diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 8c297f234b..f623ae9b78 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -228,6 +228,7 @@ #### [TimeLanguageSettings](policy-csp-timelanguagesettings.md) #### [Update](policy-csp-update.md) #### [Wifi](policy-csp-wifi.md) +#### [WindowsDefenderSecurityCenter](policy-csp-windowsdefendersecuritycenter.md) #### [WindowsInkWorkspace](policy-csp-windowsinkworkspace.md) #### [WindowsLogon](policy-csp-windowslogon.md) #### [WirelessDisplay](policy-csp-wirelessdisplay.md) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 9e47f6bd79..aadfb8cf3c 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -975,6 +975,20 @@ For details about Microsoft mobile device management protocols for Windows 10 s
  • Update/ScheduledInstallFourthWeek
  • Update/ScheduledInstallSecondWeek
  • Update/ScheduledInstallThirdWeek
    • +
  • WindowsDefenderSecurityCenter/CompanyName
    • +
  • WindowsDefenderSecurityCenter/DisableAppBrowserUI
    • +
  • WindowsDefenderSecurityCenter/DisableEnhancedNotifications
    • +
  • WindowsDefenderSecurityCenter/DisableFamilyUI
    • +
  • WindowsDefenderSecurityCenter/DisableHealthUI
    • +
  • WindowsDefenderSecurityCenter/DisableNetworkUI
    • +
  • WindowsDefenderSecurityCenter/DisableNotifications
    • +
  • WindowsDefenderSecurityCenter/DisableVirusUI
    • +
  • WindowsDefenderSecurityCenter/DisallowExploitProtectionOverride
    • +
  • WindowsDefenderSecurityCenter/Email
    • +
  • WindowsDefenderSecurityCenter/EnableCustomizedToasts
    • +
  • WindowsDefenderSecurityCenter/EnableInAppCustomization
    • +
  • WindowsDefenderSecurityCenter/Phone
    • +
  • WindowsDefenderSecurityCenter/URL
    • @@ -1270,8 +1284,27 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
  • When you enable EncryptionMethodByDriveType, you must specify values for all three drives (operating system, fixed data, and removable data), otherwise it will fail (500 return status). For example, if you only set the encrytion method for the OS and removable drives, you will get a 500 return status.
  • When you enable SystemDrivesRecoveryMessage, you must specify values for all three settings (pre-boot recovery screen, recovery message, and recovery URL), otherwise it will fail (500 return status). For example, if you only specify values for message and URL, you will get a 500 return status.
    • - - + + +[Policy CSP](policy-configuration-service-provider.md) + +

    Added the following new policies for Windows 10, version 1709:

    + diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index baf0b42bec..9f6c24805f 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/28/2017 +ms.date: 07/07/2017 --- # Policy CSP @@ -2716,6 +2716,54 @@ The following diagram shows the Policy configuration service provider in tree fo +### WindowsDefenderSecurityCenter policies + +
    +
    + WindowsDefenderSecurityCenter/CompanyName +
    +
    + WindowsDefenderSecurityCenter/DisableAppBrowserUI +
    +
    + WindowsDefenderSecurityCenter/DisableEnhancedNotifications +
    +
    + WindowsDefenderSecurityCenter/DisableFamilyUI +
    +
    + WindowsDefenderSecurityCenter/DisableHealthUI +
    +
    + WindowsDefenderSecurityCenter/DisableNetworkUI +
    +
    + WindowsDefenderSecurityCenter/DisableNotifications +
    +
    + WindowsDefenderSecurityCenter/DisableVirusUI +
    +
    + WindowsDefenderSecurityCenter/DisallowExploitProtectionOverride +
    +
    + WindowsDefenderSecurityCenter/Email +
    +
    + WindowsDefenderSecurityCenter/EnableCustomizedToasts +
    +
    + WindowsDefenderSecurityCenter/EnableInAppCustomization +
    +
    + WindowsDefenderSecurityCenter/Phone +
    +
    + WindowsDefenderSecurityCenter/URL +
    +
    + + ### WindowsInkWorkspace policies
    diff --git a/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md new file mode 100644 index 0000000000..7f6d64ab86 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-windowsdefendersecuritycenter.md @@ -0,0 +1,517 @@ +--- +title: Policy CSP - WindowsDefenderSecurityCenter +description: Policy CSP - WindowsDefenderSecurityCenter +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 07/06/2017 +--- + +# Policy CSP - WindowsDefenderSecurityCenter + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
    + +## WindowsDefenderSecurityCenter policies + + +**WindowsDefenderSecurityCenter/CompanyName** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. The company name that is displayed to the users. CompanyName is required for both EnableCustomizedToasts and EnableInAppCustomization. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display the contact options. + +

    Value type is string. Supported operations are Add, Get, Replace and Delete. + + + + +**WindowsDefenderSecurityCenter/DisableAppBrowserUI** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy setting if you want to disable the display of the app and browser protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) The users can see the display of the app and browser protection area in Windows Defender Security Center. +- 1 - (Enable) The users cannot see the display of the app and browser protection area in Windows Defender Security Center. + + + + +**WindowsDefenderSecurityCenter/DisableEnhancedNotifications** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy if you want Windows Defender Security Center to only display notifications which are considered critical. If you disable or do not configure this setting, Windows Defender Security Center will display critical and non-critical notifications to users. + +> [!Note] +> If Suppress notification is enabled then users will not see critical or non-critical messages. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) Windows Defender Security Center will display critical and non-critical notifications to users.. +- 1 - (Enable) Windows Defender Security Center only display notifications which are considered critical on clients. + + + + +**WindowsDefenderSecurityCenter/DisableFamilyUI** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) The users can see the display of the family options area in Windows Defender Security Center. +- 1 - (Enable) The users cannot see the display of the family options area in Windows Defender Security Center. + + + + +**WindowsDefenderSecurityCenter/DisableHealthUI** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy setting if you want to disable the display of the device performance and health area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) The users can see the display of the device performance and health area in Windows Defender Security Center. +- 1 - (Enable) The users cannot see the display of the device performance and health area in Windows Defender Security Center. + + + + +**WindowsDefenderSecurityCenter/DisableNetworkUI** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy setting if you want to disable the display of the firewall and network protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) The users can see the display of the firewall and network protection area in Windows Defender Security Center. +- 1 - (Enable) The users cannot see the display of the firewall and network protection area in Windows Defender Security Center. + + + + +**WindowsDefenderSecurityCenter/DisableNotifications** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy setting if you want to disable the display of Windows Defender Security Center notifications. If you disable or do not configure this setting, Windows Defender Security Center notifications will display on devices. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) The users can see the display of Windows Defender Security Center notifications. +- 1 - (Enable) The users cannot see the display of Windows Defender Security Center notifications. + + + + +**WindowsDefenderSecurityCenter/DisableVirusUI** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Use this policy setting if you want to disable the display of the virus and threat protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete. Valid values: + +- 0 - (Disable) The users can see the display of the virus and threat protection area in Windows Defender Security Center. +- 1 - (Enable) The users cannot see the display of the virus and threat protection area in Windows Defender Security Center. + + + + +**WindowsDefenderSecurityCenter/DisallowExploitProtectionOverride** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Prevent users from making changes to the exploit protection settings area in the Windows Defender Security Center. If you disable or do not configure this setting, local users can make changes in the exploit protection settings area. + +

    Value type is integer. Supported operations are Add, Get, Replace and Delete.Valid values: + +- 0 - (Disable) Local users are allowed to make changes in the exploit protection settings area. +- 1 - (Enable) Local users cannot make changes in the exploit protection settings area. + + + + +**WindowsDefenderSecurityCenter/Email** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. The email address that is displayed to users.  The default mail application is used to initiate email actions. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. + +

    Value type is string. Supported operations are Add, Get, Replace and Delete. + + + + +**WindowsDefenderSecurityCenter/EnableCustomizedToasts** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. Enable this policy to display your company name and contact options in the notifications. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will display a default notification text. + +

    Value type is integer. Supported operations are Add, Get, Replace, and Delete. Valid values: + +- 0 - (Disable) Notifications contain a default notification text. +- 1 - (Enable) Notifications contain the company name and contact options. + + + + + +**WindowsDefenderSecurityCenter/EnableInAppCustomization** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709.Enable this policy to have your company name and contact options displayed in a contact card fly out in Windows Defender Security Center. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will not display the contact card fly out notification. + +

    Value type is integer. Supported operations are Add, Get, Replace, and Delete. Valid values: + +- 0 - (Disable) Do not display the company name and contact options in the card fly out notification. +- 1 - (Enable) Display the company name and contact options in the card fly out notification. + + + + +**WindowsDefenderSecurityCenter/Phone** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. The phone number or Skype ID that is displayed to users.  Skype is used to initiate the call. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. + +

    Value type is string. Supported operations are Add, Get, Replace, and Delete. + + + + +**WindowsDefenderSecurityCenter/URL** + + + + + + + + + + + + + + + + + + + + + +
    HomeProBusinessEnterpriseEducationMobileMobileEnterprise
    cross markcheck mark3check mark3check mark3check mark3cross markcross mark
    + + + +

    Added in Windows 10, version 1709. The help portal URL this is displayed to users. The default browser is used to initiate this action. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then the device will not display contact options. + +

    Value type is Value type is string. Supported operations are Add, Get, Replace, and Delete. + + + \ No newline at end of file