mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-17 11:23:45 +00:00
Merge branch 'main' into release-mcc-ent
This commit is contained in:
Alma Jenks
@ -128,7 +128,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us
|
||||
| `IMT Lazarus` | 2.86.0 | `Win32` | `IMTLazarus` |
|
||||
| `Inprint` | 3.7.6 | `Win32` | `Inprint` |
|
||||
| `Inspiration 10` | 10.11 | `Win32` | `TechEdology Ltd` |
|
||||
| `Instashare` | 1.3.13.0 | `Win32` | `Instashare` |
|
||||
| `Instashare 2` | 1.3.13.0 | `Win32` | `BenQ` |
|
||||
| `JAWS for Windows` | 2024.2312.53 | `Win32` | `Freedom Scientific` |
|
||||
| `Kite Student Portal` | 9.0.0.0 | `Win32` | `Dynamic Learning Maps` |
|
||||
| `Keyman` | 16.0.142 | `Win32` | `SIL International` |
|
||||
|
||||
@ -1,19 +1,9 @@
|
||||
---
|
||||
title: Add, remove, or hide Windows features
|
||||
description: Learn how to add or remove Windows optional features using the Optional features page in the Settings app. Also see the group policy objects (GPO) and MDM policies that show or hide Windows Features in the Settings app. Use Windows PowerShell to show or hide specific features in Windows Features.
|
||||
author: aczechowski
|
||||
ms.author: aaroncz
|
||||
manager: aaroncz
|
||||
ms.date: 03/28/2024
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: how-to
|
||||
ms.service: windows-client
|
||||
ms.subservice: itpro-apps
|
||||
ms.localizationpriority: medium
|
||||
ms.collection: tier2
|
||||
zone_pivot_groups: windows-versions-11-10
|
||||
appliesto:
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11</a>
|
||||
- ✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 10</a>
|
||||
---
|
||||
|
||||
# Add, remove, or hide Windows features
|
||||
@ -29,7 +19,7 @@ Open the **Optional features** pane in the **Settings** app by selecting the fol
|
||||
> [!div class="nextstepaction"]
|
||||
> [Optional features](ms-settings:optionalfeatures)
|
||||
|
||||
or
|
||||
Or
|
||||
|
||||
1. Right-click on the **Start** menu and select **Run**.
|
||||
|
||||
@ -41,7 +31,7 @@ or
|
||||
|
||||
and then select **OK**.
|
||||
|
||||
or
|
||||
Or
|
||||
|
||||
::: zone pivot="windows-11"
|
||||
|
||||
|
||||
@ -1,18 +1,26 @@
|
||||
---
|
||||
title: Windows Tools/Administrative Tools
|
||||
title: Windows Tools
|
||||
description: The folders for Windows Tools and Administrative Tools are folders in the Control Panel that contain tools for system administrators and advanced users.
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
ms.collection:
|
||||
- highpri
|
||||
- tier2
|
||||
- essentials-manage
|
||||
zone_pivot_groups: windows-versions-11-10
|
||||
---
|
||||
|
||||
# Windows Tools/Administrative Tools
|
||||
# Windows Tools
|
||||
|
||||
**Windows Tools** is a folder in the Windows 11 Control Panel. **Administrative Tools** is a folder in the Windows 10 Control Panel. These folders contain tools for system administrators and advanced users.
|
||||
::: zone pivot="windows-11"
|
||||
|
||||
**Windows Tools** is a folder in the Windows 11 Control Panel. This folder contains tools for system administrators and advanced users.
|
||||
|
||||
::: zone-end
|
||||
|
||||
::: zone pivot="windows-10"
|
||||
|
||||
**Administrative Tools** is a folder in the Windows 10 Control Panel. This folder contains tools for system administrators and advanced users.
|
||||
|
||||
::: zone-end
|
||||
|
||||
::: zone pivot="windows-11"
|
||||
|
||||
## Windows Tools folder
|
||||
|
||||
@ -24,6 +32,10 @@ The tools in the folder might vary depending on which edition of Windows you use
|
||||
|
||||
:::image type="content" source="images/win11-windows-tools.png" alt-text="Screenshot of the contents of the Windows Tools folder in Windows 11." lightbox="images/win11-windows-tools.png":::
|
||||
|
||||
::: zone-end
|
||||
|
||||
::: zone pivot="windows-10"
|
||||
|
||||
## Administrative Tools folder
|
||||
|
||||
The following graphic shows the **Administrative Tools** folder in Windows 10:
|
||||
@ -34,34 +46,7 @@ The tools in the folder might vary depending on which edition of Windows you use
|
||||
|
||||
|
||||
|
||||
## Tools
|
||||
|
||||
The tools are located in the folder `C:\Windows\System32\` or its subfolders.
|
||||
|
||||
These tools were included in previous versions of Windows. The associated documentation for each tool can help you use them. The following list provides links to documentation for each tool.
|
||||
|
||||
- [Component Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731901(v=ws.11))
|
||||
- [Computer Management](https://support.microsoft.com/topic/how-to-use-computer-management-in-windows-xp-d5872f93-4498-f4dd-3a34-36d6f569924f)
|
||||
- [Defragment and Optimize Drives](https://support.microsoft.com/windows/ways-to-improve-your-computer-s-performance-c6018c78-0edd-a71a-7040-02267d68ea90)
|
||||
- [Disk Cleanup](https://support.microsoft.com/windows/disk-cleanup-in-windows-8a96ff42-5751-39ad-23d6-434b4d5b9a68)
|
||||
- [Event Viewer](/previous-versions/windows/it-pro/windows-2000-server/cc938674(v=technet.10))
|
||||
- [iSCSI Initiator](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee338476(v=ws.10))
|
||||
- [Local Security Policy](/previous-versions/tn-archive/dd277395(v=technet.10))
|
||||
- [ODBC Data Sources](/sql/odbc/admin/odbc-data-source-administrator)
|
||||
- [Performance Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc749115(v=ws.11))
|
||||
- [Print Management](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731857(v=ws.11))
|
||||
- [Recovery Drive](https://support.microsoft.com/windows/create-a-recovery-drive-abb4691b-5324-6d4a-8766-73fab304c246)
|
||||
- [Registry Editor](/windows/win32/sysinfo/registry)
|
||||
- [Resource Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd883276(v=ws.10))
|
||||
- [Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc772408(v=ws.11))
|
||||
- [System Configuration](/troubleshoot/windows-client/performance/system-configuration-utility-troubleshoot-configuration-errors)
|
||||
- [System Information](/previous-versions/windows/it-pro/windows-2000-server/cc957818(v=technet.10))
|
||||
- [Task Scheduler](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc766428(v=ws.11))
|
||||
- [Windows Firewall with Advanced Security](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754274(v=ws.11))
|
||||
- [Windows Memory Diagnostic](/previous-versions/technet-magazine/cc745953(v=msdn.10))
|
||||
|
||||
> [!TIP]
|
||||
> If the linked content in this list doesn't provide the information you need to use that tool, send feedback with the **This page** link in the **Feedback** section at the bottom of this article.
|
||||
::: zone-end
|
||||
|
||||
## Related articles
|
||||
|
||||
|
||||
@ -1,12 +1,11 @@
|
||||
---
|
||||
title: Windows default media removal policy
|
||||
description: In Windows 10 and later, the default removal policy for external storage media changed from Better performance to Quick removal.
|
||||
ms.date: 08/10/2023
|
||||
description: Manage default media removal policy in Windows.
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
ms.localizationpriority: medium
|
||||
---
|
||||
|
||||
# Change in default removal policy for external storage media in Windows
|
||||
# Manage default media removal policy
|
||||
|
||||
Windows defines two main policies, **Quick removal** and **Better performance**, that control how the system interacts with external storage devices such as USB thumb drives or Thunderbolt-enabled external drives. Beginning in Windows 10 version 1809, the default policy is **Quick removal**. In earlier versions of Windows, the default policy was **Better performance**.
|
||||
|
||||
@ -16,7 +15,7 @@ You can change the policy setting for each external device, and the policy that
|
||||
|
||||
You can use the storage device policy setting to change the manner in which Windows manages storage devices to better meet your needs. The policy settings have the following effects:
|
||||
|
||||
- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This may degrade system performance.
|
||||
- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This can degrade system performance.
|
||||
- **Better performance**: This policy manages storage operations in a manner that improves system performance. When this policy is in effect, Windows can cache write operations to the external device. However, you must use the Safely Remove Hardware process to remove the external drive. The Safely Remove Hardware process protects the integrity of data on the device by making sure that all cached operations finish.
|
||||
|
||||
> [!IMPORTANT]
|
||||
|
||||
@ -2,7 +2,7 @@
|
||||
title: Connect to remote Microsoft Entra joined device
|
||||
description: Learn how to use Remote Desktop Connection to connect to a Microsoft Entra joined device.
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
ms.collection:
|
||||
- highpri
|
||||
@ -14,18 +14,16 @@ ms.collection:
|
||||
Windows supports remote connections to devices joined to Active Directory s well as devices joined to Microsoft Entra ID using Remote Desktop Protocol (RDP).
|
||||
|
||||
- Starting in Windows 10, version 1809, you can [use biometrics to authenticate to a remote desktop session](/windows/whats-new/whats-new-windows-10-version-1809#remote-desktop-with-biometrics).
|
||||
- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-azure-ad-authentication).
|
||||
- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-microsoft-entra-authentication).
|
||||
|
||||
## Prerequisites
|
||||
|
||||
- Both devices (local and remote) must be running a supported version of Windows.
|
||||
- Remote device must have the **Connect to and use this PC from another device using the Remote Desktop app** option selected under **Settings** > **System** > **Remote Desktop**.
|
||||
- It's recommended to select **Require devices to use Network Level Authentication to connect** option.
|
||||
- Select **Require devices to use Network Level Authentication to connect** option is recommended.
|
||||
- If the user who joined the device to Microsoft Entra ID is the only one who is going to connect remotely, no other configuration is needed. To allow more users or groups to connect to the device remotely, you must [add users to the Remote Desktop Users group](#add-users-to-remote-desktop-users-group) on the remote device.
|
||||
- Ensure [Remote Credential Guard](/windows/access-protection/remote-credential-guard) is turned off on the device you're using to connect to the remote device.
|
||||
|
||||
<a name='connect-with-azure-ad-authentication'></a>
|
||||
|
||||
## Connect with Microsoft Entra authentication
|
||||
|
||||
Microsoft Entra authentication can be used on the following operating systems for both the local and remote device:
|
||||
@ -64,8 +62,6 @@ The Windows lock screen in the remote session doesn't support Microsoft Entra au
|
||||
|
||||
Disconnecting the session also ensures that when the connection is relaunched after a period of inactivity, Microsoft Entra ID reevaluates the applicable conditional access policies.
|
||||
|
||||
<a name='connect-without-azure-ad-authentication'></a>
|
||||
|
||||
## Connect without Microsoft Entra authentication
|
||||
|
||||
By default, RDP doesn't use Microsoft Entra authentication, even if the remote PC supports it. This method allows you to connect to the remote Microsoft Entra joined device from:
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 159 KiB After Width: | Height: | Size: 24 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 31 KiB After Width: | Height: | Size: 38 KiB |
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Manage Device Installation with Group Policy
|
||||
description: Find out how to manage Device Installation Restrictions with Group Policy.
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
---
|
||||
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: Manage the Settings app with Group Policy
|
||||
description: Find out how to manage the Settings app with Group Policy so you can hide specific pages from users.
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
---
|
||||
|
||||
|
||||
@ -1,16 +1,13 @@
|
||||
---
|
||||
title: Create mandatory user profiles
|
||||
description: A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users.
|
||||
ms.date: 08/10/2023
|
||||
description: A mandatory user profile is a special type of preconfigured roaming user profile that administrators can use to specify settings for users.
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
ms.collection:
|
||||
- highpri
|
||||
- tier2
|
||||
---
|
||||
|
||||
# Create mandatory user profiles
|
||||
|
||||
A mandatory user profile is a roaming user profile that has been pre-configured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned.
|
||||
A mandatory user profile is a roaming user profile that has been preconfigured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned.
|
||||
|
||||
Mandatory user profiles are useful when standardization is important, such as on a kiosk device or in educational settings. Only system administrators can make changes to mandatory user profiles.
|
||||
|
||||
@ -118,12 +115,12 @@ In a domain, you modify properties for the user account to point to the mandator
|
||||
### How to apply a mandatory user profile to users
|
||||
|
||||
1. Open **Active Directory Users and Computers** (dsa.msc).
|
||||
1. Navigate to the user account that you'll assign the mandatory profile to.
|
||||
1. Navigate to the user account that you want to assign the mandatory profile to.
|
||||
1. Right-click the user name and open **Properties**.
|
||||
1. On the **Profile** tab, in the **Profile path** field, enter the path to the shared folder without the extension. For example, if the folder name is `\\server\share\profile.v6`, you would enter `\\server\share\profile`.
|
||||
1. Select **OK**.
|
||||
|
||||
It may take some time for this change to replicate to all domain controllers.
|
||||
It can take some time for this change to replicate to all domain controllers.
|
||||
|
||||
## Apply policies to improve sign-in time
|
||||
|
||||
|
||||
@ -1,9 +1,8 @@
|
||||
---
|
||||
title: Use Quick Assist to help users
|
||||
description: Learn how IT Pros can use Quick Assist to help users.
|
||||
ms.date: 05/09/2024
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
ms.localizationpriority: medium
|
||||
ms.collection:
|
||||
- highpri
|
||||
- tier1
|
||||
@ -134,7 +133,7 @@ Quick Assist for macOS is available for interactions with Microsoft Support. If
|
||||
|
||||
## Disable Quick Assist within your organization
|
||||
|
||||
If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents external users from using Quick Assist to gain access to devices within your organization.
|
||||
If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents guests from using Quick Assist to gain access to devices within your organization.
|
||||
|
||||
### Disable Quick Assist
|
||||
|
||||
|
||||
@ -15,7 +15,7 @@ items:
|
||||
href: manage-settings-app-with-group-policy.md
|
||||
- name: Manage default media removal policy
|
||||
href: change-default-removal-policy-external-storage-media.md
|
||||
- name: What version of Windows am I running
|
||||
href: windows-version-search.md
|
||||
- name: Windows libraries
|
||||
href: windows-libraries.md
|
||||
- name: What version of Windows am I running
|
||||
href: windows-version-search.md
|
||||
@ -2,13 +2,15 @@
|
||||
title: Windows Libraries
|
||||
description: All about Windows Libraries, which are containers for users' content, such as Documents and Pictures.
|
||||
ms.topic: conceptual
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 07/01/2024
|
||||
---
|
||||
|
||||
# Windows libraries
|
||||
|
||||
Libraries are virtual containers for users' content. A library can contain files and folders stored on the local computer or in a remote storage location. In Windows Explorer, users interact with libraries in ways similar to how they would interact with other folders. Libraries are built upon the legacy known folders (such as My Documents, My Pictures, and My Music) that users are familiar with, and these known folders are automatically included in the default libraries and set as the default save location.
|
||||
|
||||
To show libraries in File Explorer, go to **Options**, select the **View** tab, and then select **Show libraries**.
|
||||
|
||||
## Features for Users
|
||||
|
||||
Windows libraries provide full content search and rich metadata. Libraries offer the following advantages to users:
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
---
|
||||
title: What version of Windows am I running?
|
||||
description: Discover which version of Windows you're running to determine whether or not your device is enrolled in the Long-Term Servicing Channel or General Availability Channel.
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 07/01/2024
|
||||
ms.topic: conceptual
|
||||
---
|
||||
|
||||
@ -17,8 +17,6 @@ To determine if your device is enrolled in the Long-Term Servicing Channel or th
|
||||
|
||||
Select **Start** > **Settings** > **System**, then select **About**. You then see **Edition**, **Version**, and **OS Build** information.
|
||||
|
||||
:::image type="content" source="images/systemcollage.png" alt-text="screenshot of the system properties window for a device running Windows 10.":::
|
||||
|
||||
## Using Keyword Search
|
||||
|
||||
You can type the following in the search bar and press **ENTER** to see version details for your device.
|
||||
|
||||
@ -14,7 +14,7 @@ ms.localizationpriority: medium
|
||||
appliesto:
|
||||
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 11</a>
|
||||
- ✅ <a href=https://learn.microsoft.com/windows/release-health/supported-versions-windows-client target=_blank>Windows 10</a>
|
||||
ms.date: 01/29/2024
|
||||
ms.date: 07/01/2024
|
||||
---
|
||||
|
||||
# Windows Update for Business deployment service prerequisites
|
||||
@ -26,7 +26,7 @@ Before you begin the process of deploying updates with Windows Update for Busine
|
||||
## Azure and Microsoft Entra ID
|
||||
|
||||
- An Azure subscription with [Microsoft Entra ID](/azure/active-directory/)
|
||||
- Devices must be Microsoft Entra joined and meet the below OSrequirements.
|
||||
- Devices must be Microsoft Entra joined and meet the below OS requirements.
|
||||
- Devices can be [Microsoft Entra joined](/azure/active-directory/devices/concept-azure-ad-join) or [Microsoft Entra hybrid joined](/azure/active-directory/devices/concept-azure-ad-join-hybrid).
|
||||
- Devices that are [Microsoft Entra registered](/azure/active-directory/devices/concept-azure-ad-register) only (Workplace joined) aren't supported with Windows Update for Business
|
||||
|
||||
@ -85,9 +85,11 @@ When you use [Windows Update for Business reports](wufb-reports-overview.md) in
|
||||
- Windows Update for Business deployment service endpoints
|
||||
|
||||
- devicelistenerprod.microsoft.com
|
||||
- devicelistenerprod.eudb.microsoft.com for the [EU Data Boundary](/privacy/eudb/eu-data-boundary-learn) <!--9131668-->
|
||||
- login.windows.net
|
||||
- payloadprod*.blob.core.windows.net
|
||||
|
||||
|
||||
- [Windows Push Notification Services](/windows/uwp/design/shell/tiles-and-notifications/firewall-allowlist-config): *(Recommended, but not required. Without this access, devices might not expedite updates until their next daily check for updates.)*
|
||||
- *.notify.windows.com
|
||||
|
||||
|
||||
Reference in New Issue
Block a user