb6ad7..fb091f005b 100644
--- a/windows/client-management/client-tools/manage-settings-app-with-group-policy.md
+++ b/windows/client-management/client-tools/manage-settings-app-with-group-policy.md
@@ -1,7 +1,7 @@
---
title: Manage the Settings app with Group Policy
description: Find out how to manage the Settings app with Group Policy so you can hide specific pages from users.
-ms.date: 08/10/2023
+ms.date: 07/01/2024
ms.topic: conceptual
---
diff --git a/windows/client-management/client-tools/mandatory-user-profile.md b/windows/client-management/client-tools/mandatory-user-profile.md
index 78e358f1fd..5e64dd2f66 100644
--- a/windows/client-management/client-tools/mandatory-user-profile.md
+++ b/windows/client-management/client-tools/mandatory-user-profile.md
@@ -1,16 +1,13 @@
---
title: Create mandatory user profiles
-description: A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users.
-ms.date: 08/10/2023
+description: A mandatory user profile is a special type of preconfigured roaming user profile that administrators can use to specify settings for users.
+ms.date: 07/01/2024
ms.topic: conceptual
-ms.collection:
-- highpri
-- tier2
---
# Create mandatory user profiles
-A mandatory user profile is a roaming user profile that has been pre-configured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned.
+A mandatory user profile is a roaming user profile that has been preconfigured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned.
Mandatory user profiles are useful when standardization is important, such as on a kiosk device or in educational settings. Only system administrators can make changes to mandatory user profiles.
@@ -118,12 +115,12 @@ In a domain, you modify properties for the user account to point to the mandator
### How to apply a mandatory user profile to users
1. Open **Active Directory Users and Computers** (dsa.msc).
-1. Navigate to the user account that you'll assign the mandatory profile to.
+1. Navigate to the user account that you want to assign the mandatory profile to.
1. Right-click the user name and open **Properties**.
1. On the **Profile** tab, in the **Profile path** field, enter the path to the shared folder without the extension. For example, if the folder name is `\\server\share\profile.v6`, you would enter `\\server\share\profile`.
1. Select **OK**.
-It may take some time for this change to replicate to all domain controllers.
+It can take some time for this change to replicate to all domain controllers.
## Apply policies to improve sign-in time
diff --git a/windows/client-management/client-tools/quick-assist.md b/windows/client-management/client-tools/quick-assist.md
index 397791e335..91ab1b998a 100644
--- a/windows/client-management/client-tools/quick-assist.md
+++ b/windows/client-management/client-tools/quick-assist.md
@@ -1,9 +1,8 @@
---
title: Use Quick Assist to help users
description: Learn how IT Pros can use Quick Assist to help users.
-ms.date: 05/09/2024
+ms.date: 07/01/2024
ms.topic: conceptual
-ms.localizationpriority: medium
ms.collection:
- highpri
- tier1
@@ -107,6 +106,7 @@ For more information, visit [Install Quick Assist](https://support.microsoft.com
To deploy Quick Assist with Intune, see [Add Microsoft Store apps to Microsoft Intune](/mem/intune/apps/store-apps-microsoft).
+
### Microsoft Edge WebView2
@@ -134,12 +134,15 @@ Quick Assist for macOS is available for interactions with Microsoft Support. If
## Disable Quick Assist within your organization
-If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents external users from using Quick Assist to gain access to devices within your organization.
+If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents guests from using Quick Assist to gain access to devices within your organization.
### Disable Quick Assist
To disable Quick Assist, block traffic to the `https://remoteassistance.support.services.microsoft.com` endpoint. This is the primary endpoint used by Quick Assist to establish a session, and once blocked, Quick Assist can't be used to get help or help someone.
+> [!NOTE]
+> Blocking the endpoint will disrupt the functionality of Remote Help, as it relies on this endpoint for operation.
+
### Uninstall Quick Assist
#### Uninstall via PowerShell
diff --git a/windows/client-management/client-tools/toc.yml b/windows/client-management/client-tools/toc.yml
index 17b21a7926..9600b605e4 100644
--- a/windows/client-management/client-tools/toc.yml
+++ b/windows/client-management/client-tools/toc.yml
@@ -15,7 +15,7 @@ items:
href: manage-settings-app-with-group-policy.md
- name: Manage default media removal policy
href: change-default-removal-policy-external-storage-media.md
- - name: What version of Windows am I running
- href: windows-version-search.md
- name: Windows libraries
href: windows-libraries.md
+ - name: What version of Windows am I running
+ href: windows-version-search.md
\ No newline at end of file
diff --git a/windows/client-management/client-tools/windows-libraries.md b/windows/client-management/client-tools/windows-libraries.md
index 3486649f20..65a263719f 100644
--- a/windows/client-management/client-tools/windows-libraries.md
+++ b/windows/client-management/client-tools/windows-libraries.md
@@ -2,13 +2,15 @@
title: Windows Libraries
description: All about Windows Libraries, which are containers for users' content, such as Documents and Pictures.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/01/2024
---
# Windows libraries
Libraries are virtual containers for users' content. A library can contain files and folders stored on the local computer or in a remote storage location. In Windows Explorer, users interact with libraries in ways similar to how they would interact with other folders. Libraries are built upon the legacy known folders (such as My Documents, My Pictures, and My Music) that users are familiar with, and these known folders are automatically included in the default libraries and set as the default save location.
+To show libraries in File Explorer, go to **Options**, select the **View** tab, and then select **Show libraries**.
+
## Features for Users
Windows libraries provide full content search and rich metadata. Libraries offer the following advantages to users:
diff --git a/windows/client-management/client-tools/windows-version-search.md b/windows/client-management/client-tools/windows-version-search.md
index 2bb838cf72..2c34266131 100644
--- a/windows/client-management/client-tools/windows-version-search.md
+++ b/windows/client-management/client-tools/windows-version-search.md
@@ -1,7 +1,7 @@
---
title: What version of Windows am I running?
description: Discover which version of Windows you're running to determine whether or not your device is enrolled in the Long-Term Servicing Channel or General Availability Channel.
-ms.date: 08/10/2023
+ms.date: 07/01/2024
ms.topic: conceptual
---
@@ -17,8 +17,6 @@ To determine if your device is enrolled in the Long-Term Servicing Channel or th
Select **Start** > **Settings** > **System**, then select **About**. You then see **Edition**, **Version**, and **OS Build** information.
-:::image type="content" source="images/systemcollage.png" alt-text="screenshot of the system properties window for a device running Windows 10.":::
-
## Using Keyword Search
You can type the following in the search bar and press **ENTER** to see version details for your device.
diff --git a/windows/client-management/config-lock.md b/windows/client-management/config-lock.md
index 30b905a41d..f497c86712 100644
--- a/windows/client-management/config-lock.md
+++ b/windows/client-management/config-lock.md
@@ -2,7 +2,7 @@
title: Secured-core configuration lock
description: A secured-core PC (SCPC) feature that prevents configuration drift from secured-core PC features caused by unintentional misconfiguration.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
appliesto:
- ✅ Windows 11
---
@@ -63,7 +63,7 @@ The steps to turn on config lock using Microsoft Intune are as follows:
Config lock is designed to ensure that a secured-core PC isn't unintentionally misconfigured. You keep the ability to enable or disable SCPC features, for example, firmware protection. You can make these changes with group policies or MDM services like Microsoft Intune.
-:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="The Defender Firmware protection setting, with a description of Windows Defender System Guard protects your device from compromised firmware. The setting is set to Off.":::
+:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="The Defender Firmware protection setting, with a description of System Guard protects your device from compromised firmware. The setting is set to Off.":::
## FAQ
diff --git a/windows/client-management/declared-configuration-discovery.md b/windows/client-management/declared-configuration-discovery.md
new file mode 100644
index 0000000000..aabd1dd644
--- /dev/null
+++ b/windows/client-management/declared-configuration-discovery.md
@@ -0,0 +1,197 @@
+---
+title: Windows declared configuration discovery
+description: Learn more about configuring discovery for Windows declared configuration enrollment.
+ms.date: 09/12/2024
+ms.topic: how-to
+---
+
+# Declared configuration discovery
+
+Windows Declared configuration (WinDC) discovery uses a dedicated JSON schema to query enrollment details from the [discovery service endpoint (DS)](/openspecs/windows_protocols/ms-mde2/60deaa44-52df-4a47-a844-f5b42037f7d3#gt_8d76dac8-122a-452b-8c97-b25af916f19b). This process involves sending HTTP requests with specific headers and a JSON body containing details such as user domain, tenant ID, and OS version. The DS responds with the necessary enrollment service URLs and authentication policies based on the enrollment type (Microsoft Entra joined or registered devices).
+
+This article outlines the schema structure for the HTTP request and response bodies, and provides examples to guide the implementation.
+
+## Schema structure
+
+### HTTP request headers
+
+| Header | Required | Description |
+|----------------------------------|----------|-----------------------------------|
+| `MS-CV: %s` | No | Correlation vector for enrollment |
+| `client-request-id: %s` | No | Request ID |
+| `Content-Type: application/json` | Yes | HTTP Content-Type |
+
+### HTTP request body (JSON)
+
+| Field | Required | Description |
+|--|--|--|
+| `userDomain` | No | Domain name of the enrolled account |
+| `upn` | No | User Principal Name (UPN) of the enrolled account |
+| `tenantId` | No | Tenant ID of the enrolled account |
+| `emmDeviceId` | No | Enterprise mobility management (EMM) device ID of the enrolled account |
+| `enrollmentType` | Entra joined: No Entra registered: Yes | Enrollment type of the enrolled account.
Supported Values: - `Device`: Indicates the parent enrollment type is Entra joined (DS response should specify "AuthPolicy": "Federated"). - `User`: Indicates parent enrollment type is Entra registered (DS response should specify "AuthPolicy": "Certificate"). - Legacy case (Entra joined only): If the `enrollmentType` parameter isn't included in the request body, the device should be treated as Entra joined. |
+| `osVersion` | Yes | OS version on the device. The DS can use the `osVersion` to determine if the client platform supports WinDC enrollment. Review [supported platforms](declared-configuration.md#supported-platforms) for details. |
+
+### HTTP DS response body (JSON)
+
+| Field | Required | Description |
+|------------------------------|----------|--------------------------------------------------------------------------------------------------------------------------------------------|
+| `EnrollmentServiceUrl` | Yes | URL of the WinDC enrollment service |
+| `EnrollmentVersion` | No | Enrollment version |
+| `EnrollmentPolicyServiceUrl` | Yes | Enrollment Policy Service URL |
+| `AuthenticationServiceUrl` | Yes | Authentication Service URL |
+| `ManagementResource` | No | Management Resource |
+| `TouUrl` | No | Terms of use URL |
+| `AuthPolicy` | Yes | Authentication policy. Supported values: - `Federated` (required for Entra joined) - `Certificate` (required for Entra registered) |
+| `errorCode` | No | Error code |
+| `message` | No | Status message |
+
+## Examples
+
+### Discovery request
+
+**Headers**
+
+`Content-Type: application/json`
+
+**Body**
+
+1. Single template approach: Client sends the **UPN** value in the initial request, along with the **tenantId** parameter.
+
+ 1. Microsoft Entra joined:
+
+ ```json
+ {
+ "userDomain" : "contoso.com",
+ "upn" : "johndoe@contoso.com",
+ "tenantId" : "00000000-0000-0000-0000-000000000000",
+ "emmDeviceId" : "00000000-0000-0000-0000-000000000000",
+ "enrollmentType" : "Device",
+ "osVersion" : "10.0.00000.0"
+ }
+ ```
+
+ 1. Microsoft Entra registered:
+
+ ```json
+ {
+
+ "userDomain" : "contoso.com",
+ "upn" : "johndoe@contoso.com",
+ "tenantId" : "00000000-0000-0000-0000-000000000000",
+ "emmDeviceId" : "00000000-0000-0000-0000-000000000000",
+ "enrollmentType" : "Device",
+ "osVersion" : "10.0.00000.0"
+ }
+ ```
+
+1. No UPN (legacy)
+
+ 1. Microsoft Entra joined:
+
+ ```json
+ {
+ "userDomain" : "contoso.com",
+ "emmDeviceId" : "00000000-0000-0000-0000-000000000000",
+ "enrollmentType" : "Device",
+ "osVersion" : "10.0.00000.0"
+ }
+ ```
+
+ 1. Microsoft Entra registered:
+
+ ```json
+ {
+ "userDomain" : "contoso.com",
+ "emmDeviceId" : "00000000-0000-0000-0000-000000000000",
+ "enrollmentType" : "User",
+ "osVersion" : "10.0.00000.0"
+ }
+ ```
+
+1. UPN requested by the server (legacy format). Review [error handling](#error-handling) for details on how the server can request UPN data if it isn't provided in the initial request.
+
+ 1. Microsoft Entra joined:
+
+ ```json
+ {
+ "upn" : "johndoe@contoso.com",
+ "emmDeviceId" : "00000000-0000-0000-0000-000000000000",
+ "enrollmentType" : "Device",
+ "osVersion" : "10.0.00000.0"
+ }
+ ```
+
+ 1. Microsoft Entra registered:
+
+ ```json
+ {
+ "upn" : "johndoe@contoso.com",
+ "emmDeviceId" : "00000000-0000-0000-0000-000000000000",
+ "enrollmentType" : "User",
+ "osVersion" : "10.0.00000.0"
+ }
+ ```
+
+### Discovery response
+
+**Headers**
+
+`Content-Type: application/json`
+
+**Body**
+
+1. Microsoft Entra joined (requires `"AuthPolicy": "Federated"`):
+
+ ```json
+ {
+ "EnrollmentServiceUrl" : "https://manage.contoso.com/Enrollment/Discovery",
+ "EnrollmentPolicyServiceUrl" : "https://manage.contoso.com/Enrollment/GetPolicies",
+ "AuthenticationServiceUrl" : "https://manage.contoso.com/Enrollment/AuthService",
+ "AuthPolicy" : "Federated",
+ "ManagementResource":"https://manage.contoso.com",
+ "TouUrl" : "https://manage.contoso.com/Enrollment/tou.aspx"
+ }
+ ```
+
+1. Microsoft Entra registered (requires `"AuthPolicy": "Certificate"`):
+
+ ```json
+ {
+ "EnrollmentServiceUrl" : "https://manage.contoso.com/Enrollment/Discovery",
+ "EnrollmentPolicyServiceUrl" : "https://manage.contoso.com/Enrollment/GetPolicies",
+ "AuthenticationServiceUrl" : "https://manage.contoso.com/Enrollment/AuthService",
+ "AuthPolicy" : "Certificate",
+ "ManagementResource":"https://manage.contoso.com",
+ "TouUrl" : "https://manage.contoso.com/Enrollment/tou.aspx"
+ }
+ ```
+
+### Authentication
+
+WinDC enrollment requires different authentication mechanisms for Microsoft Entra joined and registered devices. The WinDC DS must integrate with the authentication model by specifying the appropriate `AuthPolicy` value in the discovery response, based on the `enrollmentType` property of the request.
+
+- **Microsoft Entra joined devices** use **Federated** authentication (Entra device token).
+- **Microsoft Entra registered devices** use **Certificate** authentication (MDM certificate provisioned for the parent enrollment).
+
+#### Rules
+
+- **For Microsoft Entra joined devices**:
+ - **Discovery request**: `"enrollmentType": "Device"`
+ - **Discovery response**: `"AuthPolicy": "Federated"`
+ - **Authentication**: The client uses the Entra device token to authenticate with the WinDC enrollment server.
+
+- **For legacy cases (where `enrollmentType` value is empty)**:
+ - **Discovery request**: `"enrollmentType": ""`
+ - **Discovery response**: `"AuthPolicy": "Federated"`
+ - **Authentication**: The client uses the Entra device token to authenticate with the WinDC enrollment server.
+
+- **For Microsoft Entra registered devices**:
+ - **Discovery request**: `"enrollmentType": "User"`
+ - **Discovery response**: `"AuthPolicy": "Certificate"`
+ - **Authentication**: The client uses the MDM certificate from the parent enrollment to authenticate with the WinDC enrollment server.
+
+## Error handling
+
+- **UPNRequired**: If no UPN value is provided in the discovery request, the DS can set the `errorCode` to **UPNRequired** in the response to trigger the client to retry the request with a UPN value, if available.
+- **WINHTTP_QUERY_RETRY_AFTER**: The server can set this flag to configure the client request to retry after a specified delay. This flag is useful for handling timeout or throttling scenarios.
\ No newline at end of file
diff --git a/windows/client-management/declared-configuration-enrollment.md b/windows/client-management/declared-configuration-enrollment.md
new file mode 100644
index 0000000000..45ba4643d2
--- /dev/null
+++ b/windows/client-management/declared-configuration-enrollment.md
@@ -0,0 +1,51 @@
+---
+title: Windows declared configuration enrollment
+description: Learn more about configuring enrollment for Windows declared configuration protocol.
+ms.date: 09/12/2024
+ms.topic: how-to
+---
+
+# Declared configuration enrollment
+
+Windows declared configuration (WinDC) enrollment uses new [DMClient CSP](mdm/dmclient-csp.md) policies to facilitate dual enrollment for Windows devices. This process involves setting specific configuration service provider (CSP) policies and executing SyncML commands to manage the enrollment state.
+
+The key CSP policies used for WinDC enrollment include:
+
+- [LinkedEnrollment/Enroll](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentenroll)
+- [LinkedEnrollment/Unenroll](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentunenroll)
+- [LinkedEnrollment/EnrollStatus](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentenrollstatus)
+- [LinkedEnrollment/LastError](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentlasterror)
+- [LinkedEnrollment/DiscoveryEndpoint](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentdiscoveryendpoint)
+
+The following SyncML example sets **LinkedEnrolment/DiscoveryEndpoint** and triggers **LinkedEnrollment/Enroll**:
+
+```xml
+
+
+
+ 2
+
+
+ ./Device/Vendor/MSFT/DMClient/Provider/MS%20DM%20SERVER/LinkedEnrollment/DiscoveryEndpoint
+
+ https://discovery.dm.microsoft.com/EnrollmentConfiguration?api-version=1.0
+
+
+
+
+
+
+
+
+
+ 2
+
+
+ ./Device/Vendor/MSFT/DMClient/Provider/MS%20DM%20SERVER/LinkedEnrollment/Enroll
+
+
+
+
+
+
+```
diff --git a/windows/client-management/declared-configuration-extensibility.md b/windows/client-management/declared-configuration-extensibility.md
index 3121be77f0..bb2faea5f1 100644
--- a/windows/client-management/declared-configuration-extensibility.md
+++ b/windows/client-management/declared-configuration-extensibility.md
@@ -1,13 +1,13 @@
---
-title: Declared configuration extensibility
-description: Learn more about declared configuration extensibility through native WMI providers.
-ms.date: 09/26/2023
+title: Windows declared configuration extensibility
+description: Learn more about Windows declared configuration extensibility through native WMI providers.
+ms.date: 09/12/2024
ms.topic: how-to
---
-# Declared configuration extensibility providers
+# Declared configuration extensibility
-The declared configuration enrollment, which supports the declared configuration client stack, offers extensibility through native WMI providers. This feature instantiates and interfaces with a Windows Management Instrumentation (WMI) provider that has implemented a management infrastructure (MI) interface. The interface must implement GetTargetResource, TestTargetResource, and SetTargetResource methods, and may implement any number of string properties.
+The Windows declared configuration (WinDC) enrollment offers extensibility through native WMI providers. This feature instantiates and interfaces with a Windows Management Instrumentation (WMI) provider that implements a management infrastructure (MI) interface. The interface must implement GetTargetResource, TestTargetResource, and SetTargetResource methods, and can implement any number of string properties.
> [!NOTE]
> Only string properties are currently supported by extensibility providers.
@@ -51,14 +51,14 @@ uint32 SetTargetResource(
To create a native WMI provider, follow the steps outlined in [How to implement an MI provider](/previous-versions/windows/desktop/wmi_v2/how-to-implement-an-mi-provider). These steps include how to generate the source code for an MI interface using the `Convert-MofToProvider.exe` tool to generate the DLL and prepare it for placement.
-1. Create a MOF file that defines the schema for the desired state configuration resource including parameters and methods. This file includes the required parameters for the resource.
+1. Create a Managed Object Format (MOF) file that defines the schema for the desired state configuration resource including parameters and methods. This file includes the required parameters for the resource.
2. Copy the schema MOF file along with any required files into the provider tools directory, for example: ProviderGenerationTool.
3. Edit the required files and include the correct file names and class names.
4. Invoke the provider generator tool to generate the provider's project files.
5. Copy the generated files into the provider's project folder.
6. Start the development process.
-## Example
+## Example MI provider
This example provides more details about each step to demonstrate how to implement a sample native resource named `MSFT_FileDirectoryConfiguration`.
@@ -235,15 +235,180 @@ The `MSFT_FileDirectoryConfiguration_Invoke_GetTargetResource` function does the
1. Clean up resources, for example, free allocated memory.
+## WinDC document
+
+> [!IMPORTANT]
+> The target of the scenario settings can only be device wide for extensibility. The CSP **scope** defined in `` and WinDC **context** must be `Device`.
+
+The value of the `Document` leaf node in the [DeclaredConfiguration CSP](mdm/declaredconfiguration-csp.md) is an XML document that describes the request. Here's a sample WinDC document with the configuration data specified for extensibility.
+
+```xml
+
+
+ c:\data\test\bin\ut_extensibility.tmp
+ TestFileContent1
+
+
+```
+
+Only supported values for `osdefinedscenario` can be used. Unsupported values result in an error message similar to `Invalid scenario name`.
+
+| osdefinedscenario | Description |
+|--------------------------------------|----------------------------------------------|
+| MSFTExtensibilityMIProviderConfig | Used to configure MI provider settings. |
+| MSFTExtensibilityMIProviderInventory | Used to retrieve MI provider setting values. |
+
+Both `MSFTExtensibilityMIProviderConfig` and `MSFTExtensibilityMIProviderInventory` scenarios that require the same tags and attributes.
+
+- The `` XML tag describes the targeted WMI provider expressed by a namespace and class name along with the values either to be applied to the device or queried by the MI provider.
+
+ This tag has the following attributes:
+
+ | Attribute | Description |
+ |--|--|
+ | `namespace` | Specifies the targeted MI provider namespace. |
+ | `classname` | The targeted MI provider. |
+
+- The `` XML tag describes the required parameter name and value. It only needs a value for configuration. The name is an attribute and the value is `` content.
+
+ This tag has the following attributes:
+
+ | Attribute | Description |
+ |--|--|
+ | `name` | Specifies the name of an MI provider parameter. |
+
+- The `` XML tag describes the optional parameter name and value. It only needs a value for configuration. The name is an attribute and the value is `` content.
+
+ This tag has the following attributes:
+
+ | Attribute | Description |
+ |--|--|
+ | `name` | Specifies the name of an MI provider parameter. |
+
+## SyncML examples
+
+The standard OMA-DM SyncML syntax is used to specify the DeclaredConfiguration CSP operations such as **Replace**, **Add**, and **Delete**. The payload of the SyncML's `` element must be XML-encoded. For this XML encoding, there are various online encoders that you can use. To avoid encoding the payload, you can use [CDATA Section](https://www.w3.org/TR/REC-xml/#sec-cdata-sect) as shown in the following SyncML examples.
+
+### Configuration request
+
+This example demonstrates how to send a configuration request using the `MSFT_FileDirectoryConfiguration` MI provider with the `MSFTExtensibilityMIProviderConfig` scenario.
+
+```xml
+
+
+
+
+ 14
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/27FEA311-68B9-4320-9FC4-296F6FDFAFE2/Document
+
+
+
+ c:\data\test\bin\ut_extensibility.tmp
+ TestFileContent1
+
+
+ ]]>
+
+
+
+
+```
+
+### Inventory request
+
+This example demonstrates how to send an inventory request using the MSFT_FileDirectoryConfiguration MI provider with the MSFTExtensibilityMIProviderInventory scenario.
+
+```xml
+
+
+
+
+ 15
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Inventory/Documents/12345678-1234-1234-1234-123456789012/Document
+
+
+
+ c:\data\test\bin\ut_extensibility.tmp
+
+
+ ]]>
+
+
+
+
+```
+
+### Retrieve results
+
+This example retrieves the results of a configuration or inventory request:
+
+**Request**:
+
+```xml
+
+
+
+ 2
+
+
+ chr
+ text/plain
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Results/27FEA311-68B9-4320-9FC4-296F6FDFAFE2/Document
+
+
+
+
+
+
+```
+
+**Response**:
+
+```xml
+
+ 2
+ 1
+ 2
+ Get
+ 200
+
+
+ 3
+ 1
+ 2
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Results/27FEA311-68B9-4320-9FC4-296F6FDFAFE2/Document
+
+
+
+
+
+
+
+
+
+
+
+```
+
## MI implementation references
-- [Introducing the management infrastructure (MI) API](/archive/blogs/wmi/introducing-new-management-infrastructure-mi-api)
-- [Implementing MI provider (1) - Overview](/archive/blogs/wmi/implementing-mi-provider-1-overview)
-- [Implementing MI provider (2) - Define schema](/archive/blogs/wmi/implementing-mi-provider-2-define-schema)
-- [Implementing MI provider (3) - Generate code](/archive/blogs/wmi/implementing-mi-provider-3-generate-code)
-- [Implementing MI provider (4) - Generate code (continue)](/archive/blogs/wmi/implementing-mi-provider-4-generate-code-continute)
-- [Implementing MI provider (5) - Implement](/archive/blogs/wmi/implementing-mi-provider-5-implement)
-- [Implementing MI provider (6) - Build, register, and debug](/archive/blogs/wmi/implementing-mi-provider-6-build-register-and-debug)
+- [Management infrastructure (MI) API](/archive/blogs/wmi/introducing-new-management-infrastructure-mi-api)
+- [MI provider (1) - Overview](/archive/blogs/wmi/implementing-mi-provider-1-overview)
+- [MI provider (2) - Define schema](/archive/blogs/wmi/implementing-mi-provider-2-define-schema)
+- [MI provider (3) - Generate code](/archive/blogs/wmi/implementing-mi-provider-3-generate-code)
+- [MI provider (4) - Generate code (continue)](/archive/blogs/wmi/implementing-mi-provider-4-generate-code-continute)
+- [MI provider (5) - Implement](/archive/blogs/wmi/implementing-mi-provider-5-implement)
+- [MI provider (6) - Build, register, and debug](/archive/blogs/wmi/implementing-mi-provider-6-build-register-and-debug)
- [MI interfaces](/previous-versions/windows/desktop/wmi_v2/mi-interfaces)
- [MI datatypes](/previous-versions/windows/desktop/wmi_v2/mi-datatypes)
- [MI structures and unions](/previous-versions/windows/desktop/wmi_v2/mi-structures-and-unions)
diff --git a/windows/client-management/declared-configuration-resource-access.md b/windows/client-management/declared-configuration-resource-access.md
new file mode 100644
index 0000000000..d414e05b95
--- /dev/null
+++ b/windows/client-management/declared-configuration-resource-access.md
@@ -0,0 +1,463 @@
+---
+title: Windows declared configuration resource access
+description: Learn more about configuring resource access using Windows declared Configuration.
+ms.date: 09/12/2024
+ms.topic: how-to
+---
+
+# Declared configuration resource access
+
+Windows declared configuration (WinDC) resource access is used to manage device configurations and enforce policies to ensure the devices remain in a desired state. It's crucial for maintaining security, compliance, and operational efficiency in organizations. WinDC cloud service is used to send the desired state of a resource to the device where correspondingly the device has the responsibility to enforce and maintain the resource configuration state.
+
+[Configuration Service Providers (CSPs)](mdm/index.yml) play a vital role for configuring Resource access and act as an interface between the device and the WinDC protocol. They provide a consistent and standardized approach to deploying and enforcing configurations. CSPs support various resource access scenarios, including:
+
+- [VPNv2 CSP](mdm/vpnv2-csp.md) and [VPN CSP](mdm/vpn-csp.md)
+- [Wi-Fi CSP](mdm/wifi-csp.md)
+- [ClientCertificateInstall CSP](mdm/clientcertificateinstall-csp.md)
+- [ActiveSync CSP](mdm/activesync-csp.md)
+- [WiredNetwork CSP](mdm/wirednetwork-csp.md)
+- [RootCACertificates CSP](mdm/rootcacertificates-csp.md)
+
+The WinDC stack on the device processes configuration requests and maintains the desired state, which is key to RA. The efficiency, accuracy, and enforcement of configuration requests are critical for effective RA. Resource access integrates seamlessly with WinDC, providing an extended method for managing devices through the cloud with enhanced scalability and efficiency.
+
+- **Efficiency**: Batch-based processing minimizes server resource usage and reduces latency.
+- **Accuracy**: WinDC client stack understands the device's configuration surface area, enabling effective handling of continuous updates. It ensures precise execution of configuration changes communicated by the cloud service.
+- **Policy Enforcement**: Apply and maintain organizational policies across devices consistently and at scale, ensuring compliance and uniform configuration. This aspect allows organizations to maintain the desired security posture across devices.
+
+## Resource access guidelines
+
+These guidelines provide best practices and examples for developers and testers to implement resource access (RA) configurations in a secure, efficient, and consistent manner. They aim to enhance network security and optimize resource access for end users while adhering to policies and compliance requirements.
+
+- **Configuration Integrity**: To support uninterrupted and secure resource access, ensure consistent configurations across devices and users.
+- **State Validation**: Monitor the state of configurations to verify the correct application of resource access settings.
+- **Profile Management**: Effectively manage user profiles by adding, updating, and deleting as needed, to control access to resources and maintain security.
+- **Log and Audit**: Utilize logs and audit trails for operations and changes to aid in troubleshooting and compliance.
+- **Drift Detection and Remediation**: To maintain compliance with RA policies, continuously monitor drift (changes in configuration or behavior) and take corrective action.
+- **Security and Privacy**: To protect user data and resources, implement strong security and privacy measures in configurations.
+
+By following these guidelines and understanding the syntax of the [DeclaredConfiguration CSP](mdm/declaredconfiguration-csp.md), you can effectively implement and manage RA configurations while maintaining security and compliance.
+
+## WinDC document
+
+The value of the `Document` leaf node in the [DeclaredConfiguration CSP](mdm/declaredconfiguration-csp.md) is an XML document that describes the request. Here's a sample WinDC document with the configuration data specified for resource access.
+
+```xml
+
+
+ 2
+ outbound
+
+
+```
+
+Only supported values for `osdefinedscenario` can be used. Unsupported values result in an error message similar to `Invalid scenario name`.
+
+| osdefinedscenario | Recommended using with |
+|------------------------------|-------------------------------|
+| MSFTWiredNetwork | WiredNetwork |
+| MSFTResource | ActiveSync |
+| MSFTVPN | VPN and VPNv2 |
+| MSFTWifi | Wifi |
+| MSFTInventory | Certificate inventory |
+| MSFTClientCertificateInstall | SCEP, PFX, Bulk Template Data |
+
+These `osdefinedscenario` values require the following tags and attributes.
+
+- The `` XML tag describes the CSP being targeted.
+
+ This tag has the following attributes:
+
+ | Attribute | Description |
+ |--|--|
+ | `name` | Specifies the targeted CSP OMA-URI. |
+
+- The `` XML tag specifies the CSP setting node along with the desired value.
+
+ This tag has the following attributes:
+
+ | Attribute | Description |
+ |-----------|-------------------|
+ | `path` | Setting path |
+ | `type` | Setting data type |
+
+> [!NOTE]
+> The target of the scenario settings must match the WinDC context. The CSP **scope** defined in `` and WinDC **context** must both be either `Device` or `User`.
+>
+> :::image type="content" source="images/declared-configuration-ra-syntax.png" alt-text="WinDC resource access syntax":::
+
+### osdefinedscenario examples
+
+- Partial `MSFTWifi` example for Wifi:
+
+ ```xml
+
+
+ ```
+
+- Partial `MSFTResource` example for ActiveSync:
+
+ ```xml
+
+
+ ```
+
+## SyncML examples
+
+The standard OMA-DM SyncML syntax is used to specify the DeclaredConfiguration CSP operations such as **Replace**, **Add**, and **Delete**. The payload of the SyncML's `` element must be XML-encoded. For this XML encoding, there are various online encoders that you can use. To avoid encoding the payload, you can use [CDATA Section](https://www.w3.org/TR/REC-xml/#sec-cdata-sect) as shown in the following SyncML examples.
+
+### Configure a VPNv2 profile for resource access
+
+This example demonstrates how to use the [VPNv2 CSP](mdm/vpnv2-csp.md) to configure a VPN profile named **Test_SonicWall** on the device in the **User** scope.
+
+```xml
+
+
+
+ 2
+
+
+ chr
+ text/plain
+
+
+ ./User/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/DCA000B5-397D-40A1-AABF-40B25078A7F9/Document
+
+
+
+
+ 2
+ outbound
+ 6
+ 43-54
+ 243-456
+ outbound
+ wip.contoso.com
+ true
+ true
+ https://auto.proxy.com
+ true
+ false
+ 23.54.3.6;server1,vpn.contoso.com;server2
+ <custom></custom>
+ SonicWALL.MobileConnect_e5kpm93dbe93j
+
+
+ ]]>
+
+
+
+
+
+```
+
+
+
+### Updating a VPNv2 profile for resource access
+
+This example demonstrates how to use the same WinDC **Document ID**, but with a new checksum("A3"). It installs a new VPNv2 profile named `Test_SonicwallNew`, and deletes the old profile.
+
+```xml
+
+
+
+ 2
+
+
+ chr
+ text/plain
+
+
+ ./User/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/DCA000B5-397D-40A1-AABF-40B25078A7F9/Document
+
+
+
+
+ 2
+ outbound
+ wip.contoso.com
+ true
+ false
+ https://auto.proxy.com
+ true
+ false
+ 23.54.3.8;server1,vpn2.contoso.com;server2
+ SonicWALL.MobileConnect_e5kpm93dbe93j
+
+
+ ]]>
+
+
+
+
+
+```
+
+### Getting the VPNv2 profile
+
+This example demonstrates how to use `` to retrieve the results of the WinDC request.
+
+```xml
+
+
+
+
+ 1
+
+
+ chr
+ text/plain
+
+
+ ./User/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Results/DCA000B5-397D-40A1-AABF-40B25078A7F9/Document
+
+
+
+
+
+
+```
+
+**Response**:
+
+```xml
+
+
+
+
+ 1
+ 1
+ 0
+ SyncHdr
+ 200
+
+
+ 2
+ 1
+ 2
+ Get
+ 200
+
+
+ 3
+ 1
+ 2
+
+
+ ./User/Vendor/MSFT/DeclaredConfiguration/Host/BulkTemplate/Results/DCA000B5-397D-40A1-AABF-40B25078A7F9/Document
+
+ <DeclaredConfigurationResult context="user" schema="1.0" id="DCA000B5-397D-40A1-AABF-40B25078A7F9" osdefinedscenario="MSFTVPN" checksum="A3" result_checksum="9D2ED497C12D2FCEE1C45158D1F7ED8E2DACE210A0B8197A305417882991C978" result_timestamp="2024-08-06T13:54:38Z" operation="Set" state="60"><CSP name="./Vendor/MSFT/VPNv2" state="60"><URI path="Test_SonicWallNew/TrafficFilterList/0/Protocol" status="200" state="60" type="int" /><URI path="Test_SonicWallNew/TrafficFilterList/0/Direction" status="200" state="60" type="chr" /><URI path="Test_SonicWallNew/EdpModeId" status="200" state="60" type="chr" /><URI path="Test_SonicWallNew/RememberCredentials" status="200" state="60" type="bool" /><URI path="Test_SonicWallNew/AlwaysOn" status="200" state="60" type="bool" /><URI path="Test_SonicWallNew/Proxy/AutoConfigUrl" status="200" state="60" type="chr" /><URI path="Test_SonicWallNew/DeviceCompliance/Enabled" status="200" state="60" type="bool" /><URI path="Test_SonicWallNew/DeviceCompliance/Sso/Enabled" status="200" state="60" type="bool" /><URI path="Test_SonicWallNew/PluginProfile/ServerUrlList" status="200" state="60" type="chr" /><URI path="Test_SonicWallNew/PluginProfile/PluginPackageFamilyName" status="200" state="60" type="chr" /></CSP></DeclaredConfigurationResult>
+
+
+
+
+
+```
+
+> [!TIP]
+> To understand the state values, see [WinDC states](mdm/declaredconfiguration-csp.md#windc-states).
+
+### Deleting the VPNv2 profile
+
+This example demonstrates how to use `` to remove the configuration request to set the VPNv2 profile.
+
+```xml
+
+
+
+
+ 1
+
+
+ chr
+ text/plain
+
+
+ ./User/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/DCA000B5-397D-40A1-AABF-40B25078A7F9/Document
+
+
+
+
+
+
+```
+
+## Resource ownership
+
+MDM-managed resources, such as a VPN profile, are transferred/migrated to WinDC management when a WinDC document is sent to the device for the same resource. This resource stays under WinDC management until the WinDC document is [deleted](mdm/declaredconfiguration-csp.md#delete-a-windc-document) or [abandoned](mdm/declaredconfiguration-csp.md#abandon-a-windc-document). Otherwise, when MDM tries to manage the same resource via the legacy MDM channel using SyncML, it fails with error 0x86000031.
+
+`MDM ConfigurationManager: Command failure status. Configuraton Source ID: (29c383c5-6e2d-43bf-a741-c63cb7516bb4), Enrollment Type: (MDMDeviceWithAAD), CSP Name: (ActiveSync), Command Type: (Add: from Replace or Add), CSP URI: (./User/Vendor/MSFT/ActiveSync/Accounts/{3b8b9d4d-a24e-4c6d-a460-034d0bfb9316}), Result: (Unknown Win32 Error code: 0x86000031).`
+
+## Bulk template data
+
+The Bulk template data scenario extends beyond the regular [ClientCertificateInstall CSP](mdm/clientcertificateinstall-csp.md). It uses a special bulk template document type. This section covers the structure, specification, and results of using the bulk template data.
+
+### Template document
+
+A PFXImport template document contains the structure necessary for importing certificates in bulk. The document should define the necessary fields, and the format required for the bulk import.
+
+- The document type must be `BulkTemplate`.
+- The URI path is different than the regular URIs by using the `@#pfxThumbprint#` syntax, it declares that it's a dynamic node. [Instance data](#template-data) for dynamic nodes is sent later using `BulkVariables`. Each dynamic node might contain dynamic subnodes, such as the `@#pfxBlob#` and `#@pfxPassword#` nodes in this example.
+
+```xml
+
+
+
+
+ 2
+
+
+ chr
+ text/plain
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/BulkTemplate/Documents/47e88660-1861-4131-96e8-f32e85011e55/Document
+
+
+
+
+ foovalue
+ barvalue
+
+
+ 2
+ @#pfxBlob#
+ @#pfxPassword#
+ True
+ 0
+ SomeValue
+
+
+
+ ]]>
+
+
+
+
+
+```
+
+### Template data
+
+The bulk template data specifies the certificates to be imported in a base64 encoded format using the `BulkVariables` URI under the `BulkTemplate`. The template data document can contain multiple instances. Each instance must specify all the subinstance data.
+
+In this example, there are two instances. Each instance defines values for **pfxThumbprint**, a **pfxBlob, and a **pfxPassword**.
+
+```xml
+
+
+
+
+ 3
+
+
+ chr
+ text/plain
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/BulkTemplate/Documents/47e88660-1861-4131-96e8-f32e85011e55/BulkVariables/Value
+
+
+
+ 813A171D7341E1DA90D4A01878DD5328D3519006
+ pfxbase64BlobValue1
+ Password1
+
+
+ 813A171D7341E1DA90D4A01878DD5328D3519007
+ pfxbase64BlobValue2
+ Password2
+
+
+ ]]>
+
+
+
+
+
+```
+
+### Template results
+
+When the bulk template data document is successfully processed, the specified certificates are imported into the defined stores with the provided passwords and key locations.
+
+- Successful Import: The certificates are correctly imported into the device's certificate stores.
+- Error Handling: Any errors encountered during the import process include relevant status codes or messages for troubleshooting.
+
+**Request**:
+
+```xml
+
+
+
+
+ 2
+
+
+ chr
+ text/plain
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/BulkTemplate/Results/47e88660-1861-4131-96e8-f32e85011e55/Document
+
+
+
+
+
+
+```
+
+**Response**:
+
+```xml
+
+
+
+
+ 1
+ 1
+ 0
+ SyncHdr
+ 200
+
+
+ 2
+ 1
+ 2
+ Get
+ 200
+
+
+ 3
+ 1
+ 2
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/Host/BulkTemplate/Results/47e88660-1861-4131-96e8-f32e85011e55/Document
+
+ <DeclaredConfigurationResult context="Device" schema="1.0" id="47e88660-1861-4131-96e8-f32e85011e55" osdefinedscenario="MSFTResource" checksum="FF356C2C71F6A41F9AB4A601AD00C8B5BC7531576233010B13A221A9FE1BE7A0" result_checksum="DD8C1C422D50A410C2949BA5F495C2C42CC4B0C7B498D1B43318C503F6CEF491" result_timestamp="2024-08-06T13:26:23Z" operation="Set" state="60">
+ <CSP name="./Vendor/MSFT/ClientCertificateInstall" state="60">
+ <URI path="PFXCertInstall/813A171D7341E1DA90D4A01878DD5328D3519006/KeyLocation" status="200" state="60" type="int" />
+ <URI path="PFXCertInstall/813A171D7341E1DA90D4A01878DD5328D3519006/PFXCertBlob" status="200" state="60" type="chr" />
+ <URI path="PFXCertInstall/813A171D7341E1DA90D4A01878DD5328D3519006/PFXCertPassword" status="200" state="60" type="chr" />
+ <URI path="PFXCertInstall/813A171D7341E1DA90D4A01878DD5328D3519006/PFXKeyExportable" status="200" state="60" type="bool" />
+ </CSP><CSP name="./Vendor/MSFT/ClientCertificateInstall" state="60">
+ <URI path="PFXCertInstall/CertPFX1/KeyLocation" status="200" state="60" type="int" />
+ <URI path="PFXCertInstall/CertPFX1/PFXCertBlob" status="200" state="60" type="chr" />
+ <URI path="PFXCertInstall/CertPFX1/PFXCertPassword" status="200" state="60" type="chr" />
+ <URI path="PFXCertInstall/CertPFX1/PFXKeyExportable" status="200" state="60" type="bool" />
+ </CSP>
+ </DeclaredConfigurationResult>
+
+
+
+
+
+
+```
diff --git a/windows/client-management/declared-configuration.md b/windows/client-management/declared-configuration.md
index f655d1ae19..a0a28f91ae 100644
--- a/windows/client-management/declared-configuration.md
+++ b/windows/client-management/declared-configuration.md
@@ -1,65 +1,132 @@
---
-title: Declared configuration protocol
-description: Learn more about using declared configuration protocol for desired state management of Windows devices.
-ms.date: 09/26/2023
+title: Windows declared configuration protocol
+description: Learn more about using Windows declared configuration (WinDC) protocol for desired state management of Windows devices.
+ms.date: 09/12/2024
ms.topic: overview
---
-# What is the declared configuration protocol
+# Windows declared configuration protocol overview
-The declared configuration protocol is based on a desired state device configuration model, though it still uses the underlying OMA-DM Syncml protocol. Through a dedicated OMA-DM server, it provides all the settings in a single batch through this protocol. The device's declared configuration client stack can reason over the settings to achieve the desired scenario in the most efficient and reliable manner.
+The Windows declared configuration (WinDC) protocol is a desired state device configuration model designed for efficient and reliable management of Windows devices. It uses the OMA-DM SyncML protocol to provide all necessary settings in a single batch through a dedicated OMA-DM server. The WinDC client stack on the device processes these settings to achieve the desired state in the most efficient and reliable manner.
-The declared configuration protocol requires that a device has a separate [OMA-DM enrollment](mdm-overview.md), which is dependent on the device being enrolled with the primary OMA-DM server. The desired state model is a different model from the current model where the server is responsible for the device's desire state. This dual enrollment is only allowed if the device is already enrolled into a primary MDM server. This other enrollment separates the desired state management functionality from the primary functionality. The declared configuration enrollment's first desired state management model feature is called [extensibility](declared-configuration-extensibility.md).
+WinDC protocol requires that a device has a separate [OMA-DM enrollment](mdm-overview.md), which is dependent on the device being enrolled with the primary OMA-DM server. The desired state model is a different model from the current model where the server is responsible for the device's desire state. This dual enrollment is only allowed if the device is already enrolled into a primary mobile device management (MDM) server. This other enrollment separates the desired state management functionality from the primary functionality.
-:::image type="content" source="images/declared-configuration-model.png" alt-text="Diagram illustrating the declared configuration model.":::
+WinDC enrollment involves two phases:
-With the [Declared Configuration CSP](mdm/declaredconfiguration-csp.md), the OMA-DM server can provide the device with the complete collection of setting names and associated values based on a specified scenario. The declared configuration stack on the device is responsible for handling the configuration request, and maintaining its state including updates to the scenario.
+- [Declared configuration discovery](declared-configuration-discovery.md): The initial discovery phase of the WinDC protocol uses a dedicated JSON schema to query enrollment details from the [discovery service endpoint (DS)](/openspecs/windows_protocols/ms-mde2/60deaa44-52df-4a47-a844-f5b42037f7d3#gt_8d76dac8-122a-452b-8c97-b25af916f19b). This phase involves sending HTTP requests with specific headers and a JSON body containing details such as user domain, tenant ID, and OS version. The DS responds with the necessary enrollment service URLs and authentication policies based on the enrollment type (Microsoft Entra joined or registered devices).
+- [Declared configuration enrollment](declared-configuration-enrollment.md): The enrollment phase uses the [MS-MDE2 protocol](/openspecs/windows_protocols/ms-mde2/4d7eadd5-3951-4f1c-8159-c39e07cbe692) and new [DMClient CSP](mdm/dmclient-csp.md) policies for dual enrollment. This phase involves setting the `LinkedEnrollment/DiscoveryEndpoint` and triggering the `LinkedEnrollment/Enroll` using SyncML commands. The device can then manage its configuration state by interacting with the OMA-DM server through these policies.
-The benefit of the declared configuration desired state model is that it's efficient and accurate, especially since it's the responsibility of the declared configuration client to configure the device. The efficiency of declared configuration is because the client can asynchronously process batches of scenario settings, which free up the server resources to do other work. Thus the declared configuration protocol has low latency. As for configuration quality and accuracy, the declared configuration client stack has detailed knowledge of the configuration surface area of the device. This behavior includes the proper handling of continuous device updates that affect the configuration scenario.
+WinDC enrollment offers these desired state management features:
-## Declared configuration enrollment
+- [Resource access](declared-configuration-resource-access.md): Provides access to necessary resources for configuration.
+- [Extensibility](declared-configuration-extensibility.md): Allows for extending the configuration capabilities as needed.
-[Mobile Device Enrollment Protocol version 2](/openspecs/windows_protocols/ms-mde2/4d7eadd5-3951-4f1c-8159-c39e07cbe692) describes enrollment including discovery, which covers the primary and declared configuration enrollments. The device uses the following new [DMClient CSP](mdm/dmclient-csp.md) policies for declared configuration dual enrollment:
+:::image type="content" source="images/declared-configuration-model.png" alt-text="Diagram illustrating the WinDC model.":::
-- [LinkedEnrollment/Enroll](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentenroll)
-- [LinkedEnrollment/Unenroll](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentunenroll)
-- [LinkedEnrollment/EnrollStatus](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentenrollstatus)
-- [LinkedEnrollment/LastError](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentlasterror)
-- [LinkedEnrollment/DiscoveryEndpoint](mdm/dmclient-csp.md#deviceproviderprovideridlinkedenrollmentdiscoveryendpoint)
+After a device is enrolled, the OMA-DM server can send a complete collection of setting names and values for a specified scenario using the [DeclaredConfiguration CSP](mdm/declaredconfiguration-csp.md). The WinDC stack on the device is responsible for handling the configuration request, and maintaining its state including updates to the scenario.
-The following SyncML example sets **LinkedEnrolment/DiscoveryEndpoint** and triggers **LinkedEnrollment/Enroll**:
+The benefit of the WinDC desired state model is that it's efficient and accurate, especially since it's the responsibility of the WinDC client stack to configure the device. The efficiency of WinDC is because the client can asynchronously process batches of scenario settings, which free up the server resources to do other work. Thus the WinDC protocol has low latency. As for configuration quality and accuracy, the WinDC client stack has detailed knowledge of the configuration surface area of the device. This behavior includes the proper handling of continuous device updates that affect the configuration scenario.
-```xml
-
-
+## Supported platforms
+
+WinDC enrollment for [Microsoft Entra joined devices](/entra/identity/devices/concept-directory-join) is supported for all versions of Windows 10/11.
+
+WinDC enrollment for [Microsoft Entra registered devices](/entra/identity/devices/concept-device-registration) is supported for Windows 10/11 with the following updates:
+
+- Windows 11, version 24H2 with [KB5040529](https://support.microsoft.com/help/5040529) (OS Build 26100.1301)
+- Windows 11, version 23H2 with [KB5040527](https://support.microsoft.com/help/5040527) (OS Build 22631.3958)
+- Windows 11, version 22H2 with [KB5040527](https://support.microsoft.com/help/5040527) (OS Build 22621.3958)
+- Windows 10, version 22H2 with [KB5040525](https://support.microsoft.com/help/5040525) (OS Build 19045.4717)
+
+## Refresh interval
+
+The WinDC refresh schedule is created whenever there's a WinDC document present on the device and there's currently no schedule task for refresh. The task runs every 4 hours by default and can be configured. Each time the WinDC refresh task runs, it checks for all drifts from desired state by comparing the current system configuration versus the server intention in the WinDC documents. If there are any drifts, WinDC engine tries to reapply the WinDC documents to fix it. In case where a WinDC document can't be reapplied due to instance data missing, the WinDC document is marked in drifted state and a new sync session is triggered to notify there's a drift.
+
+To identify, adjust or remove the refresh schedule, use the **RefreshInterval** URI:
+
+- Identify current schedule:
+
+ ```xml
+
+
+
+
+ 2
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/ManagementServiceConfiguration/RefreshInterval
+
+
+
+
+
+
+ ```
+
+- Adjust current schedule:
+
+ ```xml
+
+
+
- 2
-
-
- ./Device/Vendor/MSFT/DMClient/Provider/MS%20DM%20SERVER/LinkedEnrollment/DiscoveryEndpoint
-
- https://discovery.dm.microsoft.com/EnrollmentConfiguration?api-version=1.0
-
+ 2
+
+
+ int
+ text/plain
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/ManagementServiceConfiguration/RefreshInterval
+
+ 30
+
-
-
-
+
+
+
+ ```
-
-
-
- 2
-
-
- ./Device/Vendor/MSFT/DMClient/Provider/MS%20DM%20SERVER/LinkedEnrollment/Enroll
-
-
-
-
-
-
-```
+- Delete the current schedule and use system default:
-## Related content
+ ```xml
+
+
+
+
+ 2
+
+
+ ./Device/Vendor/MSFT/DeclaredConfiguration/ManagementServiceConfiguration/RefreshInterval
+
+
+
+
+
+
+ ```
-- [Declared Configuration extensibility](declared-configuration-extensibility.md)
+## Troubleshooting
+
+If the processing of declared configuration document fails, the errors are logged to Windows event logs:
+
+- Admin events: `Application and Service Logs\Microsoft\Windows\DeviceManagement-Enterprise-Diagnostics-Provider\Admin`.
+- Operational events: `Application and Service Logs\Microsoft\Windows\DeviceManagement-Enterprise-Diagnostics-Provider\Operational`.
+
+### Common errors
+
+- If the `` uses **Device** scope, while DeclaredConfiguration document specifies **User** context, Admin event log shows an error message similar to:
+
+ `MDM ConfigurationManager: Command failure status. Configuration Source ID: (DAD70CC2-365B-450D-A8AB-2EB23F4300CC), Enrollment Name: (MicrosoftManagementPlatformCloud), Provider Name: (DeclaredConfiguration), Command Type: (SetValue: from Replace), CSP URI: (./Device/Vendor/MSFT/DeclaredConfiguration/Host/Complete/Documents/DCA000B5-397D-40A1-AABF-40B25078A7F9/Document), Result: (The system cannot find the file specified.)`
+
+- If the Document ID doesn't match between the `` and inside DeclaredConfiguration document, Admin event log shows an error message similar to:
+
+ `MDM Declared Configuration: End document parsing from CSP: Document Id: (DCA000B5-397D-40A1-AABF-40B25078A7F91), Scenario: (MSFTVPN), Version: (A0), Enrollment Id: (DAD70CC2-365B-450D-A8AB-2EB23F4300CC), Current User: (S-1-5-21-3436249567-4017981746-3373817415-1001), Schema: (1.0), Download URL: (), Scope: (0x1), Enroll Type: (0x1A), File size: (0xDE2), CSP Count: (0x1), URI Count: (0xF), Action Requested: (0x0), Model: (0x1), Result:(0x8000FFFF) Catastrophic failure.`
+
+- Any typo in the OMA-URI results in a failure. In this example, `TrafficFilterList` is specified instead of `TrafficFilterLists`, and Admin event log shows an error message similar to:
+
+ `MDM ConfigurationManager: Command failure status. Configuraton Source ID: (DAD70CC2-365B-450D-A8AB-2EB23F4300CC), Enrollment Type: (MicrosoftManagementPlatformCloud), CSP Name: (vpnv2), Command Type: (Add: from Replace or Add), CSP URI: (./user/vendor/msft/vpnv2/Test_SonicWall/TrafficFilterLists), Result: (Unknown Win32 Error code: 0x86000002).`
+
+ There's also another warning message in operational channel:
+
+ `MDM Declared Configuration: Function (DeclaredConfigurationExtension_PolicyCSPConfigureGivenCurrentDoc) operation (ErrorAtDocLevel: one or more CSPs failed) failed with (Unknown Win32 Error code: 0x82d00007)`
\ No newline at end of file
diff --git a/windows/client-management/device-update-management.md b/windows/client-management/device-update-management.md
index c298893a3a..5f61783f99 100644
--- a/windows/client-management/device-update-management.md
+++ b/windows/client-management/device-update-management.md
@@ -2,7 +2,7 @@
title: Mobile device management MDM for device updates
description: Windows provides several APIs to help mobile device management (MDM) solutions manage updates. Learn how to use these APIs to implement update management.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
ms.collection:
- highpri
- tier2
@@ -25,7 +25,7 @@ In particular, Windows provides APIs to enable MDMs to:
- Enter a per-device update approval list. The list makes sure devices only install updates that are approved and tested.
- Approve end-user license agreements (EULAs) for the end user so update deployment can be automated even for updates with EULAs.
-This article provides independent software vendors (ISV) with the information they need to implement update management in Windows. For more information, see [Policy CSP - Update](mdm/policy-csp-update.md).
+This article provides independent software publishers (ISV) with the information they need to implement update management in Windows. For more information, see [Policy CSP - Update](mdm/policy-csp-update.md).
> [!NOTE]
> The OMA DM APIs for specifying update approvals and getting compliance status refer to updates by using an Update ID. The Update ID is a GUID that identifies a particular update. The MDM will want to show IT-friendly information about the update, instead of a raw GUID, including the update's title, description, KB, update type, like a security update or service pack. For more information, see [[MS-WSUSSS]: Windows Update Services: Server-Server Protocol](/openspecs/windows_protocols/ms-wsusss/f49f0c3e-a426-4b4b-b401-9aeb2892815c).
@@ -88,7 +88,7 @@ This section describes a possible algorithm for using the server-server sync pro
First some background:
-- If you have a multi-tenant MDM, the update metadata can be kept in a shared partition, since it's common to all tenants.
+- If you have a multitenant MDM, the update metadata can be kept in a shared partition, since it's common to all tenants.
- A metadata sync service can then be implemented. The service periodically calls server-server sync to pull in metadata for the updates IT cares about.
- The MDM component that uses OMA DM to control devices (described in the next section) should send the metadata sync service the list of needed updates it gets from each client, if those updates aren't already known to the device.
@@ -130,7 +130,7 @@ The following screenshots of the administrator console show the list of update t
### SyncML example
-Set auto update to notify and defer.
+Set Microsoft AutoUpdate to notify and defer.
```xml
diff --git a/windows/client-management/disconnecting-from-mdm-unenrollment.md b/windows/client-management/disconnecting-from-mdm-unenrollment.md
index 612dd07651..cfc52d7c69 100644
--- a/windows/client-management/disconnecting-from-mdm-unenrollment.md
+++ b/windows/client-management/disconnecting-from-mdm-unenrollment.md
@@ -2,7 +2,7 @@
title: Disconnecting from the management infrastructure (unenrollment)
description: Disconnecting is initiated either locally by the user using a phone or remotely by the IT admin using management server.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Disconnecting from the management infrastructure (unenrollment)
@@ -22,14 +22,14 @@ During disconnection, the client executes the following tasks:
In Windows, after the user confirms the account deletion command and before the account is deleted, the MDM client will notify to the MDM server that the account will be removed. This notification is a best-effort action as no retry is built in to ensure the notification is successfully sent to the device.
-This action utilizes the OMA DM generic alert 1226 function to send a user an MDM unenrollment user alert to the MDM server after the device accepts the user unenrollment request, but before it deletes any enterprise data. The server should set the expectation that unenrollment may succeed or fail, and the server can check whether the device is unenrolled by either checking whether the device calls back at scheduled time or by sending a push notification to the device to see whether it responds back. If the server plans to send a push notification, it should allow for some delay to give the device the time to complete the unenrollment work.
+This action utilizes the OMA DM generic alert 1226 function to send a user an MDM unenrollment user alert to the MDM server after the device accepts the user unenrollment request, but before it deletes any enterprise data. The server should set the expectation that unenrollment can succeed or fail, and the server can check whether the device is unenrolled by either checking whether the device calls back at scheduled time or by sending a push notification to the device to see whether it responds back. If the server plans to send a push notification, it should allow for some delay to give the device the time to complete the unenrollment work.
> [!NOTE]
> The user unenrollment is an OMA DM standard. For more information about the 1226 generic alert, see the OMA Device Management Protocol specification (OMA-TS-DM\_Protocol-V1\_2\_1-20080617-A), available from the [OMA website](https://www.openmobilealliance.org/release/DM/V1_1_2-20031209-A/).
The vendor uses the Type attribute to specify what type of generic alert it is. For device initiated MDM unenrollment, the alert type is **com.microsoft:mdm.unenrollment.userrequest**.
-After the user elects to unenroll, any active MDM OMA DM sessions are terminated. After that, the DM client starts a DM session, including a user unenroll generic alert in the first package that it sends to the server.
+After the user elects to unenroll, any active MDM OMA DM sessions are terminated. After that, the DMClient starts a DM session, including a user unenroll generic alert in the first package that it sends to the server.
The following sample shows an OMA DM first package that contains a generic alert message. For more information on WP OMA DM support, see the [OMA DM protocol support](oma-dm-protocol-support.md) article.
@@ -107,15 +107,13 @@ You can only use the Work Access page to unenroll under the following conditions
- Enrollment was done using bulk enrollment.
- Enrollment was created using the Work Access page.
-
-
## Unenrollment from Microsoft Entra join
When a user is enrolled into MDM through Microsoft Entra join and later, the enrollment disconnects, there's no warning that the user will lose Windows Information Protection (WIP) data. The disconnection message doesn't indicate the loss of WIP data.
-During the process in which a device is enrolled into MDM through Microsoft Entra join and then remotely unenrolled, the device may get into a state where it must be reimaged. When devices are remotely unenrolled from MDM, the Microsoft Entra association is also removed. This safeguard is in place to avoid leaving the corporate devices in unmanaged state.
+During the process in which a device is enrolled into MDM through Microsoft Entra join and then remotely unenrolled, the device can get into a state where it must be reimaged. When devices are remotely unenrolled from MDM, the Microsoft Entra association is also removed. This safeguard is in place to avoid leaving the corporate devices in unmanaged state.
Before remotely unenrolling corporate devices, you must ensure that there is at least one admin user on the device that isn't part of Microsoft Entra ID, otherwise the device won't have any admin user after the operation.
diff --git a/windows/client-management/docfx.json b/windows/client-management/docfx.json
index 07e6f430e8..7800723235 100644
--- a/windows/client-management/docfx.json
+++ b/windows/client-management/docfx.json
@@ -56,19 +56,20 @@
"folder_relative_path_in_docset": "./"
}
},
- "titleSuffix": "Windows Client Management",
"contributors_to_exclude": [
"dstrome2",
- "rjagiewich",
+ "rjagiewich",
"American-Dipper",
- "claydetels19",
+ "claydetels19",
"jborsecnik",
"v-stchambers",
"shdyas",
"Stacyrch140",
"garycentric",
"dstrome",
- "beccarobins"
+ "beccarobins",
+ "padmagit77",
+ "aditisrivastava07"
],
"searchScope": [
"Windows 10"
@@ -93,4 +94,4 @@
"dest": "win-client-management",
"markdownEngineName": "markdig"
}
-}
\ No newline at end of file
+}
diff --git a/windows/client-management/enable-admx-backed-policies-in-mdm.md b/windows/client-management/enable-admx-backed-policies-in-mdm.md
index 00618845b9..db0f36a085 100644
--- a/windows/client-management/enable-admx-backed-policies-in-mdm.md
+++ b/windows/client-management/enable-admx-backed-policies-in-mdm.md
@@ -3,7 +3,7 @@ title: Enable ADMX policies in MDM
description: Use this step-by-step guide to configure a selected set of Group Policy administrative templates (ADMX policies) in Mobile Device Management (MDM).
ms.topic: conceptual
ms.localizationpriority: medium
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Enable ADMX policies in MDM
diff --git a/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md
index f9ccd5cc0a..409c283821 100644
--- a/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md
+++ b/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md
@@ -2,7 +2,7 @@
title: Enroll a Windows device automatically using Group Policy
description: Learn how to use a Group Policy to trigger autoenrollment to MDM for Active Directory (AD) domain-joined devices.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
ms.collection:
- highpri
- tier2
@@ -12,7 +12,7 @@ ms.collection:
You can use a Group Policy to trigger autoenrollment to Mobile Device Management (MDM) for Active Directory (AD) domain-joined devices.
-The enrollment into Intune is triggered by a group policy created on your local AD and happens without any user interaction. This cause-and-effect mechanism means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Microsoft Entra account.
+The group policy created on your local AD triggers enrollment into Intune without any user interaction. This cause-and-effect mechanism means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Microsoft Entra account.
**Requirements**:
diff --git a/windows/client-management/enterprise-app-management.md b/windows/client-management/enterprise-app-management.md
index b6e975a1c8..71b7fe55b9 100644
--- a/windows/client-management/enterprise-app-management.md
+++ b/windows/client-management/enterprise-app-management.md
@@ -2,7 +2,7 @@
title: Enterprise app management
description: This article covers one of the key mobile device management (MDM) features for managing the lifecycle of apps across Windows devices.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Enterprise app management
@@ -15,7 +15,6 @@ By using Windows MDM to manage app lifecycles, administrators can deploy and man
Windows offers the ability for management servers to:
-- Install apps directly from the Microsoft Store for Business
- Deploy offline Store apps and licenses
- Deploy line-of-business (LOB) apps (non-Store apps)
- Inventory all apps for a user (Store and non-Store apps)
@@ -28,7 +27,7 @@ Windows offers the ability for management servers to:
Windows lets you inventory all apps deployed to a user, and inventory all apps for all users of a Windows device. The [EnterpriseModernAppManagement](mdm/enterprisemodernappmanagement-csp.md) configuration service provider (CSP) inventories packaged apps and doesn't include traditional Win32 apps installed via MSI or executables. When the apps are inventoried, they're separated based on the following app classifications:
-- **Store**: Apps that have been acquired from the Microsoft Store, either directly or delivered with the enterprise from the Store for Business.
+- **Store**: Apps that have been acquired from the Microsoft Store.
- **nonStore**: Apps that weren't acquired from the Microsoft Store.
- **System**: Apps that are part of the operating system and can't be uninstalled. This classification is read-only and can only be inventoried.
@@ -116,7 +115,7 @@ There are two basic types of apps you can deploy:
- Store apps.
- Enterprise signed apps.
-To deploy enterprise signed apps, you must enable a setting on the device to allow trusted apps. The apps can be signed by a Microsoft approved root (such as Symantec), an enterprise deployed root, or apps that are self-signed. This section covers the steps to configure the device for non-store app deployment.
+To deploy enterprise signed apps, you must enable a setting on the device to allow trusted apps. The apps can be signed by a Microsoft approved root (such as Symantec), an enterprise deployed root, or apps that are self-signed. This section covers the steps to configure the device for nonstore app deployment.
### Unlock the device for non-Store apps
@@ -154,7 +153,7 @@ Here's an example:
### Unlock the device for developer mode
-Development of apps on Windows devices no longer requires a special license. You can enable debugging and deployment of non-packaged apps using [ApplicationManagement/AllowDeveloperUnlock](mdm/policy-csp-applicationmanagement.md) policy in Policy CSP.
+Development of apps on Windows devices no longer requires a special license. You can enable debugging and deployment of nonpackaged apps using [ApplicationManagement/AllowDeveloperUnlock](mdm/policy-csp-applicationmanagement.md) policy in Policy CSP.
AllowDeveloperUnlock policy enables the development mode on the device. The AllowDeveloperUnlock isn't configured by default, which means only Microsoft Store apps can be installed. If the management server explicitly sets the value to off, the setting is disabled in the settings panel on the device.
@@ -198,6 +197,9 @@ To deploy an app to a user directly from the Microsoft Store, the management ser
If you purchased an app from the Store for Business and the app is specified for an online license, then the app and license must be acquired directly from the Microsoft Store.
+> [!NOTE]
+> The Microsoft Store for Business and Microsoft Store for Education are retired. For more information, see [Microsoft Store for Business and Education retiring March 31, 2023](/lifecycle/announcements/microsoft-store-for-business-education-retiring).
+
Here are the requirements for this scenario:
- The app is assigned to a user Microsoft Entra identity in the Store for Business. You can assign directly in the Store for Business or through a management server.
@@ -238,8 +240,8 @@ If you purchased an app from the Store for Business, the app license must be dep
In the SyncML, you need to specify the following information in the `Exec` command:
-- License ID - This ID is specified in the LocURI. The License ID for the offline license is referred to as the "Content ID" in the license file. You can retrieve this information from the Base64 encoded license download from the Store for Business.
-- License Content - This content is specified in the data section. The License Content is the Base64 encoded blob of the license.
+- License ID - This ID is specified in the LocURI. The License ID for the offline license is referred to as the "Content ID" in the license file. You can retrieve this information from the Base 64 encoded license download from the Store for Business.
+- License Content - This content is specified in the data section. The License Content is the Base 64 encoded blob of the license.
Here's an example of an offline license installation.
@@ -469,7 +471,7 @@ When an app installation is completed, a Windows notification is sent. You can a
- NOT\_INSTALLED (0) - The node was added, but the execution wasn't completed.
- INSTALLING (1) - Execution has started, but the deployment hasn't completed. If the deployment completes regardless of success, then this value is updated.
- FAILED (2) - Installation failed. The details of the error can be found under LastError and LastErrorDescription.
- - INSTALLED (3) - Once an install is successful this node is cleaned up. If the clean up action hasn't completed, then this state may briefly appear.
+ - INSTALLED (3) - Once an install is successful this node is cleaned up. If the clean-up action hasn't completed, then this state may briefly appear.
- LastError - The last error reported by the app deployment server.
- LastErrorDescription - Describes the last error reported by the app deployment server.
- Status - An integer that indicates the progress of the app installation. In cases of an HTTPS location, this status shows the estimated download progress. Status isn't available for provisioning and only used for user-based installations. For provisioning, the value is always 0.
diff --git a/windows/client-management/esim-enterprise-management.md b/windows/client-management/esim-enterprise-management.md
index 970b5917af..2a28981591 100644
--- a/windows/client-management/esim-enterprise-management.md
+++ b/windows/client-management/esim-enterprise-management.md
@@ -3,7 +3,7 @@ title: eSIM Enterprise Management
description: Learn how Mobile Device Management (MDM) Providers support the eSIM Profile Management Solution on Windows.
ms.localizationpriority: medium
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# How Mobile Device Management Providers support eSIM Management on Windows
@@ -28,7 +28,7 @@ If you're a Mobile Device Management (MDM) Provider and want to support eSIM Man
- Assess solution type that you would like to provide your customers
- Batch/offline solution
- IT Admin can manually import a flat file containing list of eSIM activation codes, and provision eSIM on LTE enabled devices.
-- Operator doesn't have visibility over status of the eSIM profiles and device eSIM has been downloaded and installed to
+- Operator doesn't have visibility over status of the eSIM profiles
- Real-time solution
- MDM automatically syncs with the Operator backend system for subscription pool and eSIM management, via SIM vendor solution component. IT Admin can view subscription pool and provision eSIM in real time.
- Operator is notified of the status of each eSIM profile and has visibility on which devices are being used
diff --git a/windows/client-management/federated-authentication-device-enrollment.md b/windows/client-management/federated-authentication-device-enrollment.md
index ecb42e8160..32b2fef7ef 100644
--- a/windows/client-management/federated-authentication-device-enrollment.md
+++ b/windows/client-management/federated-authentication-device-enrollment.md
@@ -2,7 +2,7 @@
title: Federated authentication device enrollment
description: This section provides an example of the mobile device enrollment protocol using federated authentication policy.
ms.topic: conceptual
-ms.date: 08/10/2023
+ms.date: 07/08/2024
---
# Federated authentication device enrollment
@@ -122,7 +122,7 @@ The discovery response is in the XML format and includes the following fields:
> [!NOTE]
> The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message.
-When authentication policy is set to be Federated, Web Authentication Broker (WAB) is used by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client calls the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an endpage is used by the enrollment client as the device security secret during the client certificate enrollment request call.
+When authentication policy is set to be Federated, Web Authentication Broker (WAB) is used by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client calls the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an end page is used by the enrollment client as the device security secret during the client certificate enrollment request call.
> [!NOTE]
> Instead of relying on the user agent string that is passed during authentication to get information, such as the OS version, use the following guidance:
@@ -183,7 +183,7 @@ Content-Length: 556