diff --git a/education/windows/tutorial-school-deployment/configure-device-apps.md b/education/windows/tutorial-school-deployment/configure-device-apps.md index 89eb913446..a262adc8c4 100644 --- a/education/windows/tutorial-school-deployment/configure-device-apps.md +++ b/education/windows/tutorial-school-deployment/configure-device-apps.md @@ -1,7 +1,7 @@ --- title: Configure applications with Microsoft Intune description: Learn how to configure applications with Microsoft Intune in preparation for device deployment. -ms.date: 08/31/2022 +ms.date: 03/08/2023 ms.topic: tutorial appliesto: - ✅ Windows 10 and later @@ -56,21 +56,10 @@ To assign applications to a group of users or devices: ## Considerations for Windows 11 SE -Windows 11 SE supports all web applications and a *curated list* of desktop applications. -You can prepare and add a desktop app to Microsoft Intune as a Win32 app from the [approved app list][EDU-1]. +Windows 11 SE prevents the installation and execution of third party applications with a technology called **Windows Defender Application Control** (WDAC). +WDAC applies an *allowlist* policy, which ensures that unwanted apps don't run or get installed. However, it also prevents IT admins from deploying apps to Windows 11 SE devices, unless they're included in the E Mode policy. -The process to add Win32 applications to Intune is described in the article [Add, assign, and monitor a Win32 app in Microsoft Intune][MEM-1]. - -> [!NOTE] -> If the applications you need aren't included in the list, anyone in your school district can submit an application request at Microsoft Education Support. - -> [!CAUTION] -> If you assign an app to a device running **Windows 11 SE** and receive the **0x87D300D9** error code with a **Failed** state: -> - Be sure the app is on the [approved app list][EDU-1] -> - If you submitted a request to add your own app and it was approved, check that the app meets package requirements -> - If the app is not approved, it will not run on Windows 11 SE. In this case, you will have to verify if the app can run in a web browser, such as a web app or PWA - -________________________________________________________ +To learn more about which apps are supported in Windows 11 SE, and how to deploy them, see the tutorial [Deploy applications to Windows 11 SE with Intune][EDU-1]. ## Next steps @@ -81,7 +70,7 @@ With the applications configured, you can now deploy students' and teachers' dev -[EDU-1]: /education/windows/windows-11-se-overview +[EDU-1]: ../tutorial-deploy-apps-winse/index [MEM-1]: /mem/intune/apps/apps-win32-add diff --git a/education/windows/tutorial-school-deployment/enroll-autopilot.md b/education/windows/tutorial-school-deployment/enroll-autopilot.md index 32ff8c37ed..3515c8e99d 100644 --- a/education/windows/tutorial-school-deployment/enroll-autopilot.md +++ b/education/windows/tutorial-school-deployment/enroll-autopilot.md @@ -1,7 +1,7 @@ --- title: Enrollment in Intune with Windows Autopilot description: Learn how to join Azure AD and enroll in Intune using Windows Autopilot. -ms.date: 08/31/2022 +ms.date: 03/08/2023 ms.topic: tutorial appliesto: - ✅ Windows 10 and later @@ -99,7 +99,7 @@ To deploy the ESP to devices, you need to create an ESP profile in Microsoft Int For more information, see [Set up the Enrollment Status Page][MEM-3]. > [!CAUTION] -> When targeting an ESP to **Windows 11 SE** devices, only applications included in the [approved app list][EDU-1] should part of the ESP configuration. +> The Enrollment Status Page (ESP) is compatible with Windows 11 SE. However, due to the E Mode policy, devices may not complete the enrollment. For more information, see [Enrollment Status Page][EDU-3]. ### Autopilot end-user experience @@ -146,5 +146,6 @@ With the devices joined to Azure AD tenant and managed by Intune, you can use In [EDU-1]: /education/windows/windows-11-se-overview [EDU-2]: /intune-education/windows-11-se-overview#windows-autopilot +[EDU-3]: ../tutorial-deploy-apps-winse/considerations.md#enrollment-status-page [SURF-1]: /surface/surface-autopilot-registration-support \ No newline at end of file