mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-11 21:07:23 +00:00
Merge branch 'main' into vp-move-test
This commit is contained in:
Gary Moore
GitHub
commit
b114b75efc
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Azure AD Join with Set up School PCs app
|
||||
description: Learn how Azure AD Join is configured in the Set up School PCs app.
|
||||
ms.topic: article
|
||||
ms.topic: conceptual
|
||||
ms.date: 08/10/2022
|
||||
appliesto:
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Set up School PCs app technical reference overview
|
||||
description: Describes the purpose of the Set up School PCs app for Windows 10 devices.
|
||||
ms.topic: conceptual
|
||||
ms.topic: overview
|
||||
ms.date: 08/10/2022
|
||||
appliesto:
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Set up Windows devices for education
|
||||
description: Decide which option for setting up Windows 10 is right for you.
|
||||
ms.topic: article
|
||||
ms.topic: conceptual
|
||||
ms.date: 08/10/2022
|
||||
appliesto:
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
|
||||
@ -9,11 +9,12 @@ appliesto:
|
||||
|
||||
# Set up Windows devices for education
|
||||
|
||||
You have two tools to choose from to set up PCs for your classroom:
|
||||
* Set up School PCs
|
||||
* Windows Configuration Designer
|
||||
You have two tools to choose from to set up PCs for your classroom:
|
||||
|
||||
Choose the tool that is appropriate for how your students will sign in (Active Directory, Azure Active Directory, or no account).
|
||||
- Set up School PCs
|
||||
- Windows Configuration Designer
|
||||
|
||||
Choose the tool that is appropriate for how your students will sign in (Active Directory, Azure Active Directory, or no account).
|
||||
|
||||
You can use the following diagram to compare the tools.
|
||||
|
||||
@ -29,4 +30,4 @@ You can use the following diagram to compare the tools.
|
||||
## Related topics
|
||||
|
||||
[Take tests in Windows](take-tests-in-windows.md)
|
||||
[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)
|
||||
[Deploy Windows 10 in a school](deploy-windows-10-in-a-school.md)S
|
||||
@ -1,8 +1,8 @@
|
||||
---
|
||||
title: Windows 11 SE Overview
|
||||
description: Learn about Windows 11 SE, and the apps that are included with the operating system.
|
||||
ms.topic: article
|
||||
ms.date: 03/09/2023
|
||||
ms.topic: overview
|
||||
ms.date: 07/25/2023
|
||||
appliesto:
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 SE</a>
|
||||
ms.collection:
|
||||
@ -104,7 +104,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
|
||||
| `Dyknow` | 7.9.13.7 | Win32 | `Dyknow` |
|
||||
| `e-Speaking Voice and Speech recognition` | 4.4.0.11 | Win32 | `e-speaking` |
|
||||
| `EasyReader` | 10.0.4.498 | Win32 | `Dolphin Computer Access` |
|
||||
| `Easysense 2` | 1.32.0001 | Win32 | `Data Harvest` |
|
||||
| `Easysense 2` | 1.32.0001 | Win32 | `Data Harvest` |
|
||||
| `Epson iProjection` | 3.31 | Win32 | `Epson` |
|
||||
| `eTests` | 4.0.25 | Win32 | `CASAS` |
|
||||
| `Exam Writepad` | 22.10.14.1834 | Win32 | `Sheldnet` |
|
||||
|
||||
@ -1,30 +1,21 @@
|
||||
---
|
||||
title: Windows 10 editions for education customers
|
||||
description: Learn about the two Windows 10 editions that are designed for the needs of education institutions.
|
||||
ms.topic: article
|
||||
ms.date: 08/10/2022
|
||||
ms.topic: conceptual
|
||||
ms.date: 07/25/2023
|
||||
appliesto:
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
|
||||
---
|
||||
|
||||
# Windows 10 editions for education customers
|
||||
|
||||
Windows 10, version 1607 (Anniversary Update) continues our commitment to productivity, security, and privacy for all customers. Windows 10 Pro and Windows 10 Enterprise offer the functionality and safety features demanded by business and education customers around the globe. Windows 10 is the most secure Windows we’ve ever built. All of our Windows commercial editions can be configured to support the needs of schools, through group policies, domain join, and more. To learn more about Microsoft’s commitment to security and privacy in Windows 10, see more on both [security](/windows/security/security-foundations) and [privacy](https://go.microsoft.com/fwlink/?LinkId=822620).
|
||||
Windows 10 offers various new features and functionalities, such as simplified provisioning with the [Set up School PCs app](./use-set-up-school-pcs-app.md) or [Windows Configuration Designer](./set-up-students-pcs-to-join-domain.md), easier delivery of digital assessments with [Take a Test](./take-tests-in-windows.md), and faster sign-in performance for shared devices than ever before. These features work with all Windows for desktop editions, excluding Windows 10 Home. You can find more information on [windows.com](https://www.windows.com/).
|
||||
|
||||
Beginning with version 1607, Windows 10 offers various new features and functionality, such as simplified provisioning with the [Set up School PCs app](./use-set-up-school-pcs-app.md) or [Windows Configuration Designer](./set-up-students-pcs-to-join-domain.md), easier delivery of digital assessments with [Take a Test](./take-tests-in-windows.md), and faster sign-in performance for shared devices than ever before. These features work with all Windows for desktop editions, excluding Windows 10 Home. You can find more information on [windows.com](https://www.windows.com/).
|
||||
|
||||
Windows 10, version 1607 introduces two editions designed for the unique needs of K-12 institutions: [Windows 10 Pro Education](#windows-10-pro-education) and [Windows 10 Education](#windows-10-education). These editions provide education-specific default settings for the evolving landscape in K-12 education IT environments.
|
||||
Windows 10 introduces two editions designed for the unique needs of K-12 institutions: [Windows 10 Pro Education](#windows-10-pro-education) and [Windows 10 Education](#windows-10-education). These editions provide education-specific default settings for the evolving landscape in K-12 education IT environments.
|
||||
|
||||
## Windows 10 Pro Education
|
||||
|
||||
Windows 10 Pro Education builds on the commercial version of Windows 10 Pro and provides important management controls needed in schools. Windows 10 Pro Education is effectively a variant of Windows 10 Pro that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Microsoft Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions).
|
||||
|
||||
For Cortana<sup>[1](#footnote1)</sup>:
|
||||
- If you're using version 1607, Cortana is removed.
|
||||
- If you're using new devices with version 1703 or later, Cortana is turned on by default.
|
||||
- If you're upgrading from version 1607 to version 1703 or later, Cortana will be enabled.
|
||||
|
||||
You can use the **AllowCortana** policy to turn off Cortana. For more information, see [Windows 10 configuration recommendations for education customers](configure-windows-for-education.md).
|
||||
Windows 10 Pro Education builds on the commercial version of Windows 10 Pro and provides important management controls needed in schools. Windows 10 Pro Education is a variant of Windows 10 Pro that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Microsoft Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions).
|
||||
|
||||
Windows 10 Pro Education is available on new devices pre-installed with Windows 10, version 1607 or newer versions that are purchased with discounted K-12 academic licenses through OEM partners (these discounted licenses are sometimes referred to as National Academic or Shape the Future).
|
||||
|
||||
@ -38,13 +29,6 @@ Customers who deploy Windows 10 Pro are able to configure the product to have si
|
||||
|
||||
Windows 10 Education builds on Windows 10 Enterprise and provides the enterprise-grade manageability and security desired by many schools. Windows 10 Education is effectively a variant of Windows 10 Enterprise that provides education-specific default settings. These default settings disable tips, tricks and suggestions & Microsoft Store suggestions. More detailed information on these default settings is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions).
|
||||
|
||||
For Cortana<sup>1</sup>:
|
||||
- If you're using version 1607, Cortana<sup>1</sup> is removed.
|
||||
- If you're using new devices with version 1703 or later, Cortana is turned on by default.
|
||||
- If you're upgrading from version 1607 to version 1703 or later, Cortana will be enabled.
|
||||
|
||||
You can use the **AllowCortana** policy to turn off Cortana. For more information, see [Windows 10 configuration recommendations for education customers](configure-windows-for-education.md).
|
||||
|
||||
Windows 10 Education is available through Microsoft Volume Licensing. Customers who are already running Windows 10 Education can upgrade to Windows 10, version 1607 or newer versions through Windows Update or from the [Volume Licensing Service Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx). We recommend Windows 10 Education to all K-12 customers as it provides the most complete and secure edition for education environments. If you don't have access to Windows 10 Education, contact your Microsoft representative or see more information [here](https://go.microsoft.com/fwlink/?LinkId=822628).
|
||||
|
||||
Customers who deploy Windows 10 Enterprise are able to configure the product to have similar feature settings to Windows 10 Education using policies. More detailed information on these policies and the configuration steps required is available in [Manage Windows 10 and Microsoft Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions). We recommend that K-12 customers using commercial Windows 10 Enterprise read the [document](/windows/configuration/manage-tips-and-suggestions) and apply desired settings for your environment.
|
||||
@ -52,14 +36,11 @@ Customers who deploy Windows 10 Enterprise are able to configure the product to
|
||||
For any other questions, contact [Microsoft Customer Service and Support](https://support.microsoft.com/en-us).
|
||||
|
||||
## Related topics
|
||||
|
||||
- [Switch to Windows 10 Pro Education from Windows 10 Pro or Windows 10 S](change-to-pro-education.md)
|
||||
- [Windows deployment for education](./index.yml)
|
||||
- [Windows 10 upgrade paths](/windows/deployment/upgrade/windows-10-upgrade-paths)
|
||||
- [Volume Activation for Windows 10](/windows/deployment/volume-activation/volume-activation-windows-10)
|
||||
- [Plan for volume activation](/windows/deployment/volume-activation/plan-for-volume-activation-client)
|
||||
- [Windows 10 subscription activation](/windows/deployment/windows-10-subscription-activation)
|
||||
|
||||
|
||||
|
||||
|
||||
<a name="footnote1"></a><sup>1</sup> <small>Cortana available in select markets; experience may vary by region and device.</small>
|
||||
-
|
||||
@ -23,6 +23,18 @@ Minor corrections such as typos, style, or formatting issues aren't listed.
|
||||
|
||||
## July 2023
|
||||
|
||||
### July feature releases or updates
|
||||
|
||||
| Article | Description |
|
||||
| ----- | ----- |
|
||||
| [Windows Autopatch groups overview](../deploy/windows-autopatch-groups-overview.md) | General Availability |
|
||||
| [Manage Windows Autopatch groups](../deploy/windows-autopatch-groups-manage-autopatch-groups.md) | General Availability |
|
||||
| [Customize Windows Update settings](../operate/windows-autopatch-groups-windows-update.md) | General Availability |
|
||||
| [Windows quality updates](../operate/windows-autopatch-groups-windows-quality-update-overview.md) | General Availability |
|
||||
| [Windows feature updates](../operate/windows-autopatch-groups-windows-feature-update-overview.md) | General Availability |
|
||||
| [Windows quality and feature update reports](../operate/windows-autopatch-groups-windows-quality-and-feature-update-reports-overview.md) | General Availability |
|
||||
| [Policy health and remediation](../operate/windows-autopatch-policy-health-and-remediation.md) | General Availability |
|
||||
|
||||
### July service releases
|
||||
|
||||
| Message center post number | Description |
|
||||
|
||||
@ -1,12 +1,6 @@
|
||||
---
|
||||
title: Windows application security
|
||||
description: Get an overview of application security in Windows
|
||||
ms.reviewer:
|
||||
manager: aaroncz
|
||||
ms.author: paoloma
|
||||
author: paolomatarazzo
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-security
|
||||
ms.date: 03/09/2023
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
ms.date: 11/22/2022
|
||||
title: Access Control Overview
|
||||
description: Description of the access controls in Windows, which is the process of authorizing users, groups, and computers to access objects on the network or computer.
|
||||
ms.topic: article
|
||||
ms.topic: overview
|
||||
appliesto:
|
||||
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
|
||||
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
title: Windows Hello for Business cloud-only deployment
|
||||
description: Learn how to configure Windows Hello for Business in a cloud-only deployment scenario.
|
||||
ms.date: 06/23/2021
|
||||
ms.topic: article
|
||||
ms.topic: how-to
|
||||
---
|
||||
# Cloud-only deployment
|
||||
|
||||
@ -10,7 +10,7 @@ ms.topic: article
|
||||
|
||||
## Introduction
|
||||
|
||||
When you Azure Active Directory (Azure AD) join a Windows device, the system prompts you to enroll in Windows Hello for Business by default. If you want to use Windows Hello for Business in your cloud-only environment, then there's no additional configuration needed.
|
||||
When you Azure Active Directory (Azure AD) join a Windows device, the system prompts you to enroll in Windows Hello for Business by default. If you want to use Windows Hello for Business in your cloud-only environment, there's no additional configuration needed.
|
||||
|
||||
You may wish to disable the automatic Windows Hello for Business enrollment prompts if you aren't ready to use it in your environment. Instructions on how to disable Windows Hello for Business enrollment in a cloud only environment are included below.
|
||||
|
||||
@ -27,7 +27,7 @@ Also note that it's possible for federated domains to enable the *Supports MFA*
|
||||
|
||||
Check and view this setting with the following MSOnline PowerShell command:
|
||||
|
||||
`Get-MsolDomainFederationSettings –DomainName <your federated domain name>`
|
||||
`Get-MsolDomainFederationSettings -DomainName <your federated domain name>`
|
||||
|
||||
To disable this setting, run the following command. This change impacts ALL Azure AD MFA scenarios for this federated domain.
|
||||
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
title: Windows Hello biometrics in the enterprise
|
||||
description: Windows Hello uses biometrics to authenticate users and guard against potential spoofing, through fingerprint matching and facial recognition.
|
||||
ms.date: 01/12/2021
|
||||
ms.topic: article
|
||||
ms.topic: conceptual
|
||||
---
|
||||
|
||||
# Windows Hello biometrics in the enterprise
|
||||
@ -72,11 +72,11 @@ To allow facial recognition, you must have devices with integrated special infra
|
||||
- Effective, real world FRR with Anti-spoofing or liveness detection: <10%
|
||||
|
||||
> [!NOTE]
|
||||
>Windows Hello face authentication does not currently support wearing a mask during enrollment or authentication. Wearing a mask to enroll is a security concern because other users wearing a similar mask may be able to unlock your device. The product group is aware of this behavior and is investigating this topic further. Please remove a mask if you are wearing one when you enroll or unlock with Windows Hello face authentication. If your working environment doesn’t allow you to remove a mask temporarily, please consider unenrolling from face authentication and only using PIN or fingerprint.
|
||||
>Windows Hello face authentication does not currently support wearing a mask during enrollment or authentication. Wearing a mask to enroll is a security concern because other users wearing a similar mask may be able to unlock your device. The product group is aware of this behavior and is investigating this topic further. Please remove a mask if you are wearing one when you enroll or unlock with Windows Hello face authentication. If your working environment doesn't allow you to remove a mask temporarily, please consider unenrolling from face authentication and only using PIN or fingerprint.
|
||||
|
||||
### Iris recognition sensor requirements
|
||||
|
||||
To use Iris authentication, you’ll need a [HoloLens 2 device](/hololens/). All HoloLens 2 editions are equipped with the same sensors. Iris is implemented the same way as other Windows Hello technologies and achieves biometrics security FAR of 1/100K.
|
||||
To use Iris authentication, you'll need a [HoloLens 2 device](/hololens/). All HoloLens 2 editions are equipped with the same sensors. Iris is implemented the same way as other Windows Hello technologies and achieves biometrics security FAR of 1/100K.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
title: Windows Hello for Business Deployment Overview
|
||||
description: Use this deployment guide to successfully deploy Windows Hello for Business in an existing environment.
|
||||
ms.date: 02/15/2022
|
||||
ms.topic: article
|
||||
ms.topic: overview
|
||||
---
|
||||
# Windows Hello for Business Deployment Overview
|
||||
|
||||
|
||||
@ -3,8 +3,8 @@ title: Deploy certificates for remote desktop sign-in
|
||||
description: Learn how to deploy certificates to cloud Kerberos trust and key trust users, to enable remote desktop sign-in with supplied credentials.
|
||||
ms.collection:
|
||||
- tier1
|
||||
ms.topic: article
|
||||
ms.date: 06/20/2023
|
||||
ms.topic: how-to
|
||||
ms.date: 07/25/2023
|
||||
---
|
||||
|
||||
# Deploy certificates for remote desktop (RDP) sign-in
|
||||
|
||||
@ -1,20 +1,17 @@
|
||||
---
|
||||
title: Dual Enrollment
|
||||
description: Learn how to configure Windows Hello for Business dual enrollment. Also, learn how to configure Active Directory to support Domain Administrator enrollment.
|
||||
ms.date: 09/09/2019
|
||||
ms.topic: article
|
||||
description: Learn how to configure Windows Hello for Business dual enrollment and how to configure Active Directory to support Domain Administrator enrollment.
|
||||
ms.date: 07/05/2023
|
||||
ms.topic: conceptual
|
||||
---
|
||||
|
||||
# Dual Enrollment
|
||||
|
||||
**Requirements**
|
||||
|
||||
* Hybrid and On-premises Windows Hello for Business deployments
|
||||
* Enterprise joined or Hybrid Azure joined devices
|
||||
* Certificate trust
|
||||
|
||||
> [!NOTE]
|
||||
> This feature was previously known as **Privileged Credential** but was renamed to **Dual Enrollment** to prevent any confusion with the **Privileged Access Workstation** feature.
|
||||
- Hybrid and On-premises Windows Hello for Business deployments
|
||||
- Enterprise joined or Hybrid Azure joined devices
|
||||
- Certificate trust
|
||||
|
||||
> [!IMPORTANT]
|
||||
> Dual enrollment does not replace or provide the same security as Privileged Access Workstations feature. Microsoft encourages enterprises to use the Privileged Access Workstations for their privileged credential users. Enterprises can consider Windows Hello for Business dual enrollment in situations where the Privileged Access feature cannot be used. Read [Privileged Access Workstations](/windows-server/identity/securing-privileged-access/privileged-access-workstations) for more information.
|
||||
@ -65,14 +62,3 @@ You configure Windows 10 or Windows 11 to support dual enrollment using the comp
|
||||
5. Restart computers targeted by this Group Policy object.
|
||||
|
||||
The computer is ready for dual enrollment. Sign in as the privileged user first and enroll for Windows Hello for Business. Once completed, sign out and sign in as the non-privileged user and enroll for Windows Hello for Business. You can now use your privileged credential to perform privileged tasks without using your password and without needing to switch users.
|
||||
|
||||
## Related topics
|
||||
|
||||
* [Windows Hello for Business](hello-identity-verification.md)
|
||||
* [Manage Windows Hello for Business in your organization](hello-manage-in-organization.md)
|
||||
* [Why a PIN is better than a password](hello-why-pin-is-better-than-password.md)
|
||||
* [Prepare people to use Windows Hello](hello-prepare-people-to-use.md)
|
||||
* [Windows Hello and password changes](hello-and-password-changes.md)
|
||||
* [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md)
|
||||
* [Event ID 300 - Windows Hello successfully created](/windows/security/identity-protection/hello-for-business/hello-faq)
|
||||
* [Windows Hello biometrics in the enterprise](hello-biometrics-in-enterprise.md)
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
title: Remote Desktop
|
||||
description: Learn how Windows Hello for Business supports using biometrics with remote desktop
|
||||
ms.date: 02/24/2021
|
||||
ms.topic: article
|
||||
ms.topic: conceptual
|
||||
ms.collection:
|
||||
- tier1
|
||||
---
|
||||
@ -10,6 +10,7 @@ ms.collection:
|
||||
# Remote Desktop
|
||||
|
||||
**Requirements**
|
||||
|
||||
- Hybrid and On-premises Windows Hello for Business deployments
|
||||
- Azure AD joined, Hybrid Azure AD joined, and Enterprise joined devices
|
||||
|
||||
@ -24,9 +25,8 @@ Microsoft continues to investigate supporting using keys trust for supplied cred
|
||||
- Hybrid and On-premises Windows Hello for Business deployments
|
||||
- Azure AD joined, Hybrid Azure AD joined, and Enterprise joined devices
|
||||
- Biometric enrollments
|
||||
- Windows 10, version 1809 or later
|
||||
|
||||
Users using earlier versions of Windows 10 could authenticate to a remote desktop using Windows Hello for Business but were limited to using their PIN as their authentication gesture. Windows 10, version 1809 or later introduces the ability for users to authenticate to a remote desktop session using their Windows Hello for Business biometric gesture. The feature is on by default, so your users can take advantage of it as soon as they upgrade to Windows 10, version 1809.
|
||||
The ability for users to authenticate to a remote desktop session using their Windows Hello for Business biometric is on by default.
|
||||
|
||||
### How does it work
|
||||
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
ms.date: 07/05/2023
|
||||
title: Windows Hello for Business Deployment Prerequisite Overview
|
||||
description: Overview of all the different infrastructure requirements for Windows Hello for Business deployment models
|
||||
ms.topic: article
|
||||
ms.topic: overview
|
||||
ms.collection:
|
||||
- tier1
|
||||
appliesto:
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user