deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 21:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update surface-manage-dfci-guide.md

Browse Source
This commit is contained in:
John Kaiser 2019-11-15 13:26:50 -08:00
parent 27717ab693
commit af6830f95b
1 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
devices/surface/surface-manage-dfci-guide.md
View File

@ -105,7 +105,7 @@ DFCI includes a streamlined set of UEFI configuration policies that provide an e
You configure DFCI policy settings by editing the DFCI profile from Endpoint Manager, as shown in the figure below. You configure DFCI policy settings by editing the DFCI profile from Endpoint Manager, as shown in the figure below.
- Select **Devices > Windows > Configuration Profiles > “DFCI profile name” > Properties > Settings**. - In Endpoint Manager at devicemanagement.microsoft.com, select **Devices > Windows > Configuration Profiles > “DFCI profile name” > Properties > Settings**.
![Configure DFCI settings](images/dfciconfig.png) ![Configure DFCI settings](images/dfciconfig.png)
@ -140,7 +140,7 @@ As stated above, DFCI can only be applied on devices registered in Windows Autop
Although Intune policy settings typically get applied almost immediately, there may be a delay of 10 minutes before the settings take effect on targeted devices. In rare circumstances, delays of up to 8 hours are possible. To ensure settings apply as soon as possible, (such as in test scenarios), you can manually sync the target devices. Although Intune policy settings typically get applied almost immediately, there may be a delay of 10 minutes before the settings take effect on targeted devices. In rare circumstances, delays of up to 8 hours are possible. To ensure settings apply as soon as possible, (such as in test scenarios), you can manually sync the target devices.
- In Endpoint Manager, go to **Devices > Device enrollment > Windows enrollment > Windows Autopilot Devices** and select **Sync**. - In Endpoint Manager at devicemanagement.microsoft.com, go to **Devices > Device enrollment > Windows enrollment > Windows Autopilot Devices** and select **Sync**.
For more information, refer to [Sync your Windows device manually](https://docs.microsoft.com/intune-user-help/sync-your-device-manually-windows). For more information, refer to [Sync your Windows device manually](https://docs.microsoft.com/intune-user-help/sync-your-device-manually-windows).
@ -167,14 +167,19 @@ When you create a DFCI profile, all configured settings will remain in effect ac
If the original DFCI profile has been deleted, you can remove policy settings by creating a new profile and then editing the settings, as appropriate. If the original DFCI profile has been deleted, you can remove policy settings by creating a new profile and then editing the settings, as appropriate.
## Unregistering devices from DFCI to prepare for resale or recycle ## Removing DFCI management
1. Contact your partner, OEM, or reseller to unregister the device from Autopilot. **To remove DFCI management and return device to factory new state:**
2. Remove the device from Intune.
3. Connect a Surface-branded network adapter. 1. Retire the device from Intune:
4. Open Surface UEFI, which involves pressing the **Volume +** and **Power** buttons at the same time. 1. In Endpoint Manager at devicemanagement.microsoft.com, choose **Groups > All Devices**. Select the devices you want to retire, and then choose **Retire/Wipe.** To learn more refer to [Remove devices by using wipe, retire, or manually unenrolling the device](https://docs.microsoft.com/intune/remote-actions/devices-wipe).
5. Select **Management > Configure > Refresh from Network**. 2. Delete the Autopilot registration from Intune:
6. Validate DFCI is removed from the device in the UEFI. 1. Choose **Device enrollment > Windows enrollment > Devices**.
2. Under Windows Autopilot devices, choose the devices you want to delete, and then choose **Delete**.
3. Connect device to wired internet with Surface-branded ethernet adapter. Restart device and open the UEFI menu (press and hold the volume-up button while also pressing and releasing the power button).
4. Select **Management > Configure > Refresh from Network** and then choose **Opt-out.**
To keep managing the device with Intune, but without DFCI management, self-register the device to Autopilot and enroll it to Intune. DFCI will not be applied to self-registered devices.
## Learn more ## Learn more
- [Ignite 2019: Announcing remote management of Surface UEFI settings from Intune](https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/Ignite-2019-Announcing-remote-management-of-Surface-UEFI/ba-p/978333) - [Ignite 2019: Announcing remote management of Surface UEFI settings from Intune](https://techcommunity.microsoft.com/t5/Surface-IT-Pro-Blog/Ignite-2019-Announcing-remote-management-of-Surface-UEFI/ba-p/978333)