From 853e4955fc7dd47512b5fcfd937b18b8079cee37 Mon Sep 17 00:00:00 2001 From: Jeff Borsecnik <123032460+American-Dipper@users.noreply.github.com> Date: Fri, 17 Feb 2023 09:51:24 -0800 Subject: [PATCH 01/41] remove content that belongs in authoring guide Thomas, should we warn them of this deletion (you said the belongs in authoring guide). Note that it was modified last in October. Otherwise, please merge. --- windows/hub/doc-test.md | 154 ---------------------------------------- 1 file changed, 154 deletions(-) delete mode 100644 windows/hub/doc-test.md diff --git a/windows/hub/doc-test.md b/windows/hub/doc-test.md deleted file mode 100644 index 86c3a11317..0000000000 --- a/windows/hub/doc-test.md +++ /dev/null @@ -1,154 +0,0 @@ ---- -title: Doc team test -description: A test article for the doc team's use. -ms.date: 05/10/2022 -ms.prod: windows-client -ms.technology: itpro-fundamentals -ms.topic: reference -ms.localizationpriority: null -ROBOTS: NOINDEX -author: aczechowski -ms.author: aaroncz -ms.reviewer: mstewart -manager: dougeby ---- - -# Doc team test - -This article is for testing purposes only. - -> [!NOTE] -> For more markdown examples and tips, see the **template.md** file at the root of the repository. Including examples of links and images. - -## Basic Markdown and GFM - -All basic and Github-flavored markdown is supported. For more information, see: - -- [Baseline markdown syntax](https://daringfireball.net/projects/markdown/syntax) -- [Github-flavored markdown (GFM) documentation](https://guides.github.com/features/mastering-markdown) - -## Headings - -Examples of first and second-level headings are above. - -There **must** be only one first level heading in your article, which will be displayed as the on-page title. - -Second-level headings will generate the on-page TOC that appears in the "In this article" section underneath the on-page title. - -### Third-level heading (`###`) -#### Fourth-level heading (`####`) -##### Fifth-level heading (`#####`) - -## Text styling - -_Italics_ (`_`) - -**Bold** (`**`) - -~~Strikethrough~~ (`~~`) - -## Lists - -### Ordered lists - -1. This -1. Is -1. An -1. Ordered -1. List - -#### Ordered list with an embedded list - -1. Here -1. Comes -1. An -1. Embedded - 1. Scarlett - 1. Professor Plum -1. Ordered -1. List - -### Unordered Lists - -- This -- Is -- A -- Bulleted -- List - -#### Unordered list with an embedded list - -- This -- Bulleted -- List - - Peacock - - Green -- Contains -- Other - 1. Colonel Mustard - 1. Yellow - 1. gold - 1. White - 1. cream - 1. silver -- Lists - -## Horizontal rule - ---- - -## Tables - -| Tables | Are | Cool | -|---------------------|:-------------:|------:| -| Column 3 is | Right-aligned | $1600 | -| Column 2 is | Centered | $12 | -| Column 1 is default | Left-aligned | $1 | - -## Code - -### Code block - -```json -{ - "aggregator": { - "batchSize": 1000, - flushTimeout": "00:00:30" - } -} - ``` - -### In-line code - -This example is for `in-line code`. - -## Blockquotes - -> The drought had lasted now for ten million years, and the reign of the terrible lizards had long since ended. Here on the Equator, in the continent which would one day be known as Africa, the battle for existence had reached a new climax of ferocity, and the victor was not yet in sight. In this barren and desiccated land, only the small or the swift or the fierce could flourish, or even hope to survive. - -## Alerts - -### Note - -> [!NOTE] -> This alert is a NOTE - -### Warning - -> [!WARNING] -> This alert is a WARNING - -### Tip - -> [!TIP] -> This alert is a TIP - -### Caution - -> [!CAUTION] -> This alert is a CAUTION - -### Important - -> [!IMPORTANT] -> This alert is a IMPORTANT From 0db214517cba11ca683fa300e4f0f14c4b119d49 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 20 Mar 2023 15:26:09 -0700 Subject: [PATCH 02/41] do-wufbr-MAXADO-7715481 --- windows/deployment/update/wufb-reports-do.md | 23 ++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 windows/deployment/update/wufb-reports-do.md diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md new file mode 100644 index 0000000000..a73d68d43d --- /dev/null +++ b/windows/deployment/update/wufb-reports-do.md @@ -0,0 +1,23 @@ +--- +title: Delivery Optimization data in Windows Update for Business reports +manager: aaroncz +description: Provides information about Delivery Optimization data in Windows Update for Business reports +ms.prod: windows-client +author: mestew +ms.author: mstewart +ms.topic: article +ms.date: 03/27/2023 +ms.technology: itpro-updates +--- + +# Delivery Optimization data in Windows Update for Business reports + +***(Applies to: Windows 11 & Windows 10)*** + +[Delivery Optimization](../do/waas-delivery-optimization.md) (DO) is a Windows feature that can be used to reduce bandwidth consumption by sharing the work of downloading updates among multiple devices in your environment. You can use DO in conjunction with many other deployment methods, but it's a cloud-managed solution, and access to the DO cloud services is a requirement. + +Windows Update for Business reports provides Delivery Optimization information in the following places: +- The Windows Update for Business reports [workbook](wufb-reports-workbook.md) +- [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) +- [UCDOStatus](wufb-reports-schema-ucdostatus.md) + From 2630aef6377b50e4d489df4b86fca081d8dcdd8e Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 20 Mar 2023 15:57:32 -0700 Subject: [PATCH 03/41] do-wufbr-MAXADO-7715481 --- windows/deployment/update/wufb-reports-do.md | 21 ++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index a73d68d43d..3104c24466 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -21,3 +21,24 @@ Windows Update for Business reports provides Delivery Optimization information i - [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) - [UCDOStatus](wufb-reports-schema-ucdostatus.md) +## Delivery Optimization terms + +Windows Update for Business reports uses the following Delivery Optimization terms: + +- **Peer**: A device in the solution +- **Peering 'ON'** - Devices where DO peer-to-peer is enabled in one of the following modes: + - LAN (1) + - Group (2) + - Internet (3) +- **Peering 'OFF'**: Devices where DO peer-to-peer is disabled, set to one of the following modes: + - HTTP Only (0) + - Simple Mode (99) + - Bypass (100), deprecated in Windows 11 +**Bandwidth savings**: Out of the total consumed bandwidth, the percentage of bandwidth that was downloaded from either LAN or Group peers, and from Microsoft Connected Cache (MCC) + - If bandwidth savings are <= 60% a *Warning* icon is displayed + - When bandwidth savings is <10% an *Error* icon is displayed. +- **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. + + +Volume from the CDN is calculated with the following formula: +BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache From 5a18cf6d081b19f85faf64954b344c30038fba20 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 20 Mar 2023 16:35:27 -0700 Subject: [PATCH 04/41] do-wufbr-MAXADO-7715481 --- windows/deployment/TOC.yml | 2 ++ windows/deployment/update/wufb-reports-do.md | 36 +++++++++++++++++++- 2 files changed, 37 insertions(+), 1 deletion(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index 4fc092c907..27db64502d 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -212,6 +212,8 @@ items: - name: Windows Update for Business reports workbook href: update/wufb-reports-workbook.md + - name: Delivery Optimization data in reports + href: update/wufb-reports-do.md - name: Software updates in the Microsoft 365 admin center href: update/wufb-reports-admin-center.md - name: Use Windows Update for Business reports data diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 3104c24466..f6ee5ddcdf 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -14,13 +14,15 @@ ms.technology: itpro-updates ***(Applies to: Windows 11 & Windows 10)*** -[Delivery Optimization](../do/waas-delivery-optimization.md) (DO) is a Windows feature that can be used to reduce bandwidth consumption by sharing the work of downloading updates among multiple devices in your environment. You can use DO in conjunction with many other deployment methods, but it's a cloud-managed solution, and access to the DO cloud services is a requirement. +[Delivery Optimization](../do/waas-delivery-optimization.md) (DO) is a Windows feature that can be used to reduce bandwidth consumption by sharing the work of downloading updates among multiple devices in your environment. You can use DO in conjunction with many other deployment methods, but it's a cloud-managed solution, and access to the DO cloud services is a requirement. Windows Update for Business reports provides Delivery Optimization information in the following places: - The Windows Update for Business reports [workbook](wufb-reports-workbook.md) - [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) - [UCDOStatus](wufb-reports-schema-ucdostatus.md) +Windows Update for Business reports doesn't include Delivery Optimization data for Windows Insider devices. + ## Delivery Optimization terms Windows Update for Business reports uses the following Delivery Optimization terms: @@ -39,6 +41,38 @@ Windows Update for Business reports uses the following Delivery Optimization ter - When bandwidth savings is <10% an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. +## Calculations for Delivery Optimization Volume from the CDN is calculated with the following formula: BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache + + +## Determine GroupID + +In the **Efficiency By Group** subsection, the **GroupID** is displayed as an encoded hash. You can determine the **GroupID** from the hash, or determine the hash for a given **GroupID**. + +Determine the **GroupID** from the hash: + +Determine the hash for a **GroupID**: + + +## Sample queries + +You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) +and [UCDOStatus](wufb-reports-schema-ucdostatus.md) to create your own queries. Create your custom queries using [Kusto Query Lanaguage (KQL)](/azure/data-explorer/kusto/query/), but note that Windows Update for Business reports uses Azure Monitor, so some operators aren't supported. The KQL documentation specifies which operators aren't supported by Azure Monitor or if they have different functionality. For more information about KQL in Azure Monitor, see [Log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview). The following queries are examples of how you can use the data: + +### Sample query 1 + +Explanation of what the query displays + +```kusto +UCDOAggregatedStatus +| where Bogus =="SomethingBogus" and Neato =="Something Neat" +| sort by Whatevs +| project Whatevs, Neato, Bogus +``` + + +### Sample query 2 + +Explanation of what the query displays \ No newline at end of file From 06ae5d8b65b8be2408902a824f5a9b509fd0f5f7 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 20 Mar 2023 16:38:09 -0700 Subject: [PATCH 05/41] do-wufbr-MAXADO-7715481 --- windows/deployment/update/wufb-reports-do.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index f6ee5ddcdf..ef32b17518 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -14,7 +14,7 @@ ms.technology: itpro-updates ***(Applies to: Windows 11 & Windows 10)*** -[Delivery Optimization](../do/waas-delivery-optimization.md) (DO) is a Windows feature that can be used to reduce bandwidth consumption by sharing the work of downloading updates among multiple devices in your environment. You can use DO in conjunction with many other deployment methods, but it's a cloud-managed solution, and access to the DO cloud services is a requirement. +[Delivery Optimization](../do/waas-delivery-optimization.md) (DO) is a Windows feature that can be used to reduce bandwidth consumption by sharing the work of downloading updates among multiple devices in your environment. You can use DO with many other deployment methods, but it's a cloud-managed solution, and access to the DO cloud services is a requirement. Windows Update for Business reports provides Delivery Optimization information in the following places: - The Windows Update for Business reports [workbook](wufb-reports-workbook.md) @@ -38,7 +38,7 @@ Windows Update for Business reports uses the following Delivery Optimization ter - Bypass (100), deprecated in Windows 11 **Bandwidth savings**: Out of the total consumed bandwidth, the percentage of bandwidth that was downloaded from either LAN or Group peers, and from Microsoft Connected Cache (MCC) - If bandwidth savings are <= 60% a *Warning* icon is displayed - - When bandwidth savings is <10% an *Error* icon is displayed. + - When bandwidth savings are <10% an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. ## Calculations for Delivery Optimization @@ -59,7 +59,7 @@ Determine the hash for a **GroupID**: ## Sample queries You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) -and [UCDOStatus](wufb-reports-schema-ucdostatus.md) to create your own queries. Create your custom queries using [Kusto Query Lanaguage (KQL)](/azure/data-explorer/kusto/query/), but note that Windows Update for Business reports uses Azure Monitor, so some operators aren't supported. The KQL documentation specifies which operators aren't supported by Azure Monitor or if they have different functionality. For more information about KQL in Azure Monitor, see [Log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview). The following queries are examples of how you can use the data: +and [UCDOStatus](wufb-reports-schema-ucdostatus.md) to create your own queries. Create your custom queries using [Kusto Query Language (KQL)](/azure/data-explorer/kusto/query/), but note that Windows Update for Business reports uses Azure Monitor, so some operators aren't supported. The KQL documentation specifies which operators aren't supported by Azure Monitor or if they have different functionality. For more information about KQL in Azure Monitor, see [Log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview). The following queries are examples of how you can use the data: ### Sample query 1 From f28e4c0da00603f96024cbf26e2af3bc5fe2128a Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 20 Mar 2023 16:40:36 -0700 Subject: [PATCH 06/41] do-wufbr-MAXADO-7715481 --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index ef32b17518..bba06682d2 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -36,7 +36,7 @@ Windows Update for Business reports uses the following Delivery Optimization ter - HTTP Only (0) - Simple Mode (99) - Bypass (100), deprecated in Windows 11 -**Bandwidth savings**: Out of the total consumed bandwidth, the percentage of bandwidth that was downloaded from either LAN or Group peers, and from Microsoft Connected Cache (MCC) +- **Bandwidth savings**: Out of the total consumed bandwidth, the percentage of bandwidth that was downloaded from either LAN or Group peers, and from Microsoft Connected Cache (MCC) - If bandwidth savings are <= 60% a *Warning* icon is displayed - When bandwidth savings are <10% an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. From 2e369df59a80ef0d8363961de22a38ef273cd531 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 11:28:39 -0600 Subject: [PATCH 07/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index bba06682d2..4793bed70f 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -42,6 +42,8 @@ Windows Update for Business reports uses the following Delivery Optimization ter - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. ## Calculations for Delivery Optimization +There are sevaral calculated values that appear on the Delivery Optimization report. Here is a list of them with the associated formula. +Bandwidth Savings (BW SAV%): Volume from the CDN is calculated with the following formula: BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache @@ -75,4 +77,4 @@ UCDOAggregatedStatus ### Sample query 2 -Explanation of what the query displays \ No newline at end of file +Explanation of what the query displays From f369472d8f51768e2236e2cbd10206c7c3c94f41 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 14:37:36 -0600 Subject: [PATCH 08/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 35 ++++++++++++++++---- 1 file changed, 29 insertions(+), 6 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 4793bed70f..d7ce172121 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -40,14 +40,31 @@ Windows Update for Business reports uses the following Delivery Optimization ter - If bandwidth savings are <= 60% a *Warning* icon is displayed - When bandwidth savings are <10% an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. +- **P2P Device Count**: The device count is determined by the number of devices that have received bytes from peers, for supported content types. +- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more] (https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) +- **MCC Device Count**: The device count is determined by the number of devices that have received bytes from the cache server, for supported content types. +- **Total # of Devices**: The total number of devices with activity in last 28 days! +**LAN Bytes**: Bytes delivered from LAN peers. +**Group Bytes**: Bytes from Group peers. If a device is using Group DownloadMode, Delivery Optimization will first look for peers on the LAN and then in the Group. Therefore, if bytes are delivered from LAN peers, they will be calculated in 'LAN Bytes'. +**CDN Bytes**: Bytes delivered from Content Delivery Network (CDN). +**City**: City is determined based on the location of the device where the maximum amount of data is downloaded. +**Country**: Country is determined based on the location of the device where the maximum amount of data is downloaded. +**ISP**: ISP is determined based on the ISP delivering the maximum bytes to the device. ## Calculations for Delivery Optimization -There are sevaral calculated values that appear on the Delivery Optimization report. Here is a list of them with the associated formula. -Bandwidth Savings (BW SAV%): - -Volume from the CDN is calculated with the following formula: -BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache - +There are sevaral calculated values that appear on the Delivery Optimization report. +- Bandwidth Savings (BW SAV%) = BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ +(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) * 100.0 (UCDOAggregatedStatus table) +- % P2P Efficiency = (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) +- % MCC Efficiency = BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) +- TotalBytes = BytesFromCDN + BytesFromEnterpriseCache + BytesFromPeers + BytesFromGroupPeers (UCDOAggregatedStatus table) +- BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache (UCDOAggregatedStatus table) +- BytesFromPeers = BytesFromLAN (UCDOAggregatedStatus table) +- BytesFromGroupPeers = BytesFromGroupPeers (UCDOAggregatedStatus table) +- BytesFromCache = BytesFromCache (UCDOAggregatedStatus table) +- Volume by P2P = BytesFromPeers + BytesFromGroupPeers (UCDOStatus table) +- Volume by MCC = BytesFromCache ((UCDOStatus table) +- Volume by CDN = BytesFrom CDN (UCDOStatus table) ## Determine GroupID @@ -78,3 +95,9 @@ UCDOAggregatedStatus ### Sample query 2 Explanation of what the query displays + + +### Frequency Asked Questions + +**Data is showing as 'Unknown', what does that mean?** +You may see data in the report listed as 'Unknown'. This indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. From 8d20454eedf352910b86733540cf790cb4e8374c Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 14:41:11 -0600 Subject: [PATCH 09/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index d7ce172121..daefc53d19 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -43,25 +43,28 @@ Windows Update for Business reports uses the following Delivery Optimization ter - **P2P Device Count**: The device count is determined by the number of devices that have received bytes from peers, for supported content types. - **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more] (https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) - **MCC Device Count**: The device count is determined by the number of devices that have received bytes from the cache server, for supported content types. -- **Total # of Devices**: The total number of devices with activity in last 28 days! -**LAN Bytes**: Bytes delivered from LAN peers. -**Group Bytes**: Bytes from Group peers. If a device is using Group DownloadMode, Delivery Optimization will first look for peers on the LAN and then in the Group. Therefore, if bytes are delivered from LAN peers, they will be calculated in 'LAN Bytes'. -**CDN Bytes**: Bytes delivered from Content Delivery Network (CDN). -**City**: City is determined based on the location of the device where the maximum amount of data is downloaded. -**Country**: Country is determined based on the location of the device where the maximum amount of data is downloaded. -**ISP**: ISP is determined based on the ISP delivering the maximum bytes to the device. +- **Total # of Devices**: The total number of devices with activity in last 28 days. +- **LAN Bytes**: Bytes delivered from LAN peers. +- **Group Bytes**: Bytes from Group peers. If a device is using Group DownloadMode, Delivery Optimization will first look for peers on the LAN and then in the Group. Therefore, if bytes are delivered from LAN peers, they will be calculated in 'LAN Bytes'. +- **CDN Bytes**: Bytes delivered from Content Delivery Network (CDN). +- **City**: City is determined based on the location of the device where the maximum amount of data is downloaded. +- **Country**: Country is determined based on the location of the device where the maximum amount of data is downloaded. +- **ISP**: ISP is determined based on the ISP delivering the maximum bytes to the device. ## Calculations for Delivery Optimization There are sevaral calculated values that appear on the Delivery Optimization report. +**% Effiency Calculations** - Bandwidth Savings (BW SAV%) = BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ (BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) * 100.0 (UCDOAggregatedStatus table) - % P2P Efficiency = (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) - % MCC Efficiency = BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) +**Bytes Calculations** - TotalBytes = BytesFromCDN + BytesFromEnterpriseCache + BytesFromPeers + BytesFromGroupPeers (UCDOAggregatedStatus table) - BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache (UCDOAggregatedStatus table) - BytesFromPeers = BytesFromLAN (UCDOAggregatedStatus table) - BytesFromGroupPeers = BytesFromGroupPeers (UCDOAggregatedStatus table) - BytesFromCache = BytesFromCache (UCDOAggregatedStatus table) +**Volume Calculations** - Volume by P2P = BytesFromPeers + BytesFromGroupPeers (UCDOStatus table) - Volume by MCC = BytesFromCache ((UCDOStatus table) - Volume by CDN = BytesFrom CDN (UCDOStatus table) From 6d6be15d29fb35a957befd9800be8249e374fb92 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 14:42:29 -0600 Subject: [PATCH 10/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index daefc53d19..c9429c6563 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -53,17 +53,20 @@ Windows Update for Business reports uses the following Delivery Optimization ter ## Calculations for Delivery Optimization There are sevaral calculated values that appear on the Delivery Optimization report. -**% Effiency Calculations** + +**Effiency (%) Calculations** - Bandwidth Savings (BW SAV%) = BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ (BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) * 100.0 (UCDOAggregatedStatus table) - % P2P Efficiency = (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) - % MCC Efficiency = BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) + **Bytes Calculations** - TotalBytes = BytesFromCDN + BytesFromEnterpriseCache + BytesFromPeers + BytesFromGroupPeers (UCDOAggregatedStatus table) - BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache (UCDOAggregatedStatus table) - BytesFromPeers = BytesFromLAN (UCDOAggregatedStatus table) - BytesFromGroupPeers = BytesFromGroupPeers (UCDOAggregatedStatus table) - BytesFromCache = BytesFromCache (UCDOAggregatedStatus table) + **Volume Calculations** - Volume by P2P = BytesFromPeers + BytesFromGroupPeers (UCDOStatus table) - Volume by MCC = BytesFromCache ((UCDOStatus table) From c1c00f74c23315aa5bae94664959c92582b6e927 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 14:44:04 -0600 Subject: [PATCH 11/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index c9429c6563..1cd4e75799 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -69,7 +69,7 @@ There are sevaral calculated values that appear on the Delivery Optimization rep **Volume Calculations** - Volume by P2P = BytesFromPeers + BytesFromGroupPeers (UCDOStatus table) -- Volume by MCC = BytesFromCache ((UCDOStatus table) +- Volume by MCC = BytesFromCache (UCDOStatus table) - Volume by CDN = BytesFrom CDN (UCDOStatus table) ## Determine GroupID From 645bb7965ba3ea8e2378d4f44324fb81abccdaad Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 15:07:55 -0600 Subject: [PATCH 12/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 1cd4e75799..3a91654ec4 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -74,13 +74,18 @@ There are sevaral calculated values that appear on the Delivery Optimization rep ## Determine GroupID -In the **Efficiency By Group** subsection, the **GroupID** is displayed as an encoded hash. You can determine the **GroupID** from the hash, or determine the hash for a given **GroupID**. +In the **Efficiency By Group** subsection, the **GroupID** is displayed as an encoded SHA256 hash. You can create a mapping of decoded to encoded GroupIDs using the following PowerShell example: -Determine the **GroupID** from the hash: - -Determine the hash for a **GroupID**: +```powershell +$text = "65f64d93-a6c1-446b-95c2-c6117378002c`0" ; +$hashObj = [System.Security.Cryptography.HashAlgorithm]::Create('sha256') ; $dig = $hashObj.ComputeHash([System.Text.Encoding]::Unicode.GetBytes($text)) ; $digB64 = [System.Convert]::ToBase64String($dig) ; Write-Host "$text ==> $digB64" +``` +In addition, you can see the both the encoded and decoded GroupIDs in the Delivery Optimization logs. +```powershell +powershell Get-DeliveryOptimizationLog -Flush | Set-Content C:\dosvc.log +``` ## Sample queries You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) From 4261214df88639bc4acb8c6ddda48ecbfc5d30ec Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 15:24:18 -0600 Subject: [PATCH 13/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 3a91654ec4..7f3c12c953 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -110,5 +110,8 @@ Explanation of what the query displays ### Frequency Asked Questions -**Data is showing as 'Unknown', what does that mean?** +- **What time period does the Delivery Optimization data include?** +Data is available for the last 28 days. + +- **Data is showing as 'Unknown', what does that mean?** You may see data in the report listed as 'Unknown'. This indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. From 3b6cb1f94b93861b46540aecfe7f51a408a43034 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 15:56:51 -0600 Subject: [PATCH 14/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 7f3c12c953..4615b52f79 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -52,7 +52,7 @@ Windows Update for Business reports uses the following Delivery Optimization ter - **ISP**: ISP is determined based on the ISP delivering the maximum bytes to the device. ## Calculations for Delivery Optimization -There are sevaral calculated values that appear on the Delivery Optimization report. +There are sevaral calculated values that appear on the Delivery Optimization report. The table used for each calculation is listed for each, in parenthesis. **Effiency (%) Calculations** - Bandwidth Savings (BW SAV%) = BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ From 9a453c0fc5f6d5dd75ec124d6562c941f4323331 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 16:14:50 -0600 Subject: [PATCH 15/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 4615b52f79..ae6bce2542 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -41,7 +41,7 @@ Windows Update for Business reports uses the following Delivery Optimization ter - When bandwidth savings are <10% an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. - **P2P Device Count**: The device count is determined by the number of devices that have received bytes from peers, for supported content types. -- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more] (https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) +- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more](https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) - **MCC Device Count**: The device count is determined by the number of devices that have received bytes from the cache server, for supported content types. - **Total # of Devices**: The total number of devices with activity in last 28 days. - **LAN Bytes**: Bytes delivered from LAN peers. From fc8477dda8ec5465f4676b5124213942a494a463 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 16:23:23 -0600 Subject: [PATCH 16/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index ae6bce2542..be38540a6e 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -77,7 +77,7 @@ There are sevaral calculated values that appear on the Delivery Optimization rep In the **Efficiency By Group** subsection, the **GroupID** is displayed as an encoded SHA256 hash. You can create a mapping of decoded to encoded GroupIDs using the following PowerShell example: ```powershell -$text = "65f64d93-a6c1-446b-95c2-c6117378002c`0" ; +$text = "" ; $hashObj = [System.Security.Cryptography.HashAlgorithm]::Create('sha256') ; $dig = $hashObj.ComputeHash([System.Text.Encoding]::Unicode.GetBytes($text)) ; $digB64 = [System.Convert]::ToBase64String($dig) ; Write-Host "$text ==> $digB64" ``` From bd0545683cea9e04675af11490e7b60058eca0db Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Fri, 31 Mar 2023 16:27:46 -0600 Subject: [PATCH 17/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index be38540a6e..b84046f9ac 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -86,6 +86,16 @@ In addition, you can see the both the encoded and decoded GroupIDs in the Delive ```powershell powershell Get-DeliveryOptimizationLog -Flush | Set-Content C:\dosvc.log ``` +```code + +These two lines are together in verbose logs: + +2023-02-15T12:33:11.3811337Z 1514  1F4          {CGlobalConfigManager::GetGroupId} Using groupID = **** +2023-02-15T12:33:11.3811432Z 1514  1F4          {CGlobalConfigManager::GetGroupId} Hashed groupID = **** +``` + +  + ## Sample queries You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) From 461d252405412ced616350147e45bc2a8eae97a2 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Mon, 3 Apr 2023 20:47:23 -0600 Subject: [PATCH 18/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index b84046f9ac..4139eeb730 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -113,9 +113,20 @@ UCDOAggregatedStatus ``` -### Sample query 2 +### Sample UCDOStatus table query -Explanation of what the query displays +The following is the query used to display the Top 10 GroupIDs: + +```kusto +UCDOStatus | where TimeGenerated == _SnapshotTime +| summarize sum(BytesFromCDN) , sum(BytesFromGroupPeers) , sum(BytesFromPeers) , sum(BytesFromCache) , +DeviceCount = count_distinct(GlobalDeviceId) by GroupID | top 10 by DeviceCount desc +| extend TotalBytes = (sum_BytesFromPeers + sum_BytesFromGroupPeers+sum_BytesFromCDN+sum_BytesFromCache) +| extend P2PPercentage = ((0.0 + sum_BytesFromPeers + sum_BytesFromGroupPeers)/TotalBytes ) * 100.0 +| extend MCCPercentage = ((0.0 + sum_BytesFromCache)/ TotalBytes) * 100.0 , + VolumeBytesFromPeers = sum_BytesFromPeers + sum_BytesFromGroupPeers +| extend VolumeBytesFromMCC = sum_BytesFromCache , VolumeByCDN = sum_BytesFromCDN +| project GroupID , P2PPercentage , MCCPercentage , VolumeBytesFromPeers , VolumeBytesFromMCC ,VolumeByCDN , DeviceCount ### Frequency Asked Questions @@ -125,3 +136,6 @@ Data is available for the last 28 days. - **Data is showing as 'Unknown', what does that mean?** You may see data in the report listed as 'Unknown'. This indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. + +-**How is the 'Top 10' groups identified?** +The top groups are represented by the number of devices in a particular group, for any of the four group types (GroupID, City, Country, and ISP). From bbc778f057df6c6cfb0066b1769be920f4585c09 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Mon, 3 Apr 2023 20:50:21 -0600 Subject: [PATCH 19/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 4139eeb730..b05a1354b5 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -101,19 +101,19 @@ These two lines are together in verbose logs: You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) and [UCDOStatus](wufb-reports-schema-ucdostatus.md) to create your own queries. Create your custom queries using [Kusto Query Language (KQL)](/azure/data-explorer/kusto/query/), but note that Windows Update for Business reports uses Azure Monitor, so some operators aren't supported. The KQL documentation specifies which operators aren't supported by Azure Monitor or if they have different functionality. For more information about KQL in Azure Monitor, see [Log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview). The following queries are examples of how you can use the data: -### Sample query 1 +### Example UCDOAggregatedStatus table query -Explanation of what the query displays +The following is the query used to display the total bandwidth savings % value: ```kusto -UCDOAggregatedStatus -| where Bogus =="SomethingBogus" and Neato =="Something Neat" -| sort by Whatevs -| project Whatevs, Neato, Bogus +UCDOAggregatedStatus| where TimeGenerated == _SnapshotTime +| extend LocalSourceBytes = BytesFromCache + BytesFromGroupPeers + BytesFromPeers +| summarize LocalSources_BWSAV = round((sum(0.0 + LocalSourceBytes)/ sum(LocalSourceBytes+BytesFromCDN)) * 100.0 ,2) +| extend Title = "BW SAV%" , SubTitle = "Local Sources" ``` -### Sample UCDOStatus table query +### Example UCDOStatus table query The following is the query used to display the Top 10 GroupIDs: @@ -127,7 +127,7 @@ DeviceCount = count_distinct(GlobalDeviceId) by GroupID | top 10 by DeviceCount VolumeBytesFromPeers = sum_BytesFromPeers + sum_BytesFromGroupPeers | extend VolumeBytesFromMCC = sum_BytesFromCache , VolumeByCDN = sum_BytesFromCDN | project GroupID , P2PPercentage , MCCPercentage , VolumeBytesFromPeers , VolumeBytesFromMCC ,VolumeByCDN , DeviceCount - +``` ### Frequency Asked Questions From 993d209a99b1e842a52caedc87c4684c943f2fc9 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Mon, 3 Apr 2023 20:53:40 -0600 Subject: [PATCH 20/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index b05a1354b5..2fc966007e 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -72,7 +72,7 @@ There are sevaral calculated values that appear on the Delivery Optimization rep - Volume by MCC = BytesFromCache (UCDOStatus table) - Volume by CDN = BytesFrom CDN (UCDOStatus table) -## Determine GroupID +## Mapping GroupID In the **Efficiency By Group** subsection, the **GroupID** is displayed as an encoded SHA256 hash. You can create a mapping of decoded to encoded GroupIDs using the following PowerShell example: @@ -137,5 +137,8 @@ Data is available for the last 28 days. - **Data is showing as 'Unknown', what does that mean?** You may see data in the report listed as 'Unknown'. This indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. --**How is the 'Top 10' groups identified?** +- **How is the 'Top 10' groups identified?** The top groups are represented by the number of devices in a particular group, for any of the four group types (GroupID, City, Country, and ISP). + +- **The GroupIDs don't look familiar, why are they different?** +The GroupID values are encoded for data protection telemetry requirements. You can find more information in the 'Mapping GroupIDs' section above. From a01a1e82d131dae4ed921eb106feb6a92df500ef Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Mon, 3 Apr 2023 20:56:21 -0600 Subject: [PATCH 21/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 2fc966007e..6237b36a34 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -93,9 +93,6 @@ These two lines are together in verbose logs: 2023-02-15T12:33:11.3811337Z 1514  1F4          {CGlobalConfigManager::GetGroupId} Using groupID = **** 2023-02-15T12:33:11.3811432Z 1514  1F4          {CGlobalConfigManager::GetGroupId} Hashed groupID = **** ``` - -  - ## Sample queries You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) @@ -111,8 +108,6 @@ UCDOAggregatedStatus| where TimeGenerated == _SnapshotTime | summarize LocalSources_BWSAV = round((sum(0.0 + LocalSourceBytes)/ sum(LocalSourceBytes+BytesFromCDN)) * 100.0 ,2) | extend Title = "BW SAV%" , SubTitle = "Local Sources" ``` - - ### Example UCDOStatus table query The following is the query used to display the Top 10 GroupIDs: From 91a9f4d4a8d7cbf997f3edc1176782310c8dcb60 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Mon, 3 Apr 2023 21:05:27 -0600 Subject: [PATCH 22/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 6237b36a34..a094098042 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -124,7 +124,7 @@ DeviceCount = count_distinct(GlobalDeviceId) by GroupID | top 10 by DeviceCount | project GroupID , P2PPercentage , MCCPercentage , VolumeBytesFromPeers , VolumeBytesFromMCC ,VolumeByCDN , DeviceCount ``` -### Frequency Asked Questions +## Frequency Asked Questions - **What time period does the Delivery Optimization data include?** Data is available for the last 28 days. From 9a34494e3daa6a6f970c652a2329f7be69cc1db1 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Mon, 3 Apr 2023 21:07:47 -0600 Subject: [PATCH 23/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index a094098042..563f5f1490 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -41,7 +41,7 @@ Windows Update for Business reports uses the following Delivery Optimization ter - When bandwidth savings are <10% an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. - **P2P Device Count**: The device count is determined by the number of devices that have received bytes from peers, for supported content types. -- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more](https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) +- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more](https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) about Microsoft Connected Cache. - **MCC Device Count**: The device count is determined by the number of devices that have received bytes from the cache server, for supported content types. - **Total # of Devices**: The total number of devices with activity in last 28 days. - **LAN Bytes**: Bytes delivered from LAN peers. From cc8cad7ff9fc74b98b181bbfc5b595a6dbdb5a11 Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Tue, 4 Apr 2023 12:03:20 -0600 Subject: [PATCH 24/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 563f5f1490..65d7d75edd 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -137,3 +137,12 @@ The top groups are represented by the number of devices in a particular group, f - **The GroupIDs don't look familiar, why are they different?** The GroupID values are encoded for data protection telemetry requirements. You can find more information in the 'Mapping GroupIDs' section above. + +- **How can I see data for device in the office vs. out of the office?** +Today, we don't have a distinction for data that was downloaded by location. + +- **What does the data in UCDOStatus table represent?** +A row in UCDOStatus represents data downloaded by a combination of a single device ID (AzureADDeviceId) by content type (ContentType). + +- **What does the data in UCDOAggregatedStatus table represent?** +A row in UCDOAggregatedStatus represents data summarized at the tenant level (AzureADTenantID) for each content type (ContentType). From 2e749cf730f05d01aa4c83f7c424b85f16e0a477 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 5 Apr 2023 10:11:47 -0700 Subject: [PATCH 25/41] edits --- windows/deployment/update/wufb-reports-do.md | 76 ++++++++++++-------- 1 file changed, 47 insertions(+), 29 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 65d7d75edd..8ca32490b4 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -37,40 +37,55 @@ Windows Update for Business reports uses the following Delivery Optimization ter - Simple Mode (99) - Bypass (100), deprecated in Windows 11 - **Bandwidth savings**: Out of the total consumed bandwidth, the percentage of bandwidth that was downloaded from either LAN or Group peers, and from Microsoft Connected Cache (MCC) - - If bandwidth savings are <= 60% a *Warning* icon is displayed - - When bandwidth savings are <10% an *Error* icon is displayed. + - If bandwidth savings are <= 60%, a *Warning* icon is displayed + - When bandwidth savings are <10%, an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. - **P2P Device Count**: The device count is determined by the number of devices that have received bytes from peers, for supported content types. -- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. [Learn more](https://learn.microsoft.com/windows/deployment/do/waas-microsoft-connected-cache) about Microsoft Connected Cache. +- **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. For more information, see [Microsoft Connected Cache overview](../do/waas-microsoft-connected-cache.md). - **MCC Device Count**: The device count is determined by the number of devices that have received bytes from the cache server, for supported content types. - **Total # of Devices**: The total number of devices with activity in last 28 days. - **LAN Bytes**: Bytes delivered from LAN peers. -- **Group Bytes**: Bytes from Group peers. If a device is using Group DownloadMode, Delivery Optimization will first look for peers on the LAN and then in the Group. Therefore, if bytes are delivered from LAN peers, they will be calculated in 'LAN Bytes'. +- **Group Bytes**: Bytes from Group peers. If a device is using Group DownloadMode, Delivery Optimization will first look for peers on the LAN and then in the Group. Therefore, if bytes are delivered from LAN peers, they'll be calculated in 'LAN Bytes'. - **CDN Bytes**: Bytes delivered from Content Delivery Network (CDN). - **City**: City is determined based on the location of the device where the maximum amount of data is downloaded. - **Country**: Country is determined based on the location of the device where the maximum amount of data is downloaded. - **ISP**: ISP is determined based on the ISP delivering the maximum bytes to the device. ## Calculations for Delivery Optimization -There are sevaral calculated values that appear on the Delivery Optimization report. The table used for each calculation is listed for each, in parenthesis. -**Effiency (%) Calculations** -- Bandwidth Savings (BW SAV%) = BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ -(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) * 100.0 (UCDOAggregatedStatus table) -- % P2P Efficiency = (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) -- % MCC Efficiency = BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 (UCDOStatus table) +There are several calculated values that appear on the Delivery Optimization report. Listed below each calculation is the table that's used for it: -**Bytes Calculations** -- TotalBytes = BytesFromCDN + BytesFromEnterpriseCache + BytesFromPeers + BytesFromGroupPeers (UCDOAggregatedStatus table) -- BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache (UCDOAggregatedStatus table) -- BytesFromPeers = BytesFromLAN (UCDOAggregatedStatus table) -- BytesFromGroupPeers = BytesFromGroupPeers (UCDOAggregatedStatus table) -- BytesFromCache = BytesFromCache (UCDOAggregatedStatus table) +**Efficiency (%) Calculations**: + +- Bandwidth Savings (BW SAV%) = (BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ +(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) * 100.0 + - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table +- % P2P Efficiency = (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 + - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table +- % MCC Efficiency = BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 + - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table -**Volume Calculations** -- Volume by P2P = BytesFromPeers + BytesFromGroupPeers (UCDOStatus table) -- Volume by MCC = BytesFromCache (UCDOStatus table) -- Volume by CDN = BytesFrom CDN (UCDOStatus table) +**Bytes Calculations**: + +- TotalBytes = BytesFromCDN + BytesFromEnterpriseCache + BytesFromPeers + BytesFromGroupPeers + - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table +- BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache + - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table +- BytesFromPeers = BytesFromLAN + - [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) table +- BytesFromGroupPeers = BytesFromGroupPeers + - [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) table +- BytesFromCache = BytesFromCache + - [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) table + +**Volume Calculations**: + +- Volume by P2P = BytesFromPeers + BytesFromGroupPeers + - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table +- Volume by MCC = BytesFromCache + - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table +- Volume by CDN = BytesFrom CDN + - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table ## Mapping GroupID @@ -81,18 +96,20 @@ $text = "" ; $hashObj = [System.Security.Cryptography.HashAlgorithm]::Create('sha256') ; $dig = $hashObj.ComputeHash([System.Text.Encoding]::Unicode.GetBytes($text)) ; $digB64 = [System.Convert]::ToBase64String($dig) ; Write-Host "$text ==> $digB64" ``` -In addition, you can see the both the encoded and decoded GroupIDs in the Delivery Optimization logs. + +In addition, you can see both the encoded and decoded GroupIDs in the Delivery Optimization logs. ```powershell -powershell Get-DeliveryOptimizationLog -Flush | Set-Content C:\dosvc.log +Get-DeliveryOptimizationLog -Flush | Set-Content C:\dosvc.log ``` -```code -These two lines are together in verbose logs: +The below two lines are together in verbose logs: -2023-02-15T12:33:11.3811337Z 1514  1F4          {CGlobalConfigManager::GetGroupId} Using groupID = **** -2023-02-15T12:33:11.3811432Z 1514  1F4          {CGlobalConfigManager::GetGroupId} Hashed groupID = **** +```text +2023-02-15T12:33:11.3811337Z 1514 1F4 {CGlobalConfigManager::GetGroupId} Using groupID = **** +2023-02-15T12:33:11.3811432Z 1514 1F4 {CGlobalConfigManager::GetGroupId} Hashed groupID = **** ``` + ## Sample queries You can use the data in [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) @@ -100,7 +117,7 @@ and [UCDOStatus](wufb-reports-schema-ucdostatus.md) to create your own queries. ### Example UCDOAggregatedStatus table query -The following is the query used to display the total bandwidth savings % value: +The following query is used to display the total bandwidth savings % value: ```kusto UCDOAggregatedStatus| where TimeGenerated == _SnapshotTime @@ -108,9 +125,10 @@ UCDOAggregatedStatus| where TimeGenerated == _SnapshotTime | summarize LocalSources_BWSAV = round((sum(0.0 + LocalSourceBytes)/ sum(LocalSourceBytes+BytesFromCDN)) * 100.0 ,2) | extend Title = "BW SAV%" , SubTitle = "Local Sources" ``` + ### Example UCDOStatus table query -The following is the query used to display the Top 10 GroupIDs: +The following query is used to display the Top 10 GroupIDs: ```kusto UCDOStatus | where TimeGenerated == _SnapshotTime @@ -130,7 +148,7 @@ DeviceCount = count_distinct(GlobalDeviceId) by GroupID | top 10 by DeviceCount Data is available for the last 28 days. - **Data is showing as 'Unknown', what does that mean?** -You may see data in the report listed as 'Unknown'. This indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. +You may see data in the report listed as 'Unknown'. This status indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. - **How is the 'Top 10' groups identified?** The top groups are represented by the number of devices in a particular group, for any of the four group types (GroupID, City, Country, and ISP). From bb9640fe07070ad6637349aa882753304fe2db49 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 5 Apr 2023 10:14:07 -0700 Subject: [PATCH 26/41] edit --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 8ca32490b4..c565661410 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -6,7 +6,7 @@ ms.prod: windows-client author: mestew ms.author: mstewart ms.topic: article -ms.date: 03/27/2023 +ms.date: 04/05/2023 ms.technology: itpro-updates --- From 8c0e7981543053fe2d5972fdf7110d484a350c83 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 5 Apr 2023 11:14:20 -0700 Subject: [PATCH 27/41] edit --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index c565661410..9c8870a1f3 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -150,7 +150,7 @@ Data is available for the last 28 days. - **Data is showing as 'Unknown', what does that mean?** You may see data in the report listed as 'Unknown'. This status indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. -- **How is the 'Top 10' groups identified?** +- **How are the 'Top 10' groups identified?** The top groups are represented by the number of devices in a particular group, for any of the four group types (GroupID, City, Country, and ISP). - **The GroupIDs don't look familiar, why are they different?** From 6cd7023ab84de8b4c1aac60e2a7170ae28be8d1f Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Wed, 5 Apr 2023 13:18:59 -0600 Subject: [PATCH 28/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 9c8870a1f3..bd71d69452 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -36,11 +36,11 @@ Windows Update for Business reports uses the following Delivery Optimization ter - HTTP Only (0) - Simple Mode (99) - Bypass (100), deprecated in Windows 11 -- **Bandwidth savings**: Out of the total consumed bandwidth, the percentage of bandwidth that was downloaded from either LAN or Group peers, and from Microsoft Connected Cache (MCC) +- **Bandwidth savings**: The percentage of bandwidth that was downloaded from alternate sources (Peers or Microsoft Connected Cache (MCC) out of the total amount of data downloaded. - If bandwidth savings are <= 60%, a *Warning* icon is displayed - When bandwidth savings are <10%, an *Error* icon is displayed. - **Configurations**: Based on the DownloadMode configuration set via MDM, Group Policy, or end-user via the user interface. -- **P2P Device Count**: The device count is determined by the number of devices that have received bytes from peers, for supported content types. +- **P2P Device Count**: The device count is determined by the number of devices configured to use peering. - **Microsoft Connected Cache (MCC)**: Microsoft Connected Cache is a software-only caching solution that delivers Microsoft content. For more information, see [Microsoft Connected Cache overview](../do/waas-microsoft-connected-cache.md). - **MCC Device Count**: The device count is determined by the number of devices that have received bytes from the cache server, for supported content types. - **Total # of Devices**: The total number of devices with activity in last 28 days. @@ -57,19 +57,19 @@ There are several calculated values that appear on the Delivery Optimization rep **Efficiency (%) Calculations**: -- Bandwidth Savings (BW SAV%) = (BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ -(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) * 100.0 +- Bandwidth Savings (BW SAV%) = 100 * (BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ +(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table -- % P2P Efficiency = (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 +- % P2P Efficiency = 100 * (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table -- % MCC Efficiency = BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) * 100 +- % MCC Efficiency = 100 * BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table **Bytes Calculations**: - TotalBytes = BytesFromCDN + BytesFromEnterpriseCache + BytesFromPeers + BytesFromGroupPeers - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table -- BytesFromCDN = BytesFromCDN - BytesFromEnterpriseCache +- BytesFromCDN = BytesFromCDN - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table - BytesFromPeers = BytesFromLAN - [UCDOAggregatedStatus](wufb-reports-schema-ucdoaggregatedstatus.md) table @@ -145,7 +145,7 @@ DeviceCount = count_distinct(GlobalDeviceId) by GroupID | top 10 by DeviceCount ## Frequency Asked Questions - **What time period does the Delivery Optimization data include?** -Data is available for the last 28 days. +Data is generated/aggregated for the last 28 days for active devices. - **Data is showing as 'Unknown', what does that mean?** You may see data in the report listed as 'Unknown'. This status indicates that the Delivery Optimization DownloadMode setting is either invalid or empty. From f71d93896e537e2dfeac4d8f9ce468f857d02bbc Mon Sep 17 00:00:00 2001 From: Carmen Forsmann Date: Wed, 5 Apr 2023 13:55:49 -0600 Subject: [PATCH 29/41] Update wufb-reports-do.md --- windows/deployment/update/wufb-reports-do.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index bd71d69452..5cef2d60c9 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -57,12 +57,12 @@ There are several calculated values that appear on the Delivery Optimization rep **Efficiency (%) Calculations**: -- Bandwidth Savings (BW SAV%) = 100 * (BytesFromPeers + BytesFromGroupPeers + BytesFromCache)/ +- Bandwidth Savings (BW SAV%) = 100 * (BytesFromPeers + BytesFromGroupPeers + BytesFromCache) / (BytesFromPeers + BytesFromGroupPeers+BytesFromCDN + BytesFromCache) - [UCDOAggregatedStatus](wufb-reports-schema-ucdostatus.md) table -- % P2P Efficiency = 100 * (BytesFromPeers + BytesFromGroupPeers)/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) +- % P2P Efficiency = 100 * (BytesFromPeers + BytesFromGroupPeers) / (BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table -- % MCC Efficiency = 100 * BytesFromCache/(BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) +- % MCC Efficiency = 100 * BytesFromCache / (BytesFromPeers + BytesFromGroupPeers+BytesFromCDN+BytesFromCache) - [UCDOStatus](wufb-reports-schema-ucdostatus.md) table **Bytes Calculations**: From bde1893813b600750b547b56ae5aa2eaa28f375e Mon Sep 17 00:00:00 2001 From: Sriraman M S <45987684+msbemba@users.noreply.github.com> Date: Tue, 11 Apr 2023 18:39:52 +0530 Subject: [PATCH 30/41] Update bypass-traverse-checking.md Made changes as per the author removed users from ### Countermeasure fixes https://github.com/MicrosoftDocs/windows-itpro-docs/issues/9737 --- .../security-policy-settings/bypass-traverse-checking.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/bypass-traverse-checking.md b/windows/security/threat-protection/security-policy-settings/bypass-traverse-checking.md index ccdce7a3f5..f401dbbe3c 100644 --- a/windows/security/threat-protection/security-policy-settings/bypass-traverse-checking.md +++ b/windows/security/threat-protection/security-policy-settings/bypass-traverse-checking.md @@ -89,7 +89,7 @@ The default configuration for the **Bypass traverse checking** setting is to all ### Countermeasure -Organizations that are concerned about security may want to remove the Everyone group, and perhaps the Users group, from the list of groups that have the **Bypass traverse checking** user right. Taking explicit control over traversal assignments can be an effective way to limit access to sensitive information. Access–based enumeration can also be used. If you use access–based enumeration, users can't see any folder or file to which they don't have access. For more info about this feature, see [Access-based Enumeration](/previous-versions/windows/it-pro/windows-server-2003/cc784710(v=ws.10)). +Organizations that are concerned about security may want to remove the Everyone group from the list of groups that have the **Bypass traverse checking** user right. Taking explicit control over traversal assignments can be an effective way to limit access to sensitive information. Access–based enumeration can also be used. If you use access–based enumeration, users can't see any folder or file to which they don't have access. For more info about this feature, see [Access-based Enumeration](/previous-versions/windows/it-pro/windows-server-2003/cc784710(v=ws.10)). ### Potential impact From 9cbdfad6cd6f40ebe77402459df940e41154b172 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 11 Apr 2023 10:43:19 -0400 Subject: [PATCH 31/41] Refreshed PS module --- education/windows/configure-aad-google-trust.md | 5 +++-- education/windows/federated-sign-in.md | 11 ++++++++--- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/education/windows/configure-aad-google-trust.md b/education/windows/configure-aad-google-trust.md index d96b7414ca..087db4abca 100644 --- a/education/windows/configure-aad-google-trust.md +++ b/education/windows/configure-aad-google-trust.md @@ -69,10 +69,11 @@ Now that the app is configured, you must enable it for the users in Google Works ## Configure Azure AD as a Service Provider (SP) for Google Workspace The configuration of Azure AD consists of changing the authentication method for the custom DNS domains. This configuration can be done using PowerShell.\ -Using the **IdP metadata** XML file downloaded from Google Workspace, modify the *$DomainName* variable of the following script to match your environment, and then run it in an elevated PowerShell session. When prompted to authenticate to Azure AD, use the credentials of an account with the *Global Administrator* role. +Using the **IdP metadata** XML file downloaded from Google Workspace, modify the *$DomainName* variable of the following script to match your environment, and then run it in a PowerShell session. When prompted to authenticate to Azure AD, use the credentials of an account with the *Global Administrator* role. ```powershell -Install-Module Microsoft.Graph +Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser -Force +Install-Module Microsoft.Graph -Scope CurrentUser Import-Module Microsoft.Graph $domainId = "" diff --git a/education/windows/federated-sign-in.md b/education/windows/federated-sign-in.md index 7eccc722a0..326c71ca59 100644 --- a/education/windows/federated-sign-in.md +++ b/education/windows/federated-sign-in.md @@ -1,7 +1,7 @@ --- title: Configure federated sign-in for Windows devices description: Description of federated sign-in feature for the Education SKUs of Windows 11 and how to configure it via Intune or provisioning packages. -ms.date: 04/04/2023 +ms.date: 04/11/2023 ms.topic: how-to appliesto: - ✅ Windows 11 @@ -146,11 +146,16 @@ In a scenario where a user is federated and you want to change the ImmutableId, Here's a PowerShell example to update the ImmutableId for a federated user: ```powershell +Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser -Force +Install-Module Microsoft.Graph -Scope CurrentUser +Import-Module Microsoft.Graph +Connect-MgGraph -Scopes 'User.Read.All', 'User.ReadWrite.All' + #1. Convert the user from federated to cloud-only -Get-AzureADUser -SearchString alton@example.com | Set-AzureADUser -UserPrincipalName alton@example.onmicrosoft.com +Update-MgUser -UserId alton@example.com -UserPrincipalName alton@example.onmicrosoft.com #2. Convert the user back to federated, while setting the immutableId -Get-AzureADUser -SearchString alton@example.onmicrosoft.com | Set-AzureADUser -UserPrincipalName alton@example.com -ImmutableId '260051' +Update-MgUser -UserId alton@example.onmicrosoft.com -UserPrincipalName alton@example.com -OnPremisesImmutableId '260051' ``` ## Troubleshooting From 32eb6dcbe479d56d6f24334369fe66f66cdf7fd2 Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Tue, 11 Apr 2023 08:34:29 -0700 Subject: [PATCH 32/41] Updated with MC538728 --- .../whats-new/windows-autopatch-whats-new-2023.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md index 576eade6e5..22a90e7d70 100644 --- a/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md +++ b/windows/deployment/windows-autopatch/whats-new/windows-autopatch-whats-new-2023.md @@ -1,7 +1,7 @@ --- title: What's new 2023 description: This article lists the 2023 feature releases and any corresponding Message center post numbers. -ms.date: 04/04/2023 +ms.date: 04/11/2023 ms.prod: windows-client ms.technology: itpro-updates ms.topic: whats-new @@ -24,6 +24,7 @@ Minor corrections such as typos, style, or formatting issues aren't listed. | Message center post number | Description | | ----- | ----- | +| [MC538728](https://admin.microsoft.com/adminportal/home#/MessageCenter) | Update: Windows Autopatch quality updates release communication | | [MC536881](https://admin.microsoft.com/adminportal/home#/MessageCenter) | Take action: Review Windows Autopatch Tenant management blade for potential action required to prevent inactive status | ## March 2023 From 4a63ab5bc3e919c872280ba8e0eac05b929c3aec Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Tue, 11 Apr 2023 13:20:06 -0700 Subject: [PATCH 33/41] removed note --- .../operate/windows-autopatch-support-request.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-support-request.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-support-request.md index c4a87a93ba..29e95ec21f 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-support-request.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-support-request.md @@ -39,9 +39,6 @@ If you have a **Premier** or **Unified** support contract, when you submit a new Depending on your support contract, the following severity options are available: -> [!NOTE] -> Selecting either severity **A** or **Critical** issue limits you to a phone support case. This is the fastest support option. - | Support contract | Severity options | | ----- | ----- | | Premier | Severity A, B or C | From 7c6db515fe99a7ca73069c2607e5b85aaba9920b Mon Sep 17 00:00:00 2001 From: "Yong Rhee [MSFT]" <56358587+YongRhee-MSFT@users.noreply.github.com> Date: Wed, 12 Apr 2023 06:57:39 -0700 Subject: [PATCH 34/41] Update defender-csp.md Adding info about MDMWinsOverGP not being relevant for the Defender CSP. MDMWinsOverGP only applies to the Windows Client Management CSP. --- windows/client-management/mdm/defender-csp.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index fe160a4fe0..3f2a9eadaa 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -20,6 +20,10 @@ ms.topic: reference +> [!NOTE] +> [ControlPolicyConflict (MDMWinsOverGP)](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict) is not applicable to the Defender CSP. +> If using a MDM, you will want to clean up your current Defender Group Policy (GPO) settings in order to not conflict with your MDM settings. + The following list shows the Defender configuration service provider nodes: From 0ecd9deff88d32decd9ee70d9f85834050445a78 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Wed, 12 Apr 2023 10:09:14 -0400 Subject: [PATCH 35/41] Update defender-csp.md Move the note inside editable section --- windows/client-management/mdm/defender-csp.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 3f2a9eadaa..5d33d60e48 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -18,11 +18,9 @@ ms.topic: reference - - > [!NOTE] -> [ControlPolicyConflict (MDMWinsOverGP)](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict) is not applicable to the Defender CSP. -> If using a MDM, you will want to clean up your current Defender Group Policy (GPO) settings in order to not conflict with your MDM settings. +> [ControlPolicyConflict (MDMWinsOverGP)](policy-csp-controlpolicyconflict.md) is not applicable to the Defender CSP. If using MDM, remove your current Defender group policy settings to avoid conflicts with your MDM settings. + The following list shows the Defender configuration service provider nodes: From a86ec42861a2a437e6ba84044ec5151b559361ff Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Wed, 12 Apr 2023 10:14:49 -0400 Subject: [PATCH 36/41] Update policy-csp-controlpolicyconflict.md --- .../mdm/policy-csp-controlpolicyconflict.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index b6865f7b07..4d9b9ad115 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -44,15 +44,14 @@ If set to 1 then any MDM policy that is set that has an equivalent GP policy wil > [!NOTE] -> MDMWinsOverGP only applies to policies in Policy CSP. MDM policies win over Group Policies where applicable; not all Group Policies are available via MDM or CSP. It does not apply to other MDM settings with equivalent GP settings that are defined in other CSPs. -This policy is used to ensure that MDM policy wins over GP when policy is configured on MDM channel. -The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1. +> MDMWinsOverGP only applies to policies in Policy CSP. MDM policies win over Group Policies where applicable; not all Group Policies are available via MDM or CSP. It does not apply to other MDM settings with equivalent GP settings that are defined in other CSPs such as the [Defender CSP](defender-csp.md). + +This policy is used to ensure that MDM policy wins over GP when policy is configured on MDM channel. The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1. > [!NOTE] > This policy doesn't support the Delete command and doesn’t support setting the value to 0 again after it was previously set to 1. Windows 10 version 1809 will support using the Delete command to set the value to 0 again, if it was previously set to 1. -The policy should be set at every sync to ensure the device removes any settings that conflict with MDM just as it does on the very first set of the policy. -This ensures that: +The policy should be set at every sync to ensure the device removes any settings that conflict with MDM just as it does on the very first set of the policy. This ensures that: - GP settings that correspond to MDM applied settings aren't conflicting - The current Policy Manager policies are refreshed from what MDM has set @@ -65,8 +64,7 @@ The [Policy DDF](configuration-service-provider-ddf.md) contains the following t - \ - \ -For the list MDM-GP mapping list, see [Policies in Policy CSP supported by Group Policy -](./policies-in-policy-csp-supported-by-group-policy.md). +For the list MDM-GP mapping list, see [Policies in Policy CSP supported by Group Policy](./policies-in-policy-csp-supported-by-group-policy.md). The MDM Diagnostic report shows the applied configurations states of a device including policies, certificates, configuration sources, and resource information. The report includes a list of blocked GP settings because MDM equivalent is configured, if any. To get the diagnostic report, go to **Settings** > **Accounts** > **Access work or school** > and then click the desired work or school account. Scroll to the bottom of the page to **Advanced Diagnostic Report** and then click **Create Report**. From d4f3b5663416395a485f800eb9b0bae6e5d49d5a Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 12 Apr 2023 19:49:42 +0530 Subject: [PATCH 37/41] reanmed Password Policy as per user report #11435 , i changed from **Password Policy** to **Account Lockout Policy** --- .../security-policy-settings/account-lockout-duration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md b/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md index 969423ed4a..713bd9297b 100644 --- a/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md +++ b/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md @@ -44,7 +44,7 @@ It's advisable to set **Account lockout duration** to approximately 15 minutes. ### Location -**Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Password Policy** +**Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Account Lockout Policy** ### Default values From a1585564c29ed28baead785324ed5234d9f51342 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 12 Apr 2023 19:59:10 +0530 Subject: [PATCH 38/41] updated link as per user report #11450,so i updated new link **https://techcommunity.microsoft.com/t5/microsoft-security-baselines/bg-p/Microsoft-Security-Baselines** --- .../windows-security-baselines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md index 5220f9868b..238193ef00 100644 --- a/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md +++ b/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines.md @@ -75,6 +75,6 @@ There are several ways to get and use security baselines: ## See also -- [Microsoft Security Guidance Blog](/archive/blogs/secguide/) +- [Microsoft Security Baselines Blog](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/bg-p/Microsoft-Security-Baselines) - [Microsoft Security Compliance Toolkit](https://www.microsoft.com/download/details.aspx?id=55319) - [Security Baseline Policy Analyzer](https://learn-video.azurefd.net/vod/player?show=defrag-tools&ep=174-security-baseline-policy-analyzer-lgpo) From 309999997aa80fff72cb8c33f9cce33e60df7b90 Mon Sep 17 00:00:00 2001 From: Stephanie Savell <101299710+v-stsavell@users.noreply.github.com> Date: Wed, 12 Apr 2023 10:08:31 -0500 Subject: [PATCH 39/41] Update defender-csp.md Acro edits. --- windows/client-management/mdm/defender-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 5d33d60e48..7550924275 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -2481,7 +2481,7 @@ Information about the current status of the threat. The following list shows the | 7 | Removed | | 8 | Cleaned | | 9 | Allowed | -| 10 | No Status ( Cleared) | +| 10 | No Status (Cleared) | @@ -3676,7 +3676,7 @@ OfflineScan action starts a Microsoft Defender Offline scan on the computer wher -RollbackEngine action rolls back Microsoft Defender engine to it's last known good saved version on the computer where you run the command. +RollbackEngine action rolls back Microsoft Defender engine to its last known good saved version on the computer where you run the command. From b412f3a0d20cdb11d23a0515e3354a1631e66da3 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 12 Apr 2023 08:36:41 -0700 Subject: [PATCH 40/41] metadata --- windows/deployment/update/wufb-reports-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/wufb-reports-do.md b/windows/deployment/update/wufb-reports-do.md index 9c8870a1f3..7171a19511 100644 --- a/windows/deployment/update/wufb-reports-do.md +++ b/windows/deployment/update/wufb-reports-do.md @@ -6,7 +6,7 @@ ms.prod: windows-client author: mestew ms.author: mstewart ms.topic: article -ms.date: 04/05/2023 +ms.date: 04/12/2023 ms.technology: itpro-updates --- From 9216be37617a760feada8a9aa5f3f21c5f074189 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 12 Apr 2023 09:28:02 -0700 Subject: [PATCH 41/41] metadata, links --- windows/deployment/update/wufb-reports-workbook.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/wufb-reports-workbook.md b/windows/deployment/update/wufb-reports-workbook.md index 279be81249..53396697ce 100644 --- a/windows/deployment/update/wufb-reports-workbook.md +++ b/windows/deployment/update/wufb-reports-workbook.md @@ -6,7 +6,7 @@ ms.prod: windows-client author: mestew ms.author: mstewart ms.topic: article -ms.date: 11/15/2022 +ms.date: 04/12/2023 ms.technology: itpro-updates --- @@ -173,7 +173,7 @@ The **Device status** group for driver updates contains the following items: ## Delivery Optimization -The **Delivery Optimization** tab provides a summarized view of bandwidth efficiencies. This new revised report also includes [Microsoft Connected Cache](/windows/deployment/do/waas-microsoft-connected-cache) information. +The **Delivery Optimization** tab provides a summarized view of bandwidth efficiencies. This new revised report also includes [Microsoft Connected Cache](/windows/deployment/do/waas-microsoft-connected-cache) information. For more information, see [Delivery Optimization data in Windows Update for Business reports](/windows/deployment/update/waas-delivery-optimization). At the top of the report, tiles display the following information: