mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-16 02:43:43 +00:00
Merge remote-tracking branch 'refs/remotes/origin/rs3' into jd3csp
This commit is contained in:
jdeckerMS
@ -300,4 +300,4 @@ The resulting taskbar for computers in any other country region:
|
||||
- [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
|
||||
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
@ -35,6 +35,8 @@ Use this article to make informed decisions about how you might configure teleme
|
||||
|
||||
We are always striving to improve our documentation and welcome your feedback. You can provide feedback by contacting telmhelp@microsoft.com.
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
## Overview
|
||||
|
||||
In previous versions of Windows and Windows Server, Microsoft used telemetry to check for updated or new Windows Defender signatures, check whether Windows Update installations were successful, gather reliability information through the Reliability Analysis Component (RAC), and gather reliability information through the Windows Customer Experience Improvement Program (CEIP) on Windows. In Windows 10 and Windows Server 2016, you can control telemetry streams by using the Privacy option in Settings, Group Policy, or MDM.
|
||||
@ -409,3 +411,5 @@ TechNet
|
||||
Web Pages
|
||||
|
||||
- [Privacy at Microsoft](http://privacy.microsoft.com)
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Set up and test Cortana with Microsoft Dynamics CRM (Preview feature) in your organization
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Send feedback about Cortana at work back to Microsoft
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Set up and test Cortana with Office 365 in your organization
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Cortana integration in your business or enterprise
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Use Group Policy and mobile device management (MDM) settings to configure Cortana in your organization
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Set up and test Cortana for Power BI in your organization
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 1 - Sign-in to Azure AD and use Cortana to manage the notebook
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 2 - Perform a quick search with Cortana at work
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 3 - Set a reminder for a specific location using Cortana at work
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 4 - Use Cortana at work to find your upcoming meetings
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 5 - Use Cortana to send email to a co-worker
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 6 - Review a reminder suggested by Cortana based on what you’ve promised in email
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Test scenario 7 - Use Cortana and Windows Information Protection (WIP) to help protect your organization’s data on a device
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Testing scenarios using Cortana in your business or organization
|
||||
|
||||
@ -6,6 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: eross-msft
|
||||
ms.localizationpriority: high
|
||||
ms.author: lizross
|
||||
---
|
||||
|
||||
# Set up and test custom voice commands in Cortana for your organization
|
||||
|
||||
@ -170,7 +170,7 @@ If the Start layout is applied by Group Policy or MDM, and the policy is removed
|
||||
- [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
|
||||
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
|
||||
@ -63,9 +63,6 @@ Three features enable Start and taskbar layout control:
|
||||
|
||||
To apply the Start and taskbar layout to users in a domain, use the Group Policy Management Console (GPMC) to configure a domain-based Group Policy Object (GPO) that sets **Start Layout** policy settings in the **Start Menu and Taskbar** administrative template for users in a domain.
|
||||
|
||||
>[!IMPORTANT]
|
||||
>In Windows 10, version 1709, Edge is pinned to the desktop automatically during Windows 10 installation or upgrade. When you apply a custom Start layout using this policy, Edge will not be pinned to the desktop.
|
||||
|
||||
The GPO applies the Start and taskbar layout at the next user sign-in. Each time the user signs in, the timestamp of the .xml file with the Start and taskbar layout is checked and if a newer version of the file is available, the settings in the latest version of the file are applied.
|
||||
|
||||
The GPO can be configured from any computer on which the necessary ADMX and ADML files (StartMenu.admx and StartMenu.adml) for Windows 10 are installed.
|
||||
@ -133,7 +130,7 @@ After you use Group Policy to apply a customized Start and taskbar layout on a c
|
||||
- [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
|
||||
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 4.4 KiB After Width: | Height: | Size: 11 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 42 KiB After Width: | Height: | Size: 38 KiB |
@ -23,7 +23,7 @@ ms.author: jdecker
|
||||
A [kiosk device](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) typically runs a single app, and users are prevented from accessing any features or functions on the device outside of the kiosk app. In Windows 10, version 1709, the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp) has been expanded to make it easy for administrators to create kiosks that run more than one app. You can configure multi-app kiosks using a provisioning package.
|
||||
|
||||
>[!NOTE]
|
||||
>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk. Avoid applying AppLocker rules to devices running the multi-app kiosk configuration described in this topic.
|
||||
>For devices running versions of Windows 10 earlier than version 1709, you can [create AppLocker rules](lock-down-windows-10-applocker.md) to configure a multi-app kiosk.
|
||||
|
||||
The benefit of a multi-app kiosk, or fixed-purpose device, is to provide an easy-to-understand experience for individuals by putting in front of them only the things they need to use, and removing from their view the things they don’t need to access.
|
||||
|
||||
@ -40,7 +40,7 @@ If you don't want to use a provisioning package, you can deploy the configuratio
|
||||
|
||||
## Prerequisites
|
||||
|
||||
- (latest version of WCD -- is Store version okay at GA?)
|
||||
- Windows Configuration Designer (Windows 10, version 1709)
|
||||
- The kiosk device must be running Windows 10 (S, Pro, Enterprise, or Education), version 1709
|
||||
|
||||
|
||||
@ -361,7 +361,7 @@ Provisioning packages can be applied to a device during the first-run experience
|
||||
|
||||
Multi-app kiosk mode is enabled by the [AssignedAccess configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/assignedaccess-csp). Your MDM policy can contain the assigned access configuration XML.
|
||||
|
||||
If your test device is enrolled with a MDM server which supports applying the assigned access configuration, you can use it to apply the setting remotely.
|
||||
If your device is enrolled with a MDM server which supports applying the assigned access configuration, you can use it to apply the setting remotely.
|
||||
|
||||
The OMA-URI for multi-app policy is `./Device/Vendor/MSFT/AssignedAccess/Configuration`.
|
||||
|
||||
@ -573,7 +573,7 @@ Remove Task Manager | Enabled
|
||||
Remove Change Password option in Security Options UI | Enabled
|
||||
Remove Sign Out option in Security Options UI | Enabled
|
||||
Remove All Programs list from the Start Menu | Enabled – Remove and disable setting
|
||||
Prevent access to drives from My Computer | Enabled - Restrict all drivers
|
||||
Prevent access to drives from My Computer | Enabled - Restrict all drivers</br></br>**Note:** Users can browse the directory structure in File Explorer, but they cannot open folders and access the contents. Also, they cannot use the **Run** dialog box or the **Map Network Drive** dialog box to view the directories on these drives. The icons representing the specified drives still appear in File Explorer, but if users double-click the icons, a message appears expalining that a setting prevents the action. This setting does not prevent users from using programs to access local and network drives. It does not prevent users from using the Disk Management snap-in to view and change drive characteristics.
|
||||
|
||||
|
||||
|
||||
|
||||
@ -31,6 +31,8 @@ To help make it easier to deploy settings to restrict connections from Windows 1
|
||||
|
||||
We are always striving to improve our documentation and welcome your feedback. You can provide feedback by contacting telmhelp@microsoft.com.
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
## What's new in Windows 10, version 1703
|
||||
|
||||
Here's a list of changes that were made to this article for Windows 10, version 1703:
|
||||
@ -71,7 +73,7 @@ See the following table for a summary of the management settings for Windows 10
|
||||
|
||||
| Setting | UI | Group Policy | MDM policy | Registry | Command line |
|
||||
| - | :-: | :-: | :-: | :-: | :-: |
|
||||
| [1. Certificate trust lists](#certificate-trust-lists) | |  | | | |
|
||||
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) | |  | | | |
|
||||
| [2. Cortana and Search](#bkmk-cortana) |  |  |  |  |  |
|
||||
| [3. Date & Time](#bkmk-datetime) |  |  | |  | |
|
||||
| [4. Device metadata retrieval](#bkmk-devinst) | |  | |  | |
|
||||
@ -100,13 +102,14 @@ See the following table for a summary of the management settings for Windows 10
|
||||
| [17.10 Call history](#bkmk-priv-callhistory) |  |  |  |  | |
|
||||
| [17.11 Email](#bkmk-priv-email) |  |  |  |  | |
|
||||
| [17.12 Messaging](#bkmk-priv-messaging) |  |  |  |  | |
|
||||
| [17.13 Radios](#bkmk-priv-radios) |  |  |  |  | |
|
||||
| [17.14 Other devices](#bkmk-priv-other-devices) |  |  |  |  | |
|
||||
| [17.15 Feedback & diagnostics](#bkmk-priv-feedback) |  |  |  |  | |
|
||||
| [17.16 Background apps](#bkmk-priv-background) |  |  |  | | |
|
||||
| [17.17 Motion](#bkmk-priv-motion) |  |  |  |  | |
|
||||
| [17.18 Tasks](#bkmk-priv-tasks) |  |  |  |  | |
|
||||
| [17.19 App Diagnostics](#bkmk-priv-diag) |  |  |  |  | |
|
||||
| [17.13 Phone calls](#bkmk-priv-phone-calls) |  |  |  |  | |
|
||||
| [17.14 Radios](#bkmk-priv-radios) |  |  |  |  | |
|
||||
| [17.15 Other devices](#bkmk-priv-other-devices) |  |  |  |  | |
|
||||
| [17.16 Feedback & diagnostics](#bkmk-priv-feedback) |  |  |  |  | |
|
||||
| [17.17 Background apps](#bkmk-priv-background) |  |  |  | | |
|
||||
| [17.18 Motion](#bkmk-priv-motion) |  |  |  |  | |
|
||||
| [17.19 Tasks](#bkmk-priv-tasks) |  |  |  |  | |
|
||||
| [17.20 App Diagnostics](#bkmk-priv-diag) |  |  |  |  | |
|
||||
| [18. Software Protection Platform](#bkmk-spp) | |  |  |  | |
|
||||
| [19. Sync your settings](#bkmk-syncsettings) |  |  |  |  | |
|
||||
| [20. Teredo](#bkmk-teredo) | |  | |  |  |
|
||||
@ -124,7 +127,7 @@ See the following table for a summary of the management settings for Windows Ser
|
||||
|
||||
| Setting | UI | Group Policy | Registry | Command line |
|
||||
| - | :-: | :-: | :-: | :-: |
|
||||
| [1. Certificate trust lists](#certificate-trust-lists) | |  |  | |
|
||||
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) | |  |  | |
|
||||
| [2. Cortana and Search](#bkmk-cortana) |  |  |  | |
|
||||
| [3. Date & Time](#bkmk-datetime) |  |  |  | |
|
||||
| [4. Device metadata retrieval](#bkmk-devinst) | |  |  | |
|
||||
@ -150,7 +153,7 @@ See the following table for a summary of the management settings for Windows Ser
|
||||
|
||||
| Setting | Group Policy | Registry | Command line |
|
||||
| - | :-: | :-: | :-: | :-: | :-: |
|
||||
| [1. Certificate trust lists](#certificate-trust-lists) |  |  | |
|
||||
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) |  |  | |
|
||||
| [3. Date & Time](#bkmk-datetime) |  |  | |
|
||||
| [6. Font streaming](#font-streaming) |  |  | |
|
||||
| [13. Network Connection Status Indicator](#bkmk-ncsi) |  | | |
|
||||
@ -165,7 +168,7 @@ See the following table for a summary of the management settings for Windows Ser
|
||||
|
||||
| Setting | Registry | Command line |
|
||||
| - | :-: | :-: | :-: | :-: | :-: |
|
||||
| [1. Certificate trust lists](#certificate-trust-lists) |  | |
|
||||
| [1. Automatic Root Certificates Update](#automatic-root-certificates-update) |  | |
|
||||
| [3. Date & Time](#bkmk-datetime) |  | |
|
||||
| [20. Teredo](#bkmk-teredo) | |  |
|
||||
| [27. Windows Update](#bkmk-wu) |  | |
|
||||
@ -174,16 +177,15 @@ See the following table for a summary of the management settings for Windows Ser
|
||||
|
||||
Use the following sections for more information about how to configure each setting.
|
||||
|
||||
### <a href="" id="certificate-trust-lists"></a>1. Certificate trust lists
|
||||
### <a href="" id="automatic-root-certificates-update"></a>1. Automatic Root Certificates Update
|
||||
|
||||
A certificate trust list is a predefined list of items, such as a list of certificate hashes or a list of file name, that are signed by a trusted entity. Windows automatically downloads an updated certificate trust list when it is available.
|
||||
|
||||
To turn off the automatic download of an updated certificate trust list, you can turn off automatic root updates, which also includes the disallowed certificate list and the pin rules list.
|
||||
The Automatic Root Certificates Update component is designed to automatically check the list of trusted authorities on Windows Update to see if an update is available.
|
||||
For more information, see [Automatic Root Certificates Update Configuration](https://technet.microsoft.com/library/cc733922.aspx).
|
||||
Although not recommended, you can turn off Automatic Root Certificates Update, which also prevents updates to the disallowed certificate list and the pin rules list.
|
||||
|
||||
> [!CAUTION]
|
||||
> By not automatically downloading the root certificates, the device might have not be able to connect to some websites.
|
||||
|
||||
|
||||
For Windows 10, Windows Server 2016 with Desktop Experience, and Windows Server 2016 Server Core:
|
||||
|
||||
- Enable the Group Policy: **Computer Configuration** > **Administrative Templates** > **System** > **Internet Communication Management** > **Internet Communication Settings** > **Turn off Automatic Root Certificates Update**
|
||||
@ -1267,7 +1269,38 @@ To turn off **Choose apps that can read or send messages**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-radios"></a>17.13 Radios
|
||||
### <a href="" id="bkmk-priv-phone-calls"></a>17.13 Phone calls
|
||||
|
||||
In the **Phone calls** area, you can choose which apps can make phone calls.
|
||||
|
||||
To turn off **Let apps make phone calls**:
|
||||
|
||||
- Turn off the feature in the UI.
|
||||
|
||||
-or-
|
||||
|
||||
- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **App Privacy** > **Let Windows apps make phone calls**
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
-or-
|
||||
|
||||
- Apply the Privacy/LetAppsAccessPhone MDM policy from the [Policy CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-privacy#privacy-letappsaccessphone), where:
|
||||
|
||||
- **0**. User in control
|
||||
- **1**. Force allow
|
||||
- **2**. Force deny
|
||||
|
||||
-or-
|
||||
|
||||
- Create a REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\Policies\\Microsoft\\Windows\\AppPrivacy!LetAppsAccessPhone**, with a value of 2 (two).
|
||||
|
||||
|
||||
To turn off **Choose apps that can make phone calls**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-radios"></a>17.14 Radios
|
||||
|
||||
In the **Radios** area, you can choose which apps can turn a device's radio on or off.
|
||||
|
||||
@ -1298,7 +1331,7 @@ To turn off **Choose apps that can control radios**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-other-devices"></a>17.14 Other devices
|
||||
### <a href="" id="bkmk-priv-other-devices"></a>17.15 Other devices
|
||||
|
||||
In the **Other Devices** area, you can choose whether devices that aren't paired to PCs, such as an Xbox One, can share and sync info.
|
||||
|
||||
@ -1332,7 +1365,7 @@ To turn off **Let your apps use your trusted devices (hardware you've already co
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
### <a href="" id="bkmk-priv-feedback"></a>17.15 Feedback & diagnostics
|
||||
### <a href="" id="bkmk-priv-feedback"></a>17.16 Feedback & diagnostics
|
||||
|
||||
In the **Feedback & Diagnostics** area, you can choose how often you're asked for feedback and how much diagnostic and usage information is sent to Microsoft.
|
||||
|
||||
@ -1417,7 +1450,7 @@ To turn off tailored experiences with relevant tips and recommendations by using
|
||||
|
||||
- Apply the Group Policy: **User Configuration** > **Administrative Templates** > **Windows Components** > **Cloud Content** > **Do not use diagnostic data for tailored experiences**
|
||||
|
||||
### <a href="" id="bkmk-priv-background"></a>17.16 Background apps
|
||||
### <a href="" id="bkmk-priv-background"></a>17.17 Background apps
|
||||
|
||||
In the **Background Apps** area, you can choose which apps can run in the background.
|
||||
|
||||
@ -1440,7 +1473,7 @@ To turn off **Let apps run in the background**:
|
||||
- **2**. Force deny
|
||||
|
||||
|
||||
### <a href="" id="bkmk-priv-motion"></a>17.17 Motion
|
||||
### <a href="" id="bkmk-priv-motion"></a>17.18 Motion
|
||||
|
||||
In the **Motion** area, you can choose which apps have access to your motion data.
|
||||
|
||||
@ -1464,7 +1497,7 @@ To turn off **Let Windows and your apps use your motion data and collect motion
|
||||
|
||||
- Create a REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\Policies\\Microsoft\\Windows\\AppPrivacy!LetAppsAccessMotion**, with a value of 2 (two).
|
||||
|
||||
### <a href="" id="bkmk-priv-tasks"></a>17.18 Tasks
|
||||
### <a href="" id="bkmk-priv-tasks"></a>17.19 Tasks
|
||||
|
||||
In the **Tasks** area, you can choose which apps have access to your tasks.
|
||||
|
||||
@ -1486,7 +1519,7 @@ To turn this off:
|
||||
- **1**. Force allow
|
||||
- **2**. Force deny
|
||||
|
||||
### <a href="" id="bkmk-priv-diag"></a>17.19 App Diagnostics
|
||||
### <a href="" id="bkmk-priv-diag"></a>17.20 App Diagnostics
|
||||
|
||||
In the **App diagnostics** area, you can choose which apps have access to your diagnostic information.
|
||||
|
||||
|
||||
@ -33,11 +33,7 @@ For example:
|
||||
1. [Verify that the provisioning package is applied successfully](lock-down-windows-10-to-specific-apps.md#validate-provisioning).
|
||||
2. Verify that the account (config) is mapped to a profile in the configuration XML file.
|
||||
3. Verify that the configuration XML file is authored and formatted correctly. Correct any configuration errors, then create and apply a new provisioning package. Sign out and sign in again to check the new configuration.
|
||||
4. If the issue persists, [capture traces](https://msdn.microsoft.com/library/windows/desktop/dn904629.aspx) for components with the following GUIDs:
|
||||
- 94097d3d-2a5a-5b8a-cdbd-194dd2e51a00
|
||||
- ab84611c-2678-5cd7-d292-c940f9be6c6d
|
||||
- f9f7f27c-5e5d-5273-468f-038e61965660
|
||||
- 3e8fb07b-3e10-5981-01a9-fbd924fd5436
|
||||
|
||||
|
||||
## Apps configured in AllowedList are blocked
|
||||
|
||||
@ -51,6 +47,3 @@ For example:
|
||||
- Check if the apps included in the Start layout are installed for the assigned access user.
|
||||
- Check if the shortcut exists on the target device, if a desktop app is missing on Start.
|
||||
|
||||
## Feedback
|
||||
|
||||
Feedback and bugs can be submitted in the Feedback Hub. You can use the [Problems Steps Recorder](https://support.microsoft.com/help/22878/windows-10-record-steps) to reproduce the issue, and attach the resulting .zip file to your feedback.
|
||||
@ -103,7 +103,7 @@ On devices running Windows 10, you can install [the Windows Configuration Design
|
||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
|
||||
@ -21,7 +21,7 @@ ms.localizationpriority: high
|
||||
|
||||
A single-use or *kiosk* device is easy to set up in Windows 10 for desktop editions.
|
||||
|
||||
- Use the [Provision kiosk devices wizard](#wizard) in Windows Configuration Designer (Windows 10, version 1607 or later) to create a provisioning package that configures a kiosk device running either a Universal Windows app or a Classic Windows application (Windows 10 Enterprise or Education only).
|
||||
- Use the [Provision kiosk devices wizard](#wizard) in Windows Configuration Designer (Windows 10, version 1607 or later) to create a provisioning package that configures a kiosk device running either a Universal Windows app or a Classic Windows application (Windows 10 Enterprise or Education only). In Windows 10, version 1709, you can use the [Provision kiosk devices wizard](#wizard) to configure a kiosk device running a Universal Windows app for Windows 10 Pro.
|
||||
|
||||
or
|
||||
|
||||
@ -85,8 +85,8 @@ Using assigned access, Windows 10 runs the designated Universal Windows app abo
|
||||
| Method | Account type | Windows 10 edition |
|
||||
| --- | --- | --- |
|
||||
| [Use Settings on the PC](#set-up-assigned-access-in-pc-settings) | Local standard | Pro, Enterprise, Education |
|
||||
| [Apply a mobile device management (MDM) policy](#set-up-assigned-access-in-mdm) | All (domain, local standard, local administrator, etc) | Enterprise, Education |
|
||||
| [Create a provisioning package using Windows Configuration Designer](#wizard) | All (domain, local standard, local administrator, etc) | Enterprise, Education |
|
||||
| [Apply a mobile device management (MDM) policy](#set-up-assigned-access-in-mdm) | All (domain, local standard, local administrator, etc) | Pro (1709 only), Enterprise, Education |
|
||||
| [Create a provisioning package using Windows Configuration Designer](#wizard) | All (domain, local standard, local administrator, etc) | Pro (1709 only), Enterprise, Education |
|
||||
| [Run a PowerShell script](#set-up-assigned-access-using-windows-powershell) | Local standard | Pro, Enterprise, Education |
|
||||
|
||||
|
||||
@ -432,6 +432,6 @@ For a more secure kiosk experience, we recommend that you make the following con
|
||||
|
||||
- [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](mobile-devices/set-up-a-kiosk-for-windows-10-for-mobile-edition.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
@ -114,7 +114,7 @@ If you're using Microsoft Store for Business and you want employees to only see
|
||||
|
||||
[Manage access to private store](/microsoft-store/manage-access-to-private-store)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
|
||||
@ -58,4 +58,6 @@ Use these settings to configure policies for shared PC mode.
|
||||
|
||||
## Related topics
|
||||
|
||||
- [Set up shared or guest PC](../set-up-shared-or-guest-pc.md)
|
||||
- [Set up shared or guest PC](../set-up-shared-or-guest-pc.md)
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
@ -111,7 +111,7 @@ The new taskbar layout for upgrades to Windows 10, version 1607 or later, will a
|
||||
- [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md)
|
||||
- [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
|
||||
@ -79,7 +79,7 @@ Pay attention to the checkbox in **Options**. In addition to providing the path
|
||||
|
||||
[Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md)
|
||||
|
||||
|
||||
Not finding content you need? Windows 10 users, tell us what you want on [Feedback Hub](feedback-hub:?tabid=2&contextid=897).
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user