diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 505a82596b..7c1508564b 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -1,6 +1,11 @@ { "redirections": [ { +"source_path": "windows/keep-secure/add-apps-to-protected-list-using-custom-uri.md", +"redirect_url": "/itpro/windows/keep-secure/create-wip-policy-using-intune", +"redirect_document_id": false +}, +{ "source_path": "windows/keep-secure/configure-windows-defender-in-windows-10.md", "redirect_url": "/itpro/windows/keep-secure/deploy-manage-report-windows-defender-antivirus", "redirect_document_id": true diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index e360930f75..74f2c0d7a4 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,12 +1,12 @@ -# Contributing to Windows IT professional documentation +# Editing Windows IT professional documentation Thank you for your interest in the Windows IT professional documentation! We appreciate your feedback, edits, and additions to our docs. -This page covers the basic steps for contributing to our technical documentation. +This page covers the basic steps for editing our technical documentation. ## Sign a CLA -All contributors who are ***not*** a Microsoft employee must [sign a Microsoft Contribution Licensing Agreement (CLA)](https://cla.microsoft.com/) before contributing to any Microsoft repositories. -If you've already contributed to Microsoft repositories in the past, congratulations! +All contributors who are ***not*** a Microsoft employee must [sign a Microsoft Contribution Licensing Agreement (CLA)](https://cla.microsoft.com/) before editing any Microsoft repositories. +If you've already edited within Microsoft repositories in the past, congratulations! You've already completed this step. ## Editing topics @@ -18,7 +18,7 @@ We've tried to make editing an existing, public file as simple as possible. **To edit a topic** -1. Go to the page on TechNet that you want to update, and then click **Contribute**. +1. Go to the page on TechNet that you want to update, and then click **Edit**. ![GitHub Web, showing the Contribute link](images/contribute-link.png) @@ -61,13 +61,17 @@ We've tried to make editing an existing, public file as simple as possible. The pull request is sent to the writer of the topic and your edits are reviewed. If your request is accepted, updates are published to one of the following places: - - [Windows 10](https://technet.microsoft.com/itpro/windows) - - [Internet Explorer 11](https://technet.microsoft.com/itpro/internet-explorer) - - [Microsoft Edge](https://technet.microsoft.com/itpro/microsoft-edge) - - [Surface](https://technet.microsoft.com/itpro/surface) - - [Surface Hub](https://technet.microsoft.com/itpro/surface-hub) - - [Windows 10 for Education](https://technet.microsoft.com/edu/windows) - - [Microsoft Desktop Optimization Pack](https://technet.microsoft.com/itpro/mdop) + - [Windows 10](https://docs.microsoft.com/windows/windows-10) + - [Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy) + - [Surface](https://docs.microsoft.com/surface) + - [Surface Hub](https://docs.microsoft.com/surface-hub) + - [HoloLens](https://docs.microsoft.com/hololens) + - [Microsoft Store](https://docs.microsoft.com/microsoft-store) + - [Windows 10 for Education](https://docs.microsoft.com/education/windows) + - [Windows 10 for SMB](https://docs.microsoft.com/windows/smb) + - [Internet Explorer 11](https://docs.microsoft.com/internet-explorer) + - [Microsoft Desktop Optimization Pack](https://docs.microsoft.com/microsoft-desktop-optimization-pack) + ## Making more substantial changes diff --git a/browsers/edge/docfx.json b/browsers/edge/docfx.json index bc72c31b48..c9ff0a06a4 100644 --- a/browsers/edge/docfx.json +++ b/browsers/edge/docfx.json @@ -14,7 +14,10 @@ } ], "globalMetadata": { - "ROBOTS": "INDEX, FOLLOW" + "ROBOTS": "INDEX, FOLLOW", + "ms.technology": "microsoft-edge", + "ms.topic": "article", + "ms.author": "lizross" }, "externalReference": [ ], diff --git a/browsers/internet-explorer/docfx.json b/browsers/internet-explorer/docfx.json index a8dde5aafb..05006a703e 100644 --- a/browsers/internet-explorer/docfx.json +++ b/browsers/internet-explorer/docfx.json @@ -14,7 +14,10 @@ } ], "globalMetadata": { - "ROBOTS": "INDEX, FOLLOW" + "ROBOTS": "INDEX, FOLLOW", + "author": "lizross", + "ms.technology": "internet-explorer", + "ms.topic": "article" }, "externalReference": [ ], diff --git a/browsers/internet-explorer/ie11-deploy-guide/change-history-for-internet-explorer-11.md b/browsers/internet-explorer/ie11-deploy-guide/change-history-for-internet-explorer-11.md index 1717c9f622..4ec6a7cc70 100644 --- a/browsers/internet-explorer/ie11-deploy-guide/change-history-for-internet-explorer-11.md +++ b/browsers/internet-explorer/ie11-deploy-guide/change-history-for-internet-explorer-11.md @@ -5,6 +5,7 @@ description: This topic lists new and updated topics in the Internet Explorer 11 ms.mktglfcycl: deploy ms.prod: ie11 ms.sitesec: library +author: eross-msft --- diff --git a/browsers/internet-explorer/ie11-deploy-guide/img-ie11-docmode-lg.md b/browsers/internet-explorer/ie11-deploy-guide/img-ie11-docmode-lg.md index 77b1ad1227..7550de81b9 100644 --- a/browsers/internet-explorer/ie11-deploy-guide/img-ie11-docmode-lg.md +++ b/browsers/internet-explorer/ie11-deploy-guide/img-ie11-docmode-lg.md @@ -1,6 +1,7 @@ --- description: A full-sized view of how document modes are chosen in IE11. title: Full-sized flowchart detailing how document modes are chosen in IE11 +author: eross-msft --- Return to: [Deprecated document modes and Internet Explorer 11](deprecated-document-modes.md)
diff --git a/devices/hololens/docfx.json b/devices/hololens/docfx.json index c6dc9e418d..71e4c3c8d8 100644 --- a/devices/hololens/docfx.json +++ b/devices/hololens/docfx.json @@ -27,7 +27,11 @@ ], "overwrite": [], "externalReference": [], - "globalMetadata": {}, + "globalMetadata": { + "ms.technology": "windows", + "ms.topic": "article", + "ms.author": "jdecker" + }, "fileMetadata": {}, "template": [ null diff --git a/devices/surface-hub/docfx.json b/devices/surface-hub/docfx.json index 11bc1cdc40..0e363e061e 100644 --- a/devices/surface-hub/docfx.json +++ b/devices/surface-hub/docfx.json @@ -14,7 +14,13 @@ } ], "globalMetadata": { - "ROBOTS": "INDEX, FOLLOW" + "ROBOTS": "INDEX, FOLLOW", + "ms.technology": "windows", + "ms.topic": "article", + "ms.mktglfcycl": "manage", + "author": "jdeckerms", + "ms.sitesec": "library", + "ms.author": "jdecker" }, "externalReference": [ ], diff --git a/devices/surface-hub/use-fully-qualified-domain-name-surface-hub.md b/devices/surface-hub/use-fully-qualified-domain-name-surface-hub.md index bf630cda9e..3347918660 100644 --- a/devices/surface-hub/use-fully-qualified-domain-name-surface-hub.md +++ b/devices/surface-hub/use-fully-qualified-domain-name-surface-hub.md @@ -4,6 +4,10 @@ description: Troubleshoot common problems, including setup issues, Exchange Acti keywords: ["Troubleshoot common problems", "setup issues", "Exchange ActiveSync errors"] author: TrudyHa localizationpriority: medium +ms.prod: w10 +ms.mktglfcycl: support +ms.sitesec: library +ms.pagetype: surfacehub --- # Configure domain name for Skype for Business diff --git a/devices/surface/docfx.json b/devices/surface/docfx.json index 7d2f4404d8..2c09ed9878 100644 --- a/devices/surface/docfx.json +++ b/devices/surface/docfx.json @@ -14,7 +14,10 @@ } ], "globalMetadata": { - "ROBOTS": "INDEX, FOLLOW" + "ROBOTS": "INDEX, FOLLOW", + "ms.technology": "windows", + "ms.topic": "article", + "ms.author": "jdecker" }, "externalReference": [ ], diff --git a/education/docfx.json b/education/docfx.json index cc09ff86a7..bcc294ba6f 100644 --- a/education/docfx.json +++ b/education/docfx.json @@ -14,7 +14,10 @@ } ], "globalMetadata": { - "ROBOTS": "INDEX, FOLLOW" + "ROBOTS": "INDEX, FOLLOW", + "ms.author": "celested", + "audience": "windows-education", + "ms.topic": "article" }, "externalReference": [ ], diff --git a/education/windows/edu-deployment-recommendations.md b/education/windows/edu-deployment-recommendations.md index 71b7b4829f..ceecbfb175 100644 --- a/education/windows/edu-deployment-recommendations.md +++ b/education/windows/edu-deployment-recommendations.md @@ -6,6 +6,7 @@ ms.mktglfcycl: plan ms.sitesec: library localizationpriority: high author: CelesteDG +ms.prod: W10 --- # Deployment recommendations for school IT administrators diff --git a/images/contribute-link.png b/images/contribute-link.png index 6b17e6dd56..4cf685e54e 100644 Binary files a/images/contribute-link.png and b/images/contribute-link.png differ diff --git a/images/preview-changes.png b/images/preview-changes.png index f98b2c6443..cb4ecab594 100644 Binary files a/images/preview-changes.png and b/images/preview-changes.png differ diff --git a/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v.md b/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v.md index 4dba1a2a53..20edf8efe4 100644 --- a/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v.md +++ b/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v.md @@ -85,7 +85,7 @@ Before you deploy Office by using App-V, review the following requirements. diff --git a/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v51.md b/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v51.md index bd506092d0..dbad00b772 100644 --- a/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v51.md +++ b/mdop/appv-v5/deploying-microsoft-office-2016-by-using-app-v51.md @@ -85,7 +85,7 @@ Before you deploy Office by using App-V, review the following requirements. diff --git a/mdop/appv-v5/index.md b/mdop/appv-v5/index.md index 32649ad47e..b481245f67 100644 --- a/mdop/appv-v5/index.md +++ b/mdop/appv-v5/index.md @@ -41,7 +41,7 @@ View updated product information and known issues for App-V 5.0. Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447). ## Got a suggestion for App-V? diff --git a/mdop/dart-v10/index.md b/mdop/dart-v10/index.md index 403e85d410..cb6a5f3b9e 100644 --- a/mdop/dart-v10/index.md +++ b/mdop/dart-v10/index.md @@ -49,7 +49,7 @@ View updated product information and known issues for DaRT 10. Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).   diff --git a/mdop/dart-v65.md b/mdop/dart-v65.md index 335e945881..02c3b02f9b 100644 --- a/mdop/dart-v65.md +++ b/mdop/dart-v65.md @@ -2,6 +2,10 @@ title: Diagnostics and Recovery Toolset 6.5 description: Diagnostics and Recovery Toolset 6.5 author: jamiejdt +ms.pagetype: mdop +ms.mktglfcycl: manage +ms.sitesec: library +ms.prod: w10 --- # Diagnostics and Recovery Toolset 6.5 diff --git a/mdop/dart-v7/index.md b/mdop/dart-v7/index.md index 4a73455bd5..b65a749ad2 100644 --- a/mdop/dart-v7/index.md +++ b/mdop/dart-v7/index.md @@ -46,7 +46,7 @@ View updated product information and known issues for DaRT 7. Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).   diff --git a/mdop/dart-v8/index.md b/mdop/dart-v8/index.md index aa7739f75f..f521934a32 100644 --- a/mdop/dart-v8/index.md +++ b/mdop/dart-v8/index.md @@ -53,7 +53,7 @@ View updated product information and known issues for DaRT 8.0. Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).   diff --git a/mdop/docfx.json b/mdop/docfx.json index 85c859a765..3f46635347 100644 --- a/mdop/docfx.json +++ b/mdop/docfx.json @@ -14,7 +14,10 @@ } ], "globalMetadata": { - "ROBOTS": "INDEX, FOLLOW" + "ROBOTS": "INDEX, FOLLOW", + "ms.technology": "mdop", + "ms.topic": "article", + "ms.author": "jamiet" }, "externalReference": [ ], diff --git a/mdop/index.md b/mdop/index.md index 0863054ac2..2453bf950e 100644 --- a/mdop/index.md +++ b/mdop/index.md @@ -3,6 +3,10 @@ title: MDOP Information Experience description: MDOP Information Experience ms.assetid: 12b8ab56-3267-450d-bb22-1c7e44cb8e52 author: jamiejdt +ms.pagetype: mdop +ms.mktglfcycl: manage +ms.sitesec: library +ms.prod: w10 --- # MDOP Information Experience diff --git a/mdop/mbam-v1/index.md b/mdop/mbam-v1/index.md index e1d4cafd4f..69f6a9bb70 100644 --- a/mdop/mbam-v1/index.md +++ b/mdop/mbam-v1/index.md @@ -42,7 +42,7 @@ View updated product information and known issues for MBAM 1.0. Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).   diff --git a/mdop/mbam-v2/index.md b/mdop/mbam-v2/index.md index 6bb7ed3791..3da1392117 100644 --- a/mdop/mbam-v2/index.md +++ b/mdop/mbam-v2/index.md @@ -45,7 +45,7 @@ Microsoft BitLocker Administration and Monitoring (MBAM) 2.0 provides a simpl - [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) - Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). + Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).   diff --git a/mdop/mbam-v25/index.md b/mdop/mbam-v25/index.md index fd60429382..f5b0d8670e 100644 --- a/mdop/mbam-v25/index.md +++ b/mdop/mbam-v25/index.md @@ -51,7 +51,7 @@ To get the MBAM software, see [How Do I Get MDOP](https://go.microsoft.com/fwlin - [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) - Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). + Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447). - [MBAM Deployment Guide](http://www.microsoft.com/download/details.aspx?id=38398) diff --git a/mdop/softgrid-application-virtualization.md b/mdop/softgrid-application-virtualization.md index fd762e0136..cb5773b982 100644 --- a/mdop/softgrid-application-virtualization.md +++ b/mdop/softgrid-application-virtualization.md @@ -2,6 +2,10 @@ title: SoftGrid Application Virtualization description: SoftGrid Application Virtualization author: jamiejdt +ms.pagetype: mdop +ms.mktglfcycl: manage +ms.sitesec: library +ms.prod: w10 --- # SoftGrid Application Virtualization diff --git a/mdop/uev-v1/index.md b/mdop/uev-v1/index.md index ce46b1dc0d..22361e39d3 100644 --- a/mdop/uev-v1/index.md +++ b/mdop/uev-v1/index.md @@ -42,7 +42,7 @@ View updated product information and known issues for UE-V 1.0. Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447).   diff --git a/mdop/uev-v2/index.md b/mdop/uev-v2/index.md index 6eeef89ebe..4873df96b5 100644 --- a/mdop/uev-v2/index.md +++ b/mdop/uev-v2/index.md @@ -304,7 +304,7 @@ For more information, and for late-breaking news that did not make it into the d Learn about the latest MDOP information and resources. [MDOP Information Experience](https://go.microsoft.com/fwlink/p/?LinkId=236032) -Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com%29 or learn about updates by following us on [Facebook]%28https://go.microsoft.com/fwlink/p/?LinkId=242445%29 or [Twitter]%28https://go.microsoft.com/fwlink/p/?LinkId=242447). +Find documentation, videos, and other resources for MDOP technologies. You can also [send us feedback](mailto:MDOPDocs@microsoft.com) or learn about updates by following us on [Facebook](https://go.microsoft.com/fwlink/p/?LinkId=242445) or [Twitter](https://go.microsoft.com/fwlink/p/?LinkId=242447). ## Got a suggestion for UE-V? diff --git a/mdop/uev-v2/prepare-a-ue-v-2x-deployment-new-uevv2.md b/mdop/uev-v2/prepare-a-ue-v-2x-deployment-new-uevv2.md index c1ae38e981..dce11abb18 100644 --- a/mdop/uev-v2/prepare-a-ue-v-2x-deployment-new-uevv2.md +++ b/mdop/uev-v2/prepare-a-ue-v-2x-deployment-new-uevv2.md @@ -17,7 +17,7 @@ There is some planning and preparation to do before you deploy Microsoft User Ex First, let’s look at the tasks you’ll do to deploy UE-V: -- [Plan your UE-V Deployment](#planning) +- Plan your UE-V Deployment Before you deploy anything, a good first step is to do a little bit of planning so that you can determine which UE-V features you’ll deploy. So if you leave this page, make sure you come back and read through the planning information below. diff --git a/store-for-business/TOC.md b/store-for-business/TOC.md new file mode 100644 index 0000000000..81657682cf --- /dev/null +++ b/store-for-business/TOC.md @@ -0,0 +1,30 @@ +# [Windows Store for Business](index.md) +## [Sign up and get started](sign-up-windows-store-for-business-overview.md) +###[Windows Store for Business overview](windows-store-for-business-overview.md) +### [Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md) +### [Sign up for Windows Store for Business](sign-up-windows-store-for-business.md) +### [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md) +### [Settings reference: Windows Store for Business](settings-reference-windows-store-for-business.md) +## [Find and acquire apps](find-and-acquire-apps-overview.md) +### [Apps in the Windows Store for Business](apps-in-windows-store-for-business.md) +### [Acquire apps in the Windows Store for Business](acquire-apps-windows-store-for-business.md) +### [Working with line-of-business apps](working-with-line-of-business-apps.md) +## [Distribute apps to your employees from the Windows Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md) +### [Distribute apps using your private store](distribute-apps-from-your-private-store.md) +### [Assign apps to employees](assign-apps-to-employees.md) +### [Distribute apps with a management tool](distribute-apps-with-management-tool.md) +### [Distribute offline apps](distribute-offline-apps.md) +## [Manage apps](manage-apps-windows-store-for-business-overview.md) +### [App inventory managemement for Windows Store for Business](app-inventory-management-windows-store-for-business.md) +### [Manage app orders in Windows Store for Business](manage-orders-windows-store-for-business.md) +### [Manage access to private store](manage-access-to-private-store.md) +### [Manage private store settings](manage-private-store-settings.md) +### [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) +## [Device Guard signing portal](device-guard-signing-portal.md) +### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) +### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) +## [Manage settings in the Windows Store for Business](manage-settings-windows-store-for-business.md) +### [Update Windows Store for Business account settings](update-windows-store-for-business-account-settings.md) +### [Manage user accounts in Windows Store for Business](manage-users-and-groups-windows-store-for-business.md) +## [Troubleshoot Windows Store for Business](troubleshoot-windows-store-for-business.md) + diff --git a/windows/manage/acquire-apps-windows-store-for-business.md b/store-for-business/acquire-apps-windows-store-for-business.md similarity index 100% rename from windows/manage/acquire-apps-windows-store-for-business.md rename to store-for-business/acquire-apps-windows-store-for-business.md diff --git a/windows/manage/add-unsigned-app-to-code-integrity-policy.md b/store-for-business/add-unsigned-app-to-code-integrity-policy.md similarity index 100% rename from windows/manage/add-unsigned-app-to-code-integrity-policy.md rename to store-for-business/add-unsigned-app-to-code-integrity-policy.md diff --git a/windows/manage/app-inventory-management-windows-store-for-business.md b/store-for-business/app-inventory-management-windows-store-for-business.md similarity index 100% rename from windows/manage/app-inventory-management-windows-store-for-business.md rename to store-for-business/app-inventory-management-windows-store-for-business.md diff --git a/windows/manage/apps-in-windows-store-for-business.md b/store-for-business/apps-in-windows-store-for-business.md similarity index 100% rename from windows/manage/apps-in-windows-store-for-business.md rename to store-for-business/apps-in-windows-store-for-business.md diff --git a/windows/manage/assign-apps-to-employees.md b/store-for-business/assign-apps-to-employees.md similarity index 100% rename from windows/manage/assign-apps-to-employees.md rename to store-for-business/assign-apps-to-employees.md diff --git a/windows/manage/configure-mdm-provider-windows-store-for-business.md b/store-for-business/configure-mdm-provider-windows-store-for-business.md similarity index 100% rename from windows/manage/configure-mdm-provider-windows-store-for-business.md rename to store-for-business/configure-mdm-provider-windows-store-for-business.md diff --git a/windows/manage/device-guard-signing-portal.md b/store-for-business/device-guard-signing-portal.md similarity index 100% rename from windows/manage/device-guard-signing-portal.md rename to store-for-business/device-guard-signing-portal.md diff --git a/windows/manage/distribute-apps-from-your-private-store.md b/store-for-business/distribute-apps-from-your-private-store.md similarity index 100% rename from windows/manage/distribute-apps-from-your-private-store.md rename to store-for-business/distribute-apps-from-your-private-store.md diff --git a/windows/manage/distribute-apps-to-your-employees-windows-store-for-business.md b/store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md similarity index 100% rename from windows/manage/distribute-apps-to-your-employees-windows-store-for-business.md rename to store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md diff --git a/windows/manage/distribute-apps-with-management-tool.md b/store-for-business/distribute-apps-with-management-tool.md similarity index 100% rename from windows/manage/distribute-apps-with-management-tool.md rename to store-for-business/distribute-apps-with-management-tool.md diff --git a/windows/manage/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md similarity index 100% rename from windows/manage/distribute-offline-apps.md rename to store-for-business/distribute-offline-apps.md diff --git a/windows/manage/find-and-acquire-apps-overview.md b/store-for-business/find-and-acquire-apps-overview.md similarity index 100% rename from windows/manage/find-and-acquire-apps-overview.md rename to store-for-business/find-and-acquire-apps-overview.md diff --git a/windows/manage/windows-store-for-business.md b/store-for-business/index.md similarity index 100% rename from windows/manage/windows-store-for-business.md rename to store-for-business/index.md diff --git a/windows/manage/manage-access-to-private-store.md b/store-for-business/manage-access-to-private-store.md similarity index 100% rename from windows/manage/manage-access-to-private-store.md rename to store-for-business/manage-access-to-private-store.md diff --git a/windows/manage/manage-apps-windows-store-for-business-overview.md b/store-for-business/manage-apps-windows-store-for-business-overview.md similarity index 100% rename from windows/manage/manage-apps-windows-store-for-business-overview.md rename to store-for-business/manage-apps-windows-store-for-business-overview.md diff --git a/windows/manage/manage-orders-windows-store-for-business.md b/store-for-business/manage-orders-windows-store-for-business.md similarity index 100% rename from windows/manage/manage-orders-windows-store-for-business.md rename to store-for-business/manage-orders-windows-store-for-business.md diff --git a/windows/manage/manage-private-store-settings.md b/store-for-business/manage-private-store-settings.md similarity index 100% rename from windows/manage/manage-private-store-settings.md rename to store-for-business/manage-private-store-settings.md diff --git a/windows/manage/manage-settings-windows-store-for-business.md b/store-for-business/manage-settings-windows-store-for-business.md similarity index 100% rename from windows/manage/manage-settings-windows-store-for-business.md rename to store-for-business/manage-settings-windows-store-for-business.md diff --git a/windows/manage/manage-users-and-groups-windows-store-for-business.md b/store-for-business/manage-users-and-groups-windows-store-for-business.md similarity index 100% rename from windows/manage/manage-users-and-groups-windows-store-for-business.md rename to store-for-business/manage-users-and-groups-windows-store-for-business.md diff --git a/windows/manage/prerequisites-windows-store-for-business.md b/store-for-business/prerequisites-windows-store-for-business.md similarity index 100% rename from windows/manage/prerequisites-windows-store-for-business.md rename to store-for-business/prerequisites-windows-store-for-business.md diff --git a/windows/manage/roles-and-permissions-windows-store-for-business.md b/store-for-business/roles-and-permissions-windows-store-for-business.md similarity index 100% rename from windows/manage/roles-and-permissions-windows-store-for-business.md rename to store-for-business/roles-and-permissions-windows-store-for-business.md diff --git a/windows/manage/settings-reference-windows-store-for-business.md b/store-for-business/settings-reference-windows-store-for-business.md similarity index 100% rename from windows/manage/settings-reference-windows-store-for-business.md rename to store-for-business/settings-reference-windows-store-for-business.md diff --git a/windows/manage/sign-code-integrity-policy-with-device-guard-signing.md b/store-for-business/sign-code-integrity-policy-with-device-guard-signing.md similarity index 100% rename from windows/manage/sign-code-integrity-policy-with-device-guard-signing.md rename to store-for-business/sign-code-integrity-policy-with-device-guard-signing.md diff --git a/windows/manage/sign-up-windows-store-for-business-overview.md b/store-for-business/sign-up-windows-store-for-business-overview.md similarity index 100% rename from windows/manage/sign-up-windows-store-for-business-overview.md rename to store-for-business/sign-up-windows-store-for-business-overview.md diff --git a/windows/manage/sign-up-windows-store-for-business.md b/store-for-business/sign-up-windows-store-for-business.md similarity index 100% rename from windows/manage/sign-up-windows-store-for-business.md rename to store-for-business/sign-up-windows-store-for-business.md diff --git a/windows/manage/troubleshoot-windows-store-for-business.md b/store-for-business/troubleshoot-windows-store-for-business.md similarity index 100% rename from windows/manage/troubleshoot-windows-store-for-business.md rename to store-for-business/troubleshoot-windows-store-for-business.md diff --git a/windows/manage/update-windows-store-for-business-account-settings.md b/store-for-business/update-windows-store-for-business-account-settings.md similarity index 100% rename from windows/manage/update-windows-store-for-business-account-settings.md rename to store-for-business/update-windows-store-for-business-account-settings.md diff --git a/windows/manage/windows-store-for-business-overview.md b/store-for-business/windows-store-for-business-overview.md similarity index 100% rename from windows/manage/windows-store-for-business-overview.md rename to store-for-business/windows-store-for-business-overview.md diff --git a/windows/manage/working-with-line-of-business-apps.md b/store-for-business/working-with-line-of-business-apps.md similarity index 100% rename from windows/manage/working-with-line-of-business-apps.md rename to store-for-business/working-with-line-of-business-apps.md diff --git a/windows/TOC.md b/windows/TOC.md deleted file mode 100644 index 7167858dab..0000000000 --- a/windows/TOC.md +++ /dev/null @@ -1,8 +0,0 @@ -# [Windows 10 and Windows 10 Mobile](index.md) -## [What's new in Windows 10](whats-new/index.md) -## [Plan for Windows 10 deployment](plan/index.md) -## [Deploy Windows 10](deploy/index.md) -## [Configure Windows 10](configure/index.md) -## [Update Windows 10](update/index.md) -## [Keep Windows 10 secure](keep-secure/index.md) -## [Manage Windows 10](manage/index.md) \ No newline at end of file diff --git a/windows/access-protection/TOC.md b/windows/access-protection/TOC.md new file mode 100644 index 0000000000..47adc1005f --- /dev/null +++ b/windows/access-protection/TOC.md @@ -0,0 +1,190 @@ +# [Access protection](access-control/access-control.md) + +## [Access Control Overview](access-control/access-control.md) +### [Dynamic Access Control Overview](access-control/dynamic-access-control.md) +### [Security identifiers](access-control/security-identifiers.md) +### [Security Principals](access-control/security-principals.md) +### [Local Accounts](access-control/local-accounts.md) +### [Active Directory Accounts](access-control/active-directory-accounts.md) +### [Microsoft Accounts](access-control/microsoft-accounts.md) +### [Service Accounts](access-control/service-accounts.md) +### [Active Directory Security Groups](access-control/active-directory-security-groups.md) +### [Special Identities](access-control/special-identities.md) + +## [Configure S/MIME for Windows 10 and Windows 10 Mobile](configure-s-mime.md) + +## [Enterprise Certificate Pinning](enterprise-certificate-pinning.md) + +## [Install digital certificates on Windows 10 Mobile](installing-digital-certificates-on-windows-10-mobile.md) + +## [Protect derived domain credentials with Credential Guard](credential-guard/credential-guard.md) +### [How Credential Guard works](credential-guard/credential-guard-how-it-works.md) +### [Credential Guard Requirements](credential-guard/credential-guard-requirements.md) +### [Manage Credential Guard](credential-guard/credential-guard-manage.md) +### [Credential Guard protection limits](credential-guard/credential-guard-protection-limits.md) +### [Considerations when using Credential Guard](credential-guard/credential-guard-considerations.md) +### [Credential Guard: Additional mitigations](credential-guard/additional-mitigations.md) + + + +## [Protect Remote Desktop credentials with Remote Credential Guard](remote-credential-guard.md) + +## [Smart Cards](smart-cards/smart-card-windows-smart-card-technical-reference.md) +### [How Smart Card Sign-in Works in Windows](smart-cards/smart-card-how-smart-card-sign-in-works-in-windows.md) +#### [Smart Card Architecture](smart-cards/smart-card-architecture.md) +#### [Certificate Requirements and Enumeration](smart-cards/smart-card-certificate-requirements-and-enumeration.md) +#### [Smart Card and Remote Desktop Services](smart-cards/smart-card-and-remote-desktop-services.md) +#### [Smart Cards for Windows Service](smart-cards/smart-card-smart-cards-for-windows-service.md) +#### [Certificate Propagation Service](smart-cards/smart-card-certificate-propagation-service.md) +#### [Smart Card Removal Policy Service](smart-cards/smart-card-removal-policy-service.md) +### [Smart Card Tools and Settings](smart-cards/smart-card-tools-and-settings.md) +#### [Smart Cards Debugging Information](smart-cards/smart-card-debugging-information.md) +#### [Smart Card Group Policy and Registry Settings](smart-cards/smart-card-group-policy-and-registry-settings.md) +#### [Smart Card Events](smart-cards/smart-card-events.md) + +### [User Account Control](user-account-control\user-account-control-overview.md) +#### [How User Account Control works](user-account-control\how-user-account-control-works.md) +#### [User Account Control security policy settings](user-account-control\user-account-control-security-policy-settings.md) +#### [User Account Control Group Policy and registry key settings](user-account-control\user-account-control-group-policy-and-registry-key-settings.md) + +### [Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-overview.md) +### [Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-overview.md) +#### [Understanding and Evaluating Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-understanding-and-evaluating.md) +##### [Get Started with Virtual Smart Cards: Walkthrough Guide](virtual-smart-cards\virtual-smart-card-get-started.md) +##### [Use Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-use-virtual-smart-cards.md) +##### [Deploy Virtual Smart Cards](virtual-smart-cards\virtual-smart-card-deploy-virtual-smart-cards.md) +##### [Evaluate Virtual Smart Card Security](virtual-smart-cards\virtual-smart-card-evaluate-security.md) +#### [Tpmvscmgr](virtual-smart-cards\virtual-smart-card-tpmvscmgr.md) + + +## [VPN technical guide](vpn\vpn-guide.md) +### [VPN connection types](vpn\vpn-connection-type.md) +### [VPN routing decisions](vpn\vpn-routing.md) +### [VPN authentication options](vpn\vpn-authentication.md) +### [VPN and conditional access](vpn\vpn-conditional-access.md) +### [VPN name resolution](vpn\vpn-name-resolution.md) +### [VPN auto-triggered profile options](vpn\vpn-auto-trigger-profile.md) +### [VPN security features](vpn\vpn-security-features.md) +### [VPN profile options](vpn\vpn-profile-options.md) +### [How to use single sign-on (SSO) over VPN and Wi-Fi connections](vpn\how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md) +### [Windows 10 credential theft mitigation guide abstract](windows-credential-theft-mitigation-guide-abstract.md) + +## [Windows Firewall with Advanced Security](windows-firewall/windows-firewall-with-advanced-security.md) +### [Isolating Windows Store Apps on Your Network](windows-firewall/isolating-apps-on-your-network.md) +### [Securing End-to-End IPsec Connections by Using IKEv2 in Windows Server 2012](windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md) +### [Windows Firewall with Advanced Security Administration with Windows PowerShell](windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md) +### [Windows Firewall with Advanced Security Design Guide](windows-firewall/windows-firewall-with-advanced-security-design-guide.md) +#### [Understanding the Windows Firewall with Advanced Security Design Process](windows-firewall/understanding-the-windows-firewall-with-advanced-security-design-process.md) +#### [Identifying Your Windows Firewall with Advanced Security Deployment Goals](windows-firewall/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md) +##### [Protect Devices from Unwanted Network Traffic](windows-firewall/protect-devices-from-unwanted-network-traffic.md) +##### [Restrict Access to Only Trusted Devices](windows-firewall/restrict-access-to-only-trusted-devices.md) +##### [Require Encryption When Accessing Sensitive Network Resources](windows-firewall/require-encryption-when-accessing-sensitive-network-resources.md) +##### [Restrict Access to Only Specified Users or Computers](windows-firewall/restrict-access-to-only-specified-users-or-devices.md) +#### [Mapping Your Deployment Goals to a Windows Firewall with Advanced Security Design](windows-firewall/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md) +##### [Basic Firewall Policy Design](windows-firewall/basic-firewall-policy-design.md) +##### [Domain Isolation Policy Design](windows-firewall/domain-isolation-policy-design.md) +##### [Server Isolation Policy Design](windows-firewall/server-isolation-policy-design.md) +##### [Certificate-based Isolation Policy Design](windows-firewall/certificate-based-isolation-policy-design.md) +#### [Evaluating Windows Firewall with Advanced Security Design Examples](windows-firewall/evaluating-windows-firewall-with-advanced-security-design-examples.md) +##### [Firewall Policy Design Example](windows-firewall/firewall-policy-design-example.md) +##### [Domain Isolation Policy Design Example](windows-firewall/domain-isolation-policy-design-example.md) +##### [Server Isolation Policy Design Example](windows-firewall/server-isolation-policy-design-example.md) +##### [Certificate-based Isolation Policy Design Example](windows-firewall/certificate-based-isolation-policy-design-example.md) +#### [Designing a Windows Firewall with Advanced Security Strategy](windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md) +##### [Gathering the Information You Need](windows-firewall/gathering-the-information-you-need.md) +###### [Gathering Information about Your Current Network Infrastructure](windows-firewall/gathering-information-about-your-current-network-infrastructure.md) +###### [Gathering Information about Your Active Directory Deployment](windows-firewall/gathering-information-about-your-active-directory-deployment.md) +###### [Gathering Information about Your Computers](windows-firewall/gathering-information-about-your-devices.md) +###### [Gathering Other Relevant Information](windows-firewall/gathering-other-relevant-information.md) +##### [Determining the Trusted State of Your Computers](windows-firewall/determining-the-trusted-state-of-your-devices.md) +#### [Planning Your Windows Firewall with Advanced Security Design](windows-firewall/planning-your-windows-firewall-with-advanced-security-design.md) +##### [Planning Settings for a Basic Firewall Policy](windows-firewall/planning-settings-for-a-basic-firewall-policy.md) +##### [Planning Domain Isolation Zones](windows-firewall/planning-domain-isolation-zones.md) +###### [Exemption List](windows-firewall/exemption-list.md) +###### [Isolated Domain](windows-firewall/isolated-domain.md) +###### [Boundary Zone](windows-firewall/boundary-zone.md) +###### [Encryption Zone](windows-firewall/encryption-zone.md) +##### [Planning Server Isolation Zones](windows-firewall/planning-server-isolation-zones.md) +##### [Planning Certificate-based Authentication](windows-firewall/planning-certificate-based-authentication.md) +###### [Documenting the Zones](windows-firewall/documenting-the-zones.md) +###### [Planning Group Policy Deployment for Your Isolation Zones](windows-firewall/planning-group-policy-deployment-for-your-isolation-zones.md) +####### [Planning Isolation Groups for the Zones](windows-firewall/planning-isolation-groups-for-the-zones.md) +####### [Planning Network Access Groups](windows-firewall/planning-network-access-groups.md) +####### [Planning the GPOs](windows-firewall/planning-the-gpos.md) +######## [Firewall GPOs](windows-firewall/firewall-gpos.md) +######### [GPO_DOMISO_Firewall](windows-firewall/gpo-domiso-firewall.md) +######## [Isolated Domain GPOs](windows-firewall/isolated-domain-gpos.md) +######### [GPO_DOMISO_IsolatedDomain_Clients](windows-firewall/gpo-domiso-isolateddomain-clients.md) +######### [GPO_DOMISO_IsolatedDomain_Servers](windows-firewall/gpo-domiso-isolateddomain-servers.md) +######## [Boundary Zone GPOs](windows-firewall/boundary-zone-gpos.md) +######### [GPO_DOMISO_Boundary](windows-firewall/gpo-domiso-boundary.md) +######## [Encryption Zone GPOs](windows-firewall/encryption-zone-gpos.md) +######### [GPO_DOMISO_Encryption](windows-firewall/gpo-domiso-encryption.md) +######## [Server Isolation GPOs](windows-firewall/server-isolation-gpos.md) +####### [Planning GPO Deployment](windows-firewall/planning-gpo-deployment.md) +#### [Appendix A: Sample GPO Template Files for Settings Used in this Guide](windows-firewall/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md) +### [Windows Firewall with Advanced Security Deployment Guide](windows-firewall/windows-firewall-with-advanced-security-deployment-guide.md) +#### [Planning to Deploy Windows Firewall with Advanced Security](windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md) +#### [Implementing Your Windows Firewall with Advanced Security Design Plan](windows-firewall/implementing-your-windows-firewall-with-advanced-security-design-plan.md) +#### [Checklist: Creating Group Policy Objects](windows-firewall/checklist-creating-group-policy-objects.md) +#### [Checklist: Implementing a Basic Firewall Policy Design](windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md) +#### [Checklist: Configuring Basic Firewall Settings](windows-firewall/checklist-configuring-basic-firewall-settings.md) +#### [Checklist: Creating Inbound Firewall Rules](windows-firewall/checklist-creating-inbound-firewall-rules.md) +#### [Checklist: Creating Outbound Firewall Rules](windows-firewall/checklist-creating-outbound-firewall-rules.md) +#### [Checklist: Implementing a Domain Isolation Policy Design](windows-firewall/checklist-implementing-a-domain-isolation-policy-design.md) +##### [Checklist: Configuring Rules for the Isolated Domain](windows-firewall/checklist-configuring-rules-for-the-isolated-domain.md) +##### [Checklist: Configuring Rules for the Boundary Zone](windows-firewall/checklist-configuring-rules-for-the-boundary-zone.md) +##### [Checklist: Configuring Rules for the Encryption Zone](windows-firewall/checklist-configuring-rules-for-the-encryption-zone.md) +##### [Checklist: Configuring Rules for an Isolated Server Zone](windows-firewall/checklist-configuring-rules-for-an-isolated-server-zone.md) +#### [Checklist: Implementing a Standalone Server Isolation Policy Design](windows-firewall/checklist-implementing-a-standalone-server-isolation-policy-design.md) +##### [Checklist: Configuring Rules for Servers in a Standalone Isolated Server Zone](windows-firewall/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md) +##### [Checklist: Creating Rules for Clients of a Standalone Isolated Server Zone](windows-firewall/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md) +#### [Checklist: Implementing a Certificate-based Isolation Policy Design](windows-firewall/checklist-implementing-a-certificate-based-isolation-policy-design.md) +#### [Procedures Used in This Guide](windows-firewall/procedures-used-in-this-guide.md) +##### [Add Production Devices to the Membership Group for a Zone](windows-firewall/add-production-devices-to-the-membership-group-for-a-zone.md) +##### [Add Test Devices to the Membership Group for a Zone](windows-firewall/add-test-devices-to-the-membership-group-for-a-zone.md) +##### [Assign Security Group Filters to the GPO](windows-firewall/assign-security-group-filters-to-the-gpo.md) +##### [Change Rules from Request to Require Mode](windows-firewall/change-rules-from-request-to-require-mode.md) +##### [Configure Authentication Methods](windows-firewall/configure-authentication-methods.md) +##### [Configure Data Protection (Quick Mode) Settings](windows-firewall/configure-data-protection-quick-mode-settings.md) +##### [Configure Group Policy to Autoenroll and Deploy Certificates](windows-firewall/configure-group-policy-to-autoenroll-and-deploy-certificates.md) +##### [Configure Key Exchange (Main Mode) Settings](windows-firewall/configure-key-exchange-main-mode-settings.md) +##### [Configure the Rules to Require Encryption](windows-firewall/configure-the-rules-to-require-encryption.md) +##### [Configure the Windows Firewall Log](windows-firewall/configure-the-windows-firewall-log.md) +##### [Configure the Workstation Authentication Certificate Template](windows-firewall/configure-the-workstation-authentication-certificate-template.md) +##### [Configure Windows Firewall to Suppress Notifications When a Program Is Blocked](windows-firewall/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md) +##### [Confirm That Certificates Are Deployed Correctly](windows-firewall/confirm-that-certificates-are-deployed-correctly.md) +##### [Copy a GPO to Create a New GPO](windows-firewall/copy-a-gpo-to-create-a-new-gpo.md) +##### [Create a Group Account in Active Directory](windows-firewall/create-a-group-account-in-active-directory.md) +##### [Create a Group Policy Object](windows-firewall/create-a-group-policy-object.md) +##### [Create an Authentication Exemption List Rule](windows-firewall/create-an-authentication-exemption-list-rule.md) +##### [Create an Authentication Request Rule](windows-firewall/create-an-authentication-request-rule.md) +##### [Create an Inbound ICMP Rule](windows-firewall/create-an-inbound-icmp-rule.md) +##### [Create an Inbound Port Rule](windows-firewall/create-an-inbound-port-rule.md) +##### [Create an Inbound Program or Service Rule](windows-firewall/create-an-inbound-program-or-service-rule.md) +##### [Create an Outbound Port Rule](windows-firewall/create-an-outbound-port-rule.md) +##### [Create an Outbound Program or Service Rule](windows-firewall/create-an-outbound-program-or-service-rule.md) +##### [Create Inbound Rules to Support RPC](windows-firewall/create-inbound-rules-to-support-rpc.md) +##### [Create WMI Filters for the GPO](windows-firewall/create-wmi-filters-for-the-gpo.md) +##### [Enable Predefined Inbound Rules](windows-firewall/enable-predefined-inbound-rules.md) +##### [Enable Predefined Outbound Rules](windows-firewall/enable-predefined-outbound-rules.md) +##### [Exempt ICMP from Authentication](windows-firewall/exempt-icmp-from-authentication.md) +##### [Link the GPO to the Domain](windows-firewall/link-the-gpo-to-the-domain.md) +##### [Modify GPO Filters to Apply to a Different Zone or Version of Windows](windows-firewall/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md) +##### [Open the Group Policy Management Console to IP Security Policies](windows-firewall/open-the-group-policy-management-console-to-ip-security-policies.md) +##### [Open the Group Policy Management Console to Windows Firewall](windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md) +##### [Open the Group Policy Management Console to Windows Firewall with Advanced Security](windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md) +##### [Open Windows Firewall with Advanced Security](windows-firewall/open-windows-firewall-with-advanced-security.md) +##### [Restrict Server Access to Members of a Group Only](windows-firewall/restrict-server-access-to-members-of-a-group-only.md) +##### [Turn on Windows Firewall and Configure Default Behavior](windows-firewall/turn-on-windows-firewall-and-configure-default-behavior.md) +##### [Verify That Network Traffic Is Authenticated](windows-firewall/verify-that-network-traffic-is-authenticated.md) + +## [Windows Hello for Business](hello-for-business/hello-identity-verification.md) +### [How Windows Hello for Business works](hello-for-business/hello-how-it-works.md) +### [Manage Windows Hello for Business in your organization](hello-for-business/hello-manage-in-organization.md) +### [Why a PIN is better than a password](hello-for-business/hello-why-pin-is-better-than-password.md) +### [Prepare people to use Windows Hello](hello-for-business/hello-prepare-people-to-use.md) +### [Windows Hello and password changes](hello-for-business/hello-and-password-changes.md) +### [Windows Hello errors during PIN creation](hello-for-business/hello-errors-during-pin-creation.md) +### [Event ID 300 - Windows Hello successfully created](hello-for-business/hello-event-300.md) +### [Windows Hello biometrics in the enterprise](hello-for-business/hello-biometrics-in-enterprise.md) diff --git a/windows/keep-secure/access-control.md b/windows/access-protection/access-control/access-control.md similarity index 98% rename from windows/keep-secure/access-control.md rename to windows/access-protection/access-control/access-control.md index 969bd01684..006ffb29ab 100644 --- a/windows/keep-secure/access-control.md +++ b/windows/access-protection/access-control/access-control.md @@ -114,14 +114,14 @@ User rights grant specific privileges and sign-in rights to users and groups in User rights are different from permissions because user rights apply to user accounts, and permissions are associated with objects. Although user rights can apply to individual user accounts, user rights are best administered on a group account basis. There is no support in the access control user interface to grant user rights. However, user rights assignment can be administered through **Local Security Settings**. -For more information about user rights, see [User Rights Assignment](user-rights-assignment.md). +For more information about user rights, see [User Rights Assignment](/windows/device-security/security-policy-settings/access-user-rights-assignment). ## Object auditing With administrator's rights, you can audit users' successful or failed access to objects. You can select which object access to audit by using the access control user interface, but first you must enable the audit policy by selecting **Audit object access** under **Local Policies** in **Local Security Settings**. You can then view these security-related events in the Security log in Event Viewer. -For more information about auditing, see [Security Auditing Overview](security-auditing-overview.md). +For more information about auditing, see [Security Auditing Overview](/windows/device-security/auditing/security-auditing-overview). ## See also diff --git a/windows/keep-secure/active-directory-accounts.md b/windows/access-protection/access-control/active-directory-accounts.md similarity index 99% rename from windows/keep-secure/active-directory-accounts.md rename to windows/access-protection/access-control/active-directory-accounts.md index 3b4ee0e979..1791e02a32 100644 --- a/windows/keep-secure/active-directory-accounts.md +++ b/windows/access-protection/access-control/active-directory-accounts.md @@ -176,7 +176,7 @@ Because the Guest account can provide anonymous access, it is a security risk. I When the Guest account is required, an Administrator on the domain controller is required to enable the Guest account. The Guest account can be enabled without requiring a password, or it can be enabled with a strong password. The Administrator also grants restricted rights and permissions for the Guest account. To help prevent unauthorized access: -- Do not grant the Guest account the [Shut down the system](shut-down-the-system.md) user right. When a computer is shutting down or starting up, it is possible that a Guest user or anyone with local access, such as a malicious user, could gain unauthorized access to the computer. +- Do not grant the Guest account the [Shut down the system](/windows/device-security/security-policy-settings/shut-down-the-system) user right. When a computer is shutting down or starting up, it is possible that a Guest user or anyone with local access, such as a malicious user, could gain unauthorized access to the computer. - Do not provide the Guest account with the ability to view the event logs. After the Guest account is enabled, it is a best practice to monitor this account frequently to ensure that other users cannot use services and other resources, such as resources that were unintentionally left available by a previous user. @@ -571,7 +571,7 @@ If the administrators in your environment can sign in locally to managed servers - **Better**. Do not grant administrators membership in the local Administrator group on the computer in order to restrict the administrator from bypassing these protections. -- **Ideal**. Restrict workstations from having any network connectivity, except for the domain controllers and servers that the administrator accounts are used to manage. Alternately, use AppLocker application control policies to restrict all applications from running, except for the operating system and approved administrative tools and applications. For more information about AppLocker, see [AppLocker](applocker-overview.md). +- **Ideal**. Restrict workstations from having any network connectivity, except for the domain controllers and servers that the administrator accounts are used to manage. Alternately, use AppLocker application control policies to restrict all applications from running, except for the operating system and approved administrative tools and applications. For more information about AppLocker, see [AppLocker](/windows/device-security/applocker/applocker-overview). The following procedure describes how to block Internet access by creating a Group Policy Object (GPO) that configures an invalid proxy address on administrative workstations. These instructions apply only to computers running Internet Explorer and other Windows components that use these proxy settings. diff --git a/windows/keep-secure/active-directory-security-groups.md b/windows/access-protection/access-control/active-directory-security-groups.md similarity index 94% rename from windows/keep-secure/active-directory-security-groups.md rename to windows/access-protection/access-control/active-directory-security-groups.md index 552c86b75a..772a0ebb67 100644 --- a/windows/keep-secure/active-directory-security-groups.md +++ b/windows/access-protection/access-control/active-directory-security-groups.md @@ -50,7 +50,7 @@ Security groups can provide an efficient way to assign access to resources on yo For example, a user who is added to the Backup Operators group in Active Directory has the ability to back up and restore files and directories that are located on each domain controller in the domain. This is possible because, by default, the user rights **Backup files and directories** and **Restore files and directories** are automatically assigned to the Backup Operators group. Therefore, members of this group inherit the user rights that are assigned to that group. - You can use Group Policy to assign user rights to security groups to delegate specific tasks. For more information about using Group Policy, see [User Rights Assignment](user-rights-assignment.md). + You can use Group Policy to assign user rights to security groups to delegate specific tasks. For more information about using Group Policy, see [User Rights Assignment](/windows/device-security/security-policy-settings/user-rights-assignment). - Assign permissions to security groups for resources. @@ -650,7 +650,7 @@ This security group has not changed since Windows Server 2008.

Default User Rights

-

[Allow log on locally](allow-log-on-locally.md): SeInteractiveLogonRight

+

[Allow log on locally](/windows/device-security/security-policy-settings/allow-log-on-locally): SeInteractiveLogonRight

@@ -672,9 +672,9 @@ Membership can be modified by members of the following groups: the default servi This security group includes the following changes since Windows Server 2008: -- Default user rights changes: **Allow log on through Terminal Services** existed in Windows Server 2008, and it was replaced by [Allow log on through Remote Desktop Services](allow-log-on-through-remote-desktop-services.md). +- Default user rights changes: **Allow log on through Terminal Services** existed in Windows Server 2008, and it was replaced by [Allow log on through Remote Desktop Services](/windows/device-security/security-policy-settings/allow-log-on-through-remote-desktop-services). -- [Remove computer from docking station](remove-computer-from-docking-station.md) was removed in Windows Server 2012 R2. +- [Remove computer from docking station](/windows/device-security/security-policy-settings/remove-computer-from-docking-station) was removed in Windows Server 2012 R2. @@ -722,33 +722,33 @@ This security group includes the following changes since Windows Server 2008: - +

Default User Rights

[Adjust memory quotas for a process](adjust-memory-quotas-for-a-process.md): SeIncreaseQuotaPrivilege

-

[Access this computer from the network](access-this-computer-from-the-network.md): SeNetworkLogonRight

-

[Allow log on locally](allow-log-on-locally.md): SeInteractiveLogonRight

-

[Allow log on through Remote Desktop Services](allow-log-on-through-remote-desktop-services.md): SeRemoteInteractiveLogonRight

-

[Back up files and directories](back-up-files-and-directories.md): SeBackupPrivilege

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

-

[Change the system time](change-the-system-time.md): SeSystemTimePrivilege

-

[Change the time zone](change-the-time-zone.md): SeTimeZonePrivilege

-

[Create a pagefile](create-a-pagefile.md): SeCreatePagefilePrivilege

-

[Create global objects](create-global-objects.md): SeCreateGlobalPrivilege

-

[Create symbolic links](create-symbolic-links.md): SeCreateSymbolicLinkPrivilege

-

[Debug programs](debug-programs.md): SeDebugPrivilege

-

[Enable computer and user accounts to be trusted for delegation](enable-computer-and-user-accounts-to-be-trusted-for-delegation.md): SeEnableDelegationPrivilege

-

[Force shutdown from a remote system](force-shutdown-from-a-remote-system.md): SeRemoteShutdownPrivilege

-

[Impersonate a client after authentication](impersonate-a-client-after-authentication.md): SeImpersonatePrivilege

-

[Increase scheduling priority](increase-scheduling-priority.md): SeIncreaseBasePriorityPrivilege

-

[Load and unload device drivers](load-and-unload-device-drivers.md): SeLoadDriverPrivilege

-

[Log on as a batch job](log-on-as-a-batch-job.md): SeBatchLogonRight

-

[Manage auditing and security log](manage-auditing-and-security-log.md): SeSecurityPrivilege

-

[Modify firmware environment values](modify-firmware-environment-values.md): SeSystemEnvironmentPrivilege

-

[Perform volume maintenance tasks](perform-volume-maintenance-tasks.md): SeManageVolumePrivilege

-

[Profile system performance](profile-system-performance.md): SeSystemProfilePrivilege

-

[Profile single process](profile-single-process.md): SeProfileSingleProcessPrivilege

-

[Remove computer from docking station](remove-computer-from-docking-station.md): SeUndockPrivilege

-

[Restore files and directories](restore-files-and-directories.md): SeRestorePrivilege

-

[Shut down the system](shut-down-the-system.md): SeShutdownPrivilege

-

[Take ownership of files or other objects](take-ownership-of-files-or-other-objects.md): SeTakeOwnershipPrivilege

[Adjust memory quotas for a process](/windows/device-security/security-policy-settings/adjust-memory-quotas-for-a-process): SeIncreaseQuotaPrivilege

+

[Access this computer from the network](/windows/device-security/security-policy-settings/access-this-computer-from-the-network): SeNetworkLogonRight

+

[Allow log on locally](/windows/device-security/security-policy-settings/allow-log-on-locally): SeInteractiveLogonRight

+

[Allow log on through Remote Desktop Services](/windows/device-security/security-policy-settings/allow-log-on-through-remote-desktop-services): SeRemoteInteractiveLogonRight

+

[Back up files and directories](/windows/device-security/security-policy-settings/back-up-files-and-directories): SeBackupPrivilege

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

+

[Change the system time](/windows/device-security/security-policy-settings/change-the-system-time): SeSystemTimePrivilege

+

[Change the time zone](/windows/device-security/security-policy-settings/change-the-time-zone): SeTimeZonePrivilege

+

[Create a pagefile](/windows/device-security/security-policy-settings/create-a-pagefile): SeCreatePagefilePrivilege

+

[Create global objects](/windows/device-security/security-policy-settings/create-global-objects): SeCreateGlobalPrivilege

+

[Create symbolic links](/windows/device-security/security-policy-settings/create-symbolic-links): SeCreateSymbolicLinkPrivilege

+

[Debug programs](/windows/device-security/security-policy-settings/debug-programs): SeDebugPrivilege

+

[Enable computer and user accounts to be trusted for delegation](/windows/device-security/security-policy-settings/enable-computer-and-user-accounts-to-be-trusted-for-delegation): SeEnableDelegationPrivilege

+

[Force shutdown from a remote system](/windows/device-security/security-policy-settings/force-shutdown-from-a-remote-system): SeRemoteShutdownPrivilege

+

[Impersonate a client after authentication](/windows/device-security/security-policy-settings/impersonate-a-client-after-authentication): SeImpersonatePrivilege

+

[Increase scheduling priority](/windows/device-security/security-policy-settings/increase-scheduling-priority): SeIncreaseBasePriorityPrivilege

+

[Load and unload device drivers](/windows/device-security/security-policy-settings/load-and-unload-device-drivers): SeLoadDriverPrivilege

+

[Log on as a batch job](/windows/device-security/security-policy-settings/log-on-as-a-batch-job): SeBatchLogonRight

+

[Manage auditing and security log](/windows/device-security/security-policy-settings/manage-auditing-and-security-log): SeSecurityPrivilege

+

[Modify firmware environment values](/windows/device-security/security-policy-settings/modify-firmware-environment-values): SeSystemEnvironmentPrivilege

+

[Perform volume maintenance tasks](/windows/device-security/security-policy-settings/perform-volume-maintenance-tasks): SeManageVolumePrivilege

+

[Profile system performance](/windows/device-security/security-policy-settings/profile-system-performance): SeSystemProfilePrivilege

+

[Profile single process](/windows/device-security/security-policy-settings/profile-single-process): SeProfileSingleProcessPrivilege

+

[Remove computer from docking station](/windows/device-security/security-policy-settings/remove-computer-from-docking-station): SeUndockPrivilege

+

[Restore files and directories](/windows/device-security/security-policy-settings/restore-files-and-directories): SeRestorePrivilege

+

[Shut down the system](/windows/device-security/security-policy-settings/shut-down-the-system): SeShutdownPrivilege

+

[Take ownership of files or other objects](/windows/device-security/security-policy-settings/take-ownership-of-files-or-other-objects): SeTakeOwnershipPrivilege
@@ -870,11 +870,11 @@ This security group has not changed since Windows Server 2008.

Default User Rights

-

[Allow log on locally](allow-log-on-locally.md): SeInteractiveLogonRight

-

[Back up files and directories](back-up-files-and-directories.md): SeBackupPrivilege

-

[Log on as a batch job](log-on-as-a-batch-job.md): SeBatchLogonRight

-

[Restore files and directories](restore-files-and-directories.md): SeRestorePrivilege

-

[Shut down the system](shut-down-the-system.md): SeShutdownPrivilege

+

[Allow log on locally](/windows/device-security/security-policy-settings/allow-log-on-locally): SeInteractiveLogonRight

+

[Back up files and directories](/windows/device-security/security-policy-settings/back-up-files-and-directories): SeBackupPrivilege

+

[Log on as a batch job](/windows/device-security/security-policy-settings/log-on-as-a-batch-job): SeBatchLogonRight

+

[Restore files and directories](/windows/device-security/security-policy-settings/restore-files-and-directories): SeRestorePrivilege

+

[Shut down the system](/windows/device-security/security-policy-settings/shut-down-the-system): SeShutdownPrivilege

@@ -2330,7 +2330,7 @@ Members of the Performance Log Users group can manage performance counters, logs - Can use all the features that are available to the Performance Monitor Users group. -- Can create and modify Data Collector Sets after the group is assigned the [Log on as a batch job](log-on-as-a-batch-job.md) user right. +- Can create and modify Data Collector Sets after the group is assigned the [Log on as a batch job](/windows/device-security/security-policy-settings/log-on-as-a-batch-job) user right. **Warning**   If you are a member of the Performance Log Users group, you must configure Data Collector Sets that you create to run under your credentials. @@ -2339,7 +2339,7 @@ Members of the Performance Log Users group can manage performance counters, logs - Cannot use the Windows Kernel Trace event provider in Data Collector Sets. -For members of the Performance Log Users group to initiate data logging or modify Data Collector Sets, the group must first be assigned the [Log on as a batch job](log-on-as-a-batch-job.md) user right. To assign this user right, use the Local Security Policy snap-in in Microsoft Management Console. +For members of the Performance Log Users group to initiate data logging or modify Data Collector Sets, the group must first be assigned the [Log on as a batch job](/windows/device-security/security-policy-settings/log-on-as-a-batch-job) user right. To assign this user right, use the Local Security Policy snap-in in Microsoft Management Console. **Note**   This group appears as a SID until the domain controller is made the primary domain controller and it holds the operations master role (also known as flexible single master operations or FSMO). @@ -2401,7 +2401,7 @@ This security group has not changed since Windows Server 2008.

Default User Rights

-

[Log on as a batch job](log-on-as-a-batch-job.md): SeBatchLogonRight

+

[Log on as a batch job](/windows/device-security/security-policy-settings/log-on-as-a-batch-job): SeBatchLogonRight

@@ -2548,8 +2548,8 @@ This security group has not changed since Windows Server 2008.

Default User Rights

-

[Access this computer from the network](access-this-computer-from-the-network.md): SeNetworkLogonRight

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

+

[Access this computer from the network](/windows/device-security/security-policy-settings/access-this-computer-from-the-network): SeNetworkLogonRight

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

@@ -2612,9 +2612,9 @@ This security group has not changed since Windows Server 2008. However, in Windo

Default User Rights

-

[Allow log on locally](allow-log-on-locally.md): SeInteractiveLogonRight

-

[Load and unload device drivers](load-and-unload-device-drivers.md): SeLoadDriverPrivilege

-

[Shut down the system](shut-down-the-system.md): SeShutdownPrivilege

+

[Allow log on locally](/windows/device-security/security-policy-settings/allow-log-on-locally): SeInteractiveLogonRight

+

[Load and unload device drivers](/windows/device-security/security-policy-settings/load-and-unload-device-drivers): SeLoadDriverPrivilege

+

[Shut down the system](/windows/device-security/security-policy-settings/shut-down-the-system): SeShutdownPrivilege

@@ -3327,13 +3327,13 @@ This security group has not changed since Windows Server 2008.

Default User Rights

-

[Allow log on locally](allow-log-on-locally.md): SeInteractiveLogonRight

-

[Back up files and directories](back-up-files-and-directories.md): SeBackupPrivilege

-

[Change the system time](change-the-system-time.md): SeSystemTimePrivilege

-

[Change the time zone](change-the-time-zone.md): SeTimeZonePrivilege

-

[Force shutdown from a remote system](force-shutdown-from-a-remote-system.md): SeRemoteShutdownPrivilege

-

[Restore files and directories](restore-files-and-directories.md): Restore files and directories SeRestorePrivilege

-

[Shut down the system](shut-down-the-system.md): SeShutdownPrivilege

+

[Allow log on locally](/windows/device-security/security-policy-settings/allow-log-on-locally): SeInteractiveLogonRight

+

[Back up files and directories](/windows/device-security/security-policy-settings/back-up-files-and-directories): SeBackupPrivilege

+

[Change the system time](/windows/device-security/security-policy-settings/change-the-system-time): SeSystemTimePrivilege

+

[Change the time zone](/windows/device-security/security-policy-settings/change-the-time-zone): SeTimeZonePrivilege

+

[Force shutdown from a remote system](/windows/device-security/security-policy-settings/force-shutdown-from-a-remote-system): SeRemoteShutdownPrivilege

+

[Restore files and directories](/windows/device-security/security-policy-settings/restore-files-and-directories): Restore files and directories SeRestorePrivilege

+

[Shut down the system](/windows/device-security/security-policy-settings/shut-down-the-system): SeShutdownPrivilege

diff --git a/windows/keep-secure/dynamic-access-control.md b/windows/access-protection/access-control/dynamic-access-control.md similarity index 100% rename from windows/keep-secure/dynamic-access-control.md rename to windows/access-protection/access-control/dynamic-access-control.md diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample1.gif b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample1.gif similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample1.gif rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample1.gif diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample2.png b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample2.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample2.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample2.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample3.png b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample3.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample3.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample3.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample4.png b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample4.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample4.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample4.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample5.png b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample5.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample5.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample5.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample6.png b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample6.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample6.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample6.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc1-sample7.png b/windows/access-protection/access-control/images/adlocalaccounts-proc1-sample7.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc1-sample7.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc1-sample7.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample1.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample1.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample1.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample1.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample2.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample2.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample2.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample2.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample3.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample3.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample3.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample3.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample4.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample4.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample4.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample4.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample5.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample5.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample5.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample5.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample6.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample6.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample6.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample6.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc2-sample7.png b/windows/access-protection/access-control/images/adlocalaccounts-proc2-sample7.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc2-sample7.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc2-sample7.png diff --git a/windows/keep-secure/images/adlocalaccounts-proc3-sample1.png b/windows/access-protection/access-control/images/adlocalaccounts-proc3-sample1.png similarity index 100% rename from windows/keep-secure/images/adlocalaccounts-proc3-sample1.png rename to windows/access-protection/access-control/images/adlocalaccounts-proc3-sample1.png diff --git a/windows/keep-secure/images/authorizationandaccesscontrolprocess.gif b/windows/access-protection/access-control/images/authorizationandaccesscontrolprocess.gif similarity index 100% rename from windows/keep-secure/images/authorizationandaccesscontrolprocess.gif rename to windows/access-protection/access-control/images/authorizationandaccesscontrolprocess.gif diff --git a/windows/keep-secure/images/corpnet.gif b/windows/access-protection/access-control/images/corpnet.gif similarity index 100% rename from windows/keep-secure/images/corpnet.gif rename to windows/access-protection/access-control/images/corpnet.gif diff --git a/windows/keep-secure/images/localaccounts-proc1-sample1.png b/windows/access-protection/access-control/images/localaccounts-proc1-sample1.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc1-sample1.png rename to windows/access-protection/access-control/images/localaccounts-proc1-sample1.png diff --git a/windows/keep-secure/images/localaccounts-proc1-sample2.png b/windows/access-protection/access-control/images/localaccounts-proc1-sample2.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc1-sample2.png rename to windows/access-protection/access-control/images/localaccounts-proc1-sample2.png diff --git a/windows/keep-secure/images/localaccounts-proc1-sample3.png b/windows/access-protection/access-control/images/localaccounts-proc1-sample3.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc1-sample3.png rename to windows/access-protection/access-control/images/localaccounts-proc1-sample3.png diff --git a/windows/keep-secure/images/localaccounts-proc1-sample4.png b/windows/access-protection/access-control/images/localaccounts-proc1-sample4.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc1-sample4.png rename to windows/access-protection/access-control/images/localaccounts-proc1-sample4.png diff --git a/windows/keep-secure/images/localaccounts-proc1-sample5.png b/windows/access-protection/access-control/images/localaccounts-proc1-sample5.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc1-sample5.png rename to windows/access-protection/access-control/images/localaccounts-proc1-sample5.png diff --git a/windows/keep-secure/images/localaccounts-proc1-sample6.png b/windows/access-protection/access-control/images/localaccounts-proc1-sample6.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc1-sample6.png rename to windows/access-protection/access-control/images/localaccounts-proc1-sample6.png diff --git a/windows/keep-secure/images/localaccounts-proc2-sample1.png b/windows/access-protection/access-control/images/localaccounts-proc2-sample1.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc2-sample1.png rename to windows/access-protection/access-control/images/localaccounts-proc2-sample1.png diff --git a/windows/keep-secure/images/localaccounts-proc2-sample2.png b/windows/access-protection/access-control/images/localaccounts-proc2-sample2.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc2-sample2.png rename to windows/access-protection/access-control/images/localaccounts-proc2-sample2.png diff --git a/windows/keep-secure/images/localaccounts-proc2-sample3.png b/windows/access-protection/access-control/images/localaccounts-proc2-sample3.png similarity index 100% rename from windows/keep-secure/images/localaccounts-proc2-sample3.png rename to windows/access-protection/access-control/images/localaccounts-proc2-sample3.png diff --git a/windows/keep-secure/images/security-identifider-architecture.jpg b/windows/access-protection/access-control/images/security-identifider-architecture.jpg similarity index 100% rename from windows/keep-secure/images/security-identifider-architecture.jpg rename to windows/access-protection/access-control/images/security-identifider-architecture.jpg diff --git a/windows/keep-secure/local-accounts.md b/windows/access-protection/access-control/local-accounts.md similarity index 97% rename from windows/keep-secure/local-accounts.md rename to windows/access-protection/access-control/local-accounts.md index 3e50de5cc8..d0998ff99e 100644 --- a/windows/keep-secure/local-accounts.md +++ b/windows/access-protection/access-control/local-accounts.md @@ -123,7 +123,7 @@ By default, the Guest account is the only member of the default Guests group, wh When an administrator enables the Guest account, it is a best practice to create a strong password for this account. In addition, the administrator on the computer should also grant only limited rights and permissions for the Guest account. For security reasons, the Guest account should not be used over the network and made accessible to other computers. -When a computer is shutting down or starting up, it is possible that a guest user or anyone with local access could gain unauthorized access to the computer. To help prevent this risk, do not grant the Guest account the [Shut down the system](shut-down-the-system.md) user right. +When a computer is shutting down or starting up, it is possible that a guest user or anyone with local access could gain unauthorized access to the computer. To help prevent this risk, do not grant the Guest account the [Shut down the system](/windows/device-security/security-policy-settings/shut-down-the-system) user right. In addition, the guest user in the Guest account should not be able to view the event logs. After the Guest account is enabled, it is a best practice to monitor the Guest account frequently to ensure that other users cannot use services and other resources, such as resources that were unintentionally left available by a previous user. @@ -200,7 +200,7 @@ In addition, UAC can require administrators to specifically approve applications For example, a default feature of UAC is shown when a local account signs in from a remote computer by using Network logon (for example, by using NET.EXE USE). In this instance, it is issued a standard user token with no administrative rights, but with the ability to request or receive elevation. Consequently, local accounts that sign in by using Network logon cannot access administrative shares such as C$, or ADMIN$, or perform any remote administration. -For more information about UAC, see [User Account Control](user-account-control-overview.md). +For more information about UAC, see [User Account Control](/windows/access-protection/user-account-control/user-account-control-overview). The following table shows the Group Policy and registry settings that are used to enforce local account restrictions for remote access. @@ -224,7 +224,7 @@ The following table shows the Group Policy and registry settings that are used t

1

Policy name

-

[User Account Control: Run all administrators in Admin Approval Mode](user-account-control-run-all-administrators-in-admin-approval-mode.md)

+

[User Account Control: Run all administrators in Admin Approval Mode](/windows/device-security/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode)

@@ -239,7 +239,7 @@ The following table shows the Group Policy and registry settings that are used t

Policy name

-

[User Account Control: Run all administrators in Admin Approval Mode](user-account-control-run-all-administrators-in-admin-approval-mode.md)

+

[User Account Control: Run all administrators in Admin Approval Mode](/windows/device-security/security-policy-settings/user-account-control-run-all-administrators-in-admin-approval-mode)

@@ -368,7 +368,7 @@ The following table shows the Group Policy settings that are used to deny networ

1

Policy name

-

[Deny access to this computer from the network](deny-access-to-this-computer-from-the-network.md)

+

[Deny access to this computer from the network](/windows/device-security/security-policy-settings/deny-access-to-this-computer-from-the-network)

@@ -384,7 +384,7 @@ The following table shows the Group Policy settings that are used to deny networ

Policy name

-

[Deny log on through Remote Desktop Services](deny-log-on-through-remote-desktop-services.md)

+

[Deny log on through Remote Desktop Services](/windows/device-security/security-policy-settings/deny-log-on-through-remote-desktop-services)

diff --git a/windows/keep-secure/microsoft-accounts.md b/windows/access-protection/access-control/microsoft-accounts.md similarity index 95% rename from windows/keep-secure/microsoft-accounts.md rename to windows/access-protection/access-control/microsoft-accounts.md index 6bea7ac9aa..4b54894c21 100644 --- a/windows/keep-secure/microsoft-accounts.md +++ b/windows/access-protection/access-control/microsoft-accounts.md @@ -118,7 +118,7 @@ Depending on your IT and business models, introducing Microsoft accounts into yo ### Restrict the use of the Microsoft account -If employees are allowed to join the domain with their personal devices, they might expect to connect to enterprise resources by using their Microsoft accounts. If you want to prevent any use of Microsoft accounts within your enterprise, you can configure the local security policy setting [Accounts: Block Microsoft accounts](accounts-block-microsoft-accounts.md). However, this setting can prevent the users from signing in to their Windows devices with their Microsoft accounts (if they had set them up to do so) when they are joined to the domain. +If employees are allowed to join the domain with their personal devices, they might expect to connect to enterprise resources by using their Microsoft accounts. If you want to prevent any use of Microsoft accounts within your enterprise, you can configure the local security policy setting [Accounts: Block Microsoft accounts](/windows/device-security/security-policy-settings/accounts-block-microsoft-accounts). However, this setting can prevent the users from signing in to their Windows devices with their Microsoft accounts (if they had set them up to do so) when they are joined to the domain. The default for this setting is **Disabled**, which enables users to use their Microsoft accounts on devices that are joined to your domain. Other options in the setting can: @@ -151,7 +151,7 @@ Only the owner of the Microsoft account can change the password. Passwords can b ### Restrict app installation and usage -Within your organization, you can set application control policies to regulate app installation and usage for Microsoft accounts. For more information, see [AppLocker](applocker-overview.md) and [Packaged Apps and Packaged App Installer Rules in AppLocker](packaged-apps-and-packaged-app-installer-rules-in-applocker.md). +Within your organization, you can set application control policies to regulate app installation and usage for Microsoft accounts. For more information, see [AppLocker](/windows/device-security/applocker/applocker-overview) and [Packaged Apps and Packaged App Installer Rules in AppLocker](/windows/device-security/applocker/packaged-apps-and-packaged-app-installer-rules-in-applocker). ## See also diff --git a/windows/keep-secure/security-identifiers.md b/windows/access-protection/access-control/security-identifiers.md similarity index 100% rename from windows/keep-secure/security-identifiers.md rename to windows/access-protection/access-control/security-identifiers.md diff --git a/windows/keep-secure/security-principals.md b/windows/access-protection/access-control/security-principals.md similarity index 98% rename from windows/keep-secure/security-principals.md rename to windows/access-protection/access-control/security-principals.md index 8bf4f7abd7..0efda2d6b6 100644 --- a/windows/keep-secure/security-principals.md +++ b/windows/access-protection/access-control/security-principals.md @@ -83,7 +83,7 @@ Permissions are different from user rights in that permissions are attached to o On computers, user rights enable administrators to control who has the authority to perform operations that affect an entire computer, rather than a particular object. Administrators assign user rights to individual users or groups as part of the security settings for the computer. Although user rights can be managed centrally through Group Policy, they are applied locally. Users can (and usually do) have different user rights on different computers. -For information about which user rights are available and how they can be implemented, see [User Rights Assignment](user-rights-assignment.md). +For information about which user rights are available and how they can be implemented, see [User Rights Assignment](/windows/device-security/security-policy-settings/user-rights-assignment). ### Security context in authentication diff --git a/windows/keep-secure/service-accounts.md b/windows/access-protection/access-control/service-accounts.md similarity index 100% rename from windows/keep-secure/service-accounts.md rename to windows/access-protection/access-control/service-accounts.md diff --git a/windows/keep-secure/special-identities.md b/windows/access-protection/access-control/special-identities.md similarity index 86% rename from windows/keep-secure/special-identities.md rename to windows/access-protection/access-control/special-identities.md index 2e3aa71e3e..dde80b2a45 100644 --- a/windows/keep-secure/special-identities.md +++ b/windows/access-protection/access-control/special-identities.md @@ -145,9 +145,9 @@ Any user who accesses the system through a sign-in process has the Authenticated

Default User Rights

-

[Access this computer from the network](access-this-computer-from-the-network.md): SeNetworkLogonRight

-

[Add workstations to domain](add-workstations-to-domain.md): SeMachineAccountPrivilege

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

+

[Access this computer from the network](/windows/device-security/security-policy-settings/access-this-computer-from-the-network): SeNetworkLogonRight

+

[Add workstations to domain](/windows/device-security/security-policy-settings/add-workstations-to-domain): SeMachineAccountPrivilege

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

@@ -375,8 +375,8 @@ This group includes all domain controllers in an Active Directory forest. Domain

Default User Rights Assignment

-

[Access this computer from the network](access-this-computer-from-the-network.md): SeNetworkLogonRight

-

[Allow log on locally](allow-log-on-locally.md): SeInteractiveLogonRight

+

[Access this computer from the network](/windows/device-security/security-policy-settings/access-this-computer-from-the-network): SeNetworkLogonRight

+

[Allow log on locally](/windows/device-security/security-policy-settings/allow-log-on-locally): SeInteractiveLogonRight

@@ -418,9 +418,9 @@ Membership is controlled by the operating system.

Default User Rights

-

[Access this computer from the network](access-this-computer-from-the-network.md): SeNetworkLogonRight

-

[Act as part of the operating system](act-as-part-of-the-operating-system.md): SeTcbPrivilege

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

+

[Access this computer from the network](/windows/device-security/security-policy-settings/access-this-computer-from-the-network): SeNetworkLogonRight

+

[Act as part of the operating system](/windows/device-security/security-policy-settings/act-as-part-of-the-operating-system): SeTcbPrivilege

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

@@ -496,14 +496,14 @@ The Local Service account is similar to an Authenticated User account. The Local

Default user rights

-

[Adjust memory quotas for a process](adjust-memory-quotas-for-a-process.md): SeIncreaseQuotaPrivilege

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

-

[Change the system time](change-the-system-time.md): SeSystemtimePrivilege

-

[Change the time zone](change-the-time-zone.md): SeTimeZonePrivilege

-

[Create global objects](create-global-objects.md): SeCreateGlobalPrivilege

-

[Generate security audits](generate-security-audits.md): SeAuditPrivilege

-

[Impersonate a client after authentication](impersonate-a-client-after-authentication.md): SeImpersonatePrivilege

-

[Replace a process level token](replace-a-process-level-token.md): SeAssignPrimaryTokenPrivilege

+

[Adjust memory quotas for a process](/windows/device-security/security-policy-settings/adjust-memory-quotas-for-a-process): SeIncreaseQuotaPrivilege

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

+

[Change the system time](/windows/device-security/security-policy-settings/change-the-system-time): SeSystemtimePrivilege

+

[Change the time zone](/windows/device-security/security-policy-settings/change-the-time-zone): SeTimeZonePrivilege

+

[Create global objects](/windows/device-security/security-policy-settings/create-global-objects): SeCreateGlobalPrivilege

+

[Generate security audits](/windows/device-security/security-policy-settings/generate-security-audits): SeAuditPrivilege

+

[Impersonate a client after authentication](/windows/device-security/security-policy-settings/impersonate-a-client-after-authentication): SeImpersonatePrivilege

+

[Replace a process level token](/windows/device-security/security-policy-settings/replace-a-process-level-token): SeAssignPrimaryTokenPrivilege

@@ -617,13 +617,13 @@ The Network Service account is similar to an Authenticated User account. The Net

Default User Rights

-

[Adjust memory quotas for a process](adjust-memory-quotas-for-a-process.md): SeIncreaseQuotaPrivilege

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

-

[Create global objects](create-global-objects.md): SeCreateGlobalPrivilege

-

[Generate security audits](generate-security-audits.md): SeAuditPrivilege

-

[Impersonate a client after authentication](impersonate-a-client-after-authentication.md): SeImpersonatePrivilege

-

[Restore files and directories](restore-files-and-directories.md): SeRestorePrivilege

-

[Replace a process level token](replace-a-process-level-token.md): SeAssignPrimaryTokenPrivilege

+

[Adjust memory quotas for a process](/windows/device-security/security-policy-settings/adjust-memory-quotas-for-a-process): SeIncreaseQuotaPrivilege

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

+

[Create global objects](/windows/device-security/security-policy-settings/create-global-objects): SeCreateGlobalPrivilege

+

[Generate security audits](/windows/device-security/security-policy-settings/generate-security-audits): SeAuditPrivilege

+

[Impersonate a client after authentication](/windows/device-security/security-policy-settings/impersonate-a-client-after-authentication): SeImpersonatePrivilege

+

[Restore files and directories](/windows/device-security/security-policy-settings/restore-files-and-directories): SeRestorePrivilege

+

[Replace a process level token](/windows/device-security/security-policy-settings/replace-a-process-level-token): SeAssignPrimaryTokenPrivilege

@@ -885,8 +885,8 @@ Any service that accesses the system has the Service identity. This identity gro

Default User Rights

-

[Create global objects](create-global-objects.md): SeCreateGlobalPrivilege

-

[Impersonate a client after authentication](impersonate-a-client-after-authentication.md): SeImpersonatePrivilege

+

[Create global objects](/windows/device-security/security-policy-settings/create-global-objects): SeCreateGlobalPrivilege

+

[Impersonate a client after authentication](/windows/device-security/security-policy-settings/impersonate-a-client-after-authentication): SeImpersonatePrivilege

@@ -996,8 +996,8 @@ Any user accessing the system through Terminal Services has the Terminal Server

Default User Rights

-

[Bypass traverse checking](bypass-traverse-checking.md): SeChangeNotifyPrivilege

-

[Increase a process working set](increase-a-process-working-set.md): SeIncreaseWorkingSetPrivilege

+

[Bypass traverse checking](/windows/device-security/security-policy-settings/bypass-traverse-checking): SeChangeNotifyPrivilege

+

[Increase a process working set](/windows/device-security/security-policy-settings/increase-a-process-working-set): SeIncreaseWorkingSetPrivilege

diff --git a/windows/access-protection/change-history-for-access-protection.md b/windows/access-protection/change-history-for-access-protection.md new file mode 100644 index 0000000000..84f9f86663 --- /dev/null +++ b/windows/access-protection/change-history-for-access-protection.md @@ -0,0 +1,17 @@ +--- +title: Change history for access protection (Windows 10) +description: This topic lists new and updated topics in the Windows 10 access protection documentation for Windows 10 and Windows 10 Mobile. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +author: brianlic-msft +--- + +# Change history for access protection +This topic lists new and updated topics in the [Access protection](index.md) documentation. + +## March 2017 +|New or changed topic |Description | +|---------------------|------------| +|[Protect derived domain credentials with Credential Guard](credential-guard/credential-guard.md) |Updated to include additional security qualifications starting with Window 10, version 1703.| diff --git a/windows/keep-secure/configure-s-mime.md b/windows/access-protection/configure-s-mime.md similarity index 100% rename from windows/keep-secure/configure-s-mime.md rename to windows/access-protection/configure-s-mime.md diff --git a/windows/keep-secure/additional-mitigations.md b/windows/access-protection/credential-guard/additional-mitigations.md similarity index 100% rename from windows/keep-secure/additional-mitigations.md rename to windows/access-protection/credential-guard/additional-mitigations.md diff --git a/windows/keep-secure/credential-guard-considerations.md b/windows/access-protection/credential-guard/credential-guard-considerations.md similarity index 100% rename from windows/keep-secure/credential-guard-considerations.md rename to windows/access-protection/credential-guard/credential-guard-considerations.md diff --git a/windows/keep-secure/credential-guard-how-it-works.md b/windows/access-protection/credential-guard/credential-guard-how-it-works.md similarity index 100% rename from windows/keep-secure/credential-guard-how-it-works.md rename to windows/access-protection/credential-guard/credential-guard-how-it-works.md diff --git a/windows/keep-secure/credential-guard-manage.md b/windows/access-protection/credential-guard/credential-guard-manage.md similarity index 96% rename from windows/keep-secure/credential-guard-manage.md rename to windows/access-protection/credential-guard/credential-guard-manage.md index e4081028d7..44be2404c6 100644 --- a/windows/keep-secure/credential-guard-manage.md +++ b/windows/access-protection/credential-guard/credential-guard-manage.md @@ -19,7 +19,7 @@ Prefer video? See [Protecting privileged users with Credential Guard](https://mv in the Deep Dive into Credential Guard video series. ## Enable Credential Guard -Credential Guard can be enabled either by using [Group Policy](#turn-on-credential-guard-by-using-group-policy), the [registry](#turn-on-credential-guard-by-using-the-registry), or the Device Guard and Credential Guard [hardware readiness tool](#hardware-readiness-tool). Credential Guard can also protect secrets in a Hyper-V virtual machine, just as it would on a physical machine. +Credential Guard can be enabled either by using [Group Policy](#enable-credential-guard-by-using-group-policy), the [registry](#enable-credential-guard-by-using-the-registry), or the Device Guard and Credential Guard [hardware readiness tool](#hardware-readiness-tool). Credential Guard can also protect secrets in a Hyper-V virtual machine, just as it would on a physical machine. The same set of procedures used to enable Credential Guard on physical machines applies also to virtual machines. @@ -187,7 +187,7 @@ If you have to disable Credential Guard on a PC, you can use the following set o > [!NOTE] > The PC must have one-time access to a domain controller to decrypt content, such as files that were encrypted with EFS. If you want to turn off both Credential Guard and virtualization-based security, run the following bcdedit command after turning off all virtualization-based security Group Policy and registry settings: bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} loadoptions DISABLE-LSA-ISO,DISABLE-VBS -For more info on virtualization-based security and Device Guard, see [Device Guard deployment guide](device-guard-deployment-guide.md). +For more info on virtualization-based security and Device Guard, see [Device Guard deployment guide](/windows/device-security/device-guard/device-guard-deployment-guide). #### Disable Credential Guard by using the Device Guard and Credential Guard hardware readiness tool diff --git a/windows/keep-secure/credential-guard-not-protected-scenarios.md b/windows/access-protection/credential-guard/credential-guard-not-protected-scenarios.md similarity index 100% rename from windows/keep-secure/credential-guard-not-protected-scenarios.md rename to windows/access-protection/credential-guard/credential-guard-not-protected-scenarios.md diff --git a/windows/keep-secure/credential-guard-protection-limits.md b/windows/access-protection/credential-guard/credential-guard-protection-limits.md similarity index 100% rename from windows/keep-secure/credential-guard-protection-limits.md rename to windows/access-protection/credential-guard/credential-guard-protection-limits.md diff --git a/windows/keep-secure/credential-guard-requirements.md b/windows/access-protection/credential-guard/credential-guard-requirements.md similarity index 100% rename from windows/keep-secure/credential-guard-requirements.md rename to windows/access-protection/credential-guard/credential-guard-requirements.md diff --git a/windows/keep-secure/credential-guard-scripts.md b/windows/access-protection/credential-guard/credential-guard-scripts.md similarity index 100% rename from windows/keep-secure/credential-guard-scripts.md rename to windows/access-protection/credential-guard/credential-guard-scripts.md diff --git a/windows/keep-secure/credential-guard.md b/windows/access-protection/credential-guard/credential-guard.md similarity index 97% rename from windows/keep-secure/credential-guard.md rename to windows/access-protection/credential-guard/credential-guard.md index b36d3a7301..82c1f6b546 100644 --- a/windows/keep-secure/credential-guard.md +++ b/windows/access-protection/credential-guard/credential-guard.md @@ -37,7 +37,7 @@ By enabling Credential Guard, the following features and solutions are provided: - [Enabling Strict KDC Validation in Windows Kerberos](http://www.microsoft.com/download/details.aspx?id=6382) - [What's New in Kerberos Authentication for Windows Server 2012](http://technet.microsoft.com/library/hh831747.aspx) - [Authentication Mechanism Assurance for AD DS in Windows Server 2008 R2 Step-by-Step Guide](http://technet.microsoft.com/library/dd378897.aspx) -- [Trusted Platform Module](trusted-platform-module-overview.md) +- [Trusted Platform Module](/windows/device-security/tpm/trusted-platform-module-overview)   ## See also diff --git a/windows/keep-secure/images/credguard-gp.png b/windows/access-protection/credential-guard/images/credguard-gp.png similarity index 100% rename from windows/keep-secure/images/credguard-gp.png rename to windows/access-protection/credential-guard/images/credguard-gp.png diff --git a/windows/keep-secure/images/credguard-msinfo32.png b/windows/access-protection/credential-guard/images/credguard-msinfo32.png similarity index 100% rename from windows/keep-secure/images/credguard-msinfo32.png rename to windows/access-protection/credential-guard/images/credguard-msinfo32.png diff --git a/windows/keep-secure/images/credguard.png b/windows/access-protection/credential-guard/images/credguard.png similarity index 100% rename from windows/keep-secure/images/credguard.png rename to windows/access-protection/credential-guard/images/credguard.png diff --git a/windows/keep-secure/enterprise-certificate-pinning.md b/windows/access-protection/enterprise-certificate-pinning.md similarity index 99% rename from windows/keep-secure/enterprise-certificate-pinning.md rename to windows/access-protection/enterprise-certificate-pinning.md index b6b15f7df9..26876a7fac 100644 --- a/windows/keep-secure/enterprise-certificate-pinning.md +++ b/windows/access-protection/enterprise-certificate-pinning.md @@ -5,7 +5,6 @@ ms.author: mstephens author: MikeStephens-MS description: Enterprise certificate pinning is a Windows feature for remembering, or “pinning” a root, issuing certificate authority, or end entity certificate to a given domain name. manager: alanth -ms.date: 2016-12-27 ms.prod: w10 ms.technology: security ms.sitesec: library diff --git a/windows/keep-secure/hello-and-password-changes.md b/windows/access-protection/hello-for-business/hello-and-password-changes.md similarity index 96% rename from windows/keep-secure/hello-and-password-changes.md rename to windows/access-protection/hello-for-business/hello-and-password-changes.md index 336c82005d..33bc609550 100644 --- a/windows/keep-secure/hello-and-password-changes.md +++ b/windows/access-protection/hello-for-business/hello-and-password-changes.md @@ -25,7 +25,7 @@ Because you were using **Device A** when you changed your password, the PIN on * Suppose instead that you sign in on **Device B** and change your password for your Microsoft account. The next time that you try to sign in on **Device A** using your PIN, sign-in will fail because the account credentials that Hello on **Device A** knows will be outdated. >[!NOTE] ->This example also applies to an Active Directory account when [Windows Hello for Business is not implemented](implement-microsoft-passport-in-your-organization.md). +>This example also applies to an Active Directory account when [Windows Hello for Business is not implemented](hello-manage-in-organization.md).   ## How to update Hello after you change your password on another device diff --git a/windows/keep-secure/hello-biometrics-in-enterprise.md b/windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md similarity index 98% rename from windows/keep-secure/hello-biometrics-in-enterprise.md rename to windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md index c57043af82..cb9bfb63dd 100644 --- a/windows/keep-secure/hello-biometrics-in-enterprise.md +++ b/windows/access-protection/hello-for-business/hello-biometrics-in-enterprise.md @@ -35,7 +35,7 @@ Windows Hello provides many benefits, including: - Employees get a simple authentication method (backed up with a PIN) that’s always with them, so there’s nothing to lose. No more forgetting passwords! -- Support for Windows Hello is built into the operating system so you can add additional biometric devices and polices as part of a coordinated rollout or to individual employees or groups using Group Policy or Mobile Device Management (MDM) configurations service provider (CSP) policies.
For more info about the available Group Policies and MDM CSPs, see the [Implement Windows Hello for Business in your organization](implement-microsoft-passport-in-your-organization.md) topic. +- Support for Windows Hello is built into the operating system so you can add additional biometric devices and polices as part of a coordinated rollout or to individual employees or groups using Group Policy or Mobile Device Management (MDM) configurations service provider (CSP) policies.
For more info about the available Group Policies and MDM CSPs, see the [Implement Windows Hello for Business in your organization](hello-manage-in-organization.md) topic. ## Where is Microsoft Hello data stored? The biometric data used to support Windows Hello is stored on the local device only. It doesn’t roam and is never sent to external devices or servers. This separation helps to stop potential attackers by providing no single collection point that an attacker could potentially compromise to steal biometric data. Additionally, even if an attacker was actually able to get the biometric data, it still can’t be easily converted to a form that could be recognized by the biometric sensor. diff --git a/windows/keep-secure/hello-errors-during-pin-creation.md b/windows/access-protection/hello-for-business/hello-errors-during-pin-creation.md similarity index 100% rename from windows/keep-secure/hello-errors-during-pin-creation.md rename to windows/access-protection/hello-for-business/hello-errors-during-pin-creation.md diff --git a/windows/keep-secure/hello-event-300.md b/windows/access-protection/hello-for-business/hello-event-300.md similarity index 100% rename from windows/keep-secure/hello-event-300.md rename to windows/access-protection/hello-for-business/hello-event-300.md diff --git a/windows/keep-secure/hello-how-it-works.md b/windows/access-protection/hello-for-business/hello-how-it-works.md similarity index 100% rename from windows/keep-secure/hello-how-it-works.md rename to windows/access-protection/hello-for-business/hello-how-it-works.md diff --git a/windows/keep-secure/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md similarity index 100% rename from windows/keep-secure/hello-identity-verification.md rename to windows/access-protection/hello-for-business/hello-identity-verification.md diff --git a/windows/keep-secure/hello-manage-in-organization.md b/windows/access-protection/hello-for-business/hello-manage-in-organization.md similarity index 100% rename from windows/keep-secure/hello-manage-in-organization.md rename to windows/access-protection/hello-for-business/hello-manage-in-organization.md diff --git a/windows/keep-secure/hello-prepare-people-to-use.md b/windows/access-protection/hello-for-business/hello-prepare-people-to-use.md similarity index 100% rename from windows/keep-secure/hello-prepare-people-to-use.md rename to windows/access-protection/hello-for-business/hello-prepare-people-to-use.md diff --git a/windows/keep-secure/hello-why-pin-is-better-than-password.md b/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md similarity index 96% rename from windows/keep-secure/hello-why-pin-is-better-than-password.md rename to windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md index 516d264bef..00ead3c640 100644 --- a/windows/keep-secure/hello-why-pin-is-better-than-password.md +++ b/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password.md @@ -44,7 +44,7 @@ The TPM protects against a variety of known and potential attacks, including PIN ## PIN can be complex -The Windows Hello for Business PIN is subject to the same set of IT management policies as a password, such as complexity, length, expiration, and history. Although we generally think of a PIN as a simple four-digit code, administrators can set [policies](implement-microsoft-passport-in-your-organization.md) for managed devices to require a PIN complexity similar to a password. You can require or block: special characters, uppercase characters, lowercase characters, and digits. +The Windows Hello for Business PIN is subject to the same set of IT management policies as a password, such as complexity, length, expiration, and history. Although we generally think of a PIN as a simple four-digit code, administrators can set [policies](hello-manage-in-organization.md) for managed devices to require a PIN complexity similar to a password. You can require or block: special characters, uppercase characters, lowercase characters, and digits. ## What if someone steals the laptop or phone? diff --git a/windows/keep-secure/images/authflow.png b/windows/access-protection/hello-for-business/images/authflow.png similarity index 100% rename from windows/keep-secure/images/authflow.png rename to windows/access-protection/hello-for-business/images/authflow.png diff --git a/windows/keep-secure/images/connect.png b/windows/access-protection/hello-for-business/images/connect.png similarity index 100% rename from windows/keep-secure/images/connect.png rename to windows/access-protection/hello-for-business/images/connect.png diff --git a/windows/keep-secure/images/corpown.png b/windows/access-protection/hello-for-business/images/corpown.png similarity index 100% rename from windows/keep-secure/images/corpown.png rename to windows/access-protection/hello-for-business/images/corpown.png diff --git a/windows/keep-secure/images/hellosettings.png b/windows/access-protection/hello-for-business/images/hellosettings.png similarity index 100% rename from windows/keep-secure/images/hellosettings.png rename to windows/access-protection/hello-for-business/images/hellosettings.png diff --git a/windows/keep-secure/images/passport-fig3-logicalcontainer.png b/windows/access-protection/hello-for-business/images/passport-fig3-logicalcontainer.png similarity index 100% rename from windows/keep-secure/images/passport-fig3-logicalcontainer.png rename to windows/access-protection/hello-for-business/images/passport-fig3-logicalcontainer.png diff --git a/windows/keep-secure/images/pinerror.png b/windows/access-protection/hello-for-business/images/pinerror.png similarity index 100% rename from windows/keep-secure/images/pinerror.png rename to windows/access-protection/hello-for-business/images/pinerror.png diff --git a/windows/keep-secure/images/whfb-intune-reset-pin.jpg b/windows/access-protection/hello-for-business/images/whfb-intune-reset-pin.jpg similarity index 100% rename from windows/keep-secure/images/whfb-intune-reset-pin.jpg rename to windows/access-protection/hello-for-business/images/whfb-intune-reset-pin.jpg diff --git a/windows/keep-secure/images/whfb-pin-reset-phone-notification.png b/windows/access-protection/hello-for-business/images/whfb-pin-reset-phone-notification.png similarity index 100% rename from windows/keep-secure/images/whfb-pin-reset-phone-notification.png rename to windows/access-protection/hello-for-business/images/whfb-pin-reset-phone-notification.png diff --git a/windows/keep-secure/images/whfb-reset-pin-prompt.jpg b/windows/access-protection/hello-for-business/images/whfb-reset-pin-prompt.jpg similarity index 100% rename from windows/keep-secure/images/whfb-reset-pin-prompt.jpg rename to windows/access-protection/hello-for-business/images/whfb-reset-pin-prompt.jpg diff --git a/windows/keep-secure/images/whfb-reset-pin-settings.jpg b/windows/access-protection/hello-for-business/images/whfb-reset-pin-settings.jpg similarity index 100% rename from windows/keep-secure/images/whfb-reset-pin-settings.jpg rename to windows/access-protection/hello-for-business/images/whfb-reset-pin-settings.jpg diff --git a/windows/keep-secure/images/emailsecurity.png b/windows/access-protection/images/emailsecurity.png similarity index 100% rename from windows/keep-secure/images/emailsecurity.png rename to windows/access-protection/images/emailsecurity.png diff --git a/windows/keep-secure/images/enterprise-certificate-pinning-converting-a-duration.png b/windows/access-protection/images/enterprise-certificate-pinning-converting-a-duration.png similarity index 100% rename from windows/keep-secure/images/enterprise-certificate-pinning-converting-a-duration.png rename to windows/access-protection/images/enterprise-certificate-pinning-converting-a-duration.png diff --git a/windows/keep-secure/images/enterprise-certificate-pinning-converting-an-xml-date.png b/windows/access-protection/images/enterprise-certificate-pinning-converting-an-xml-date.png similarity index 100% rename from windows/keep-secure/images/enterprise-certificate-pinning-converting-an-xml-date.png rename to windows/access-protection/images/enterprise-certificate-pinning-converting-an-xml-date.png diff --git a/windows/keep-secure/images/enterprise-certificate-pinning-pinrules-properties.png b/windows/access-protection/images/enterprise-certificate-pinning-pinrules-properties.png similarity index 100% rename from windows/keep-secure/images/enterprise-certificate-pinning-pinrules-properties.png rename to windows/access-protection/images/enterprise-certificate-pinning-pinrules-properties.png diff --git a/windows/keep-secure/images/enterprise-certificate-pinning-representing-a-date.png b/windows/access-protection/images/enterprise-certificate-pinning-representing-a-date.png similarity index 100% rename from windows/keep-secure/images/enterprise-certificate-pinning-representing-a-date.png rename to windows/access-protection/images/enterprise-certificate-pinning-representing-a-date.png diff --git a/windows/keep-secure/images/enterprise-certificate-pinning-representing-a-duration.png b/windows/access-protection/images/enterprise-certificate-pinning-representing-a-duration.png similarity index 100% rename from windows/keep-secure/images/enterprise-certificate-pinning-representing-a-duration.png rename to windows/access-protection/images/enterprise-certificate-pinning-representing-a-duration.png diff --git a/windows/keep-secure/images/enterprise-pinning-registry-binary-information.png b/windows/access-protection/images/enterprise-pinning-registry-binary-information.png similarity index 100% rename from windows/keep-secure/images/enterprise-pinning-registry-binary-information.png rename to windows/access-protection/images/enterprise-pinning-registry-binary-information.png diff --git a/windows/keep-secure/images/installcert.png b/windows/access-protection/images/installcert.png similarity index 100% rename from windows/keep-secure/images/installcert.png rename to windows/access-protection/images/installcert.png diff --git a/windows/keep-secure/images/mailsettings.png b/windows/access-protection/images/mailsettings.png similarity index 100% rename from windows/keep-secure/images/mailsettings.png rename to windows/access-protection/images/mailsettings.png diff --git a/windows/keep-secure/images/remote-credential-guard-gp.png b/windows/access-protection/images/remote-credential-guard-gp.png similarity index 100% rename from windows/keep-secure/images/remote-credential-guard-gp.png rename to windows/access-protection/images/remote-credential-guard-gp.png diff --git a/windows/keep-secure/images/remote-credential-guard.png b/windows/access-protection/images/remote-credential-guard.png similarity index 100% rename from windows/keep-secure/images/remote-credential-guard.png rename to windows/access-protection/images/remote-credential-guard.png diff --git a/windows/keep-secure/images/security-stages.png b/windows/access-protection/images/security-stages.png similarity index 100% rename from windows/keep-secure/images/security-stages.png rename to windows/access-protection/images/security-stages.png diff --git a/windows/keep-secure/images/signencrypt.png b/windows/access-protection/images/signencrypt.png similarity index 100% rename from windows/keep-secure/images/signencrypt.png rename to windows/access-protection/images/signencrypt.png diff --git a/windows/access-protection/index.md b/windows/access-protection/index.md new file mode 100644 index 0000000000..7bb298b7a0 --- /dev/null +++ b/windows/access-protection/index.md @@ -0,0 +1,28 @@ +--- +title: Access protection (Windows 10) +description: Learn more about access protection technologies in Windows 10 and Windows 10 Mobile. +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +author: brianlic-msft +--- + +# Access protection + +Learn more about access protection technologies in Windows 10 and Windows 10 Mobile. + +| Section | Description | +|-|-| +| [Access control](access-control/access-control.md) | Describes access control in Windows, which is the process of authorizing users, groups, and computers to access objects on the network or computer. Key concepts that make up access control are permissions, ownership of objects, inheritance of permissions, user rights, and object auditing. | +| [Configure S/MIME for Windows 10 and Windows 10 Mobile](configure-s-mime.md) | In Windows 10, S/MIME lets users encrypt outgoing messages and attachments so that only intended recipients who have a digital identification (ID), also known as a certificate, can read them. Users can digitally sign a message, which provides the recipients with a way to verify the identity of the sender and that the message hasn't been tampered with. | +| [Install digital certificates on Windows 10 Mobile](installing-digital-certificates-on-windows-10-mobile.md) | Digital certificates bind the identity of a user or computer to a pair of keys that can be used to encrypt and sign digital information. Certificates are issued by a certification authority (CA) that vouches for the identity of the certificate holder, and they enable secure client communications with websites and services. | +| [Protect derived domain credentials with Credential Guard](credential-guard/credential-guard.md) | Introduced in Windows 10 Enterprise, Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Credential Guard helps prevent these attacks by protecting NTLM password hashes and Kerberos Ticket Granting Tickets. | +| [Protect Remote Desktop credentials with Remote Credential Guard](remote-credential-guard.md) | Remote Credential Guard helps you protect your credentials over a Remote Desktop connection by redirecting the Kerberos requests back to the device that's requesting the connection. | +| [User Account Control](user-account-control/user-account-control-overview.md)| Provides information about User Account Control (UAC), which helps prevent malware from damaging a PC and helps organizations deploy a better-managed desktop. UAC can help block the automatic installation of unauthorized apps and prevent inadvertent changes to system settings.| +| [Virtual Smart Cards](virtual-smart-cards/virtual-smart-card-overview.md) | Provides information about deploying and managing virtual smart cards, which are functionally similar to physical smart cards and appear in Windows as smart cards that are always-inserted. Virtual smart cards use the Trusted Platform Module (TPM) chip that is available on computers in many organizations, rather than requiring the use of a separate physical smart card and reader. | +| [VPN technical guide](vpn/vpn-guide.md) | Virtual private networks (VPN) let you give your users secure remote access to your company network. Windows 10 adds useful new VPN profile options to help you manage how users connect. | +| [Smart Cards](smart-cards/smart-card-windows-smart-card-technical-reference.md) | Provides a collection of references topics about smart cards, which are tamper-resistant portable storage devices that can enhance the security of tasks such as authenticating clients, signing code, securing e-mail, and signing in with a Windows domain account. | +| [Windows Hello for Business](hello-for-business/hello-identity-verification.md) | In Windows 10, Windows Hello replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and a biometric or PIN. | +| [Windows Firewall with Advanced Security](windows-firewall/windows-firewall-with-advanced-security.md) | Provides information about Windows Firewall with Advanced Security, which is an important part of a layered security model. By providing host-based, two-way network traffic filtering for a device, Windows Firewall with Advanced Security blocks unauthorized network traffic flowing into or out of the local device. | +| [Windows 10 Credential Theft Mitigation Guide Abstract](windows-credential-theft-mitigation-guide-abstract.md) | Learn more about credential theft mitigation in Windows 10. | \ No newline at end of file diff --git a/windows/keep-secure/installing-digital-certificates-on-windows-10-mobile.md b/windows/access-protection/installing-digital-certificates-on-windows-10-mobile.md similarity index 100% rename from windows/keep-secure/installing-digital-certificates-on-windows-10-mobile.md rename to windows/access-protection/installing-digital-certificates-on-windows-10-mobile.md diff --git a/windows/keep-secure/remote-credential-guard.md b/windows/access-protection/remote-credential-guard.md similarity index 100% rename from windows/keep-secure/remote-credential-guard.md rename to windows/access-protection/remote-credential-guard.md diff --git a/windows/keep-secure/images/sc-image101.png b/windows/access-protection/smart-cards/images/sc-image101.png similarity index 100% rename from windows/keep-secure/images/sc-image101.png rename to windows/access-protection/smart-cards/images/sc-image101.png diff --git a/windows/keep-secure/images/sc-image201.gif b/windows/access-protection/smart-cards/images/sc-image201.gif similarity index 100% rename from windows/keep-secure/images/sc-image201.gif rename to windows/access-protection/smart-cards/images/sc-image201.gif diff --git a/windows/keep-secure/images/sc-image203.gif b/windows/access-protection/smart-cards/images/sc-image203.gif similarity index 100% rename from windows/keep-secure/images/sc-image203.gif rename to windows/access-protection/smart-cards/images/sc-image203.gif diff --git a/windows/keep-secure/images/sc-image205.png b/windows/access-protection/smart-cards/images/sc-image205.png similarity index 100% rename from windows/keep-secure/images/sc-image205.png rename to windows/access-protection/smart-cards/images/sc-image205.png diff --git a/windows/keep-secure/images/sc-image206.gif b/windows/access-protection/smart-cards/images/sc-image206.gif similarity index 100% rename from windows/keep-secure/images/sc-image206.gif rename to windows/access-protection/smart-cards/images/sc-image206.gif diff --git a/windows/keep-secure/images/sc-image302.gif b/windows/access-protection/smart-cards/images/sc-image302.gif similarity index 100% rename from windows/keep-secure/images/sc-image302.gif rename to windows/access-protection/smart-cards/images/sc-image302.gif diff --git a/windows/keep-secure/images/sc-image402.png b/windows/access-protection/smart-cards/images/sc-image402.png similarity index 100% rename from windows/keep-secure/images/sc-image402.png rename to windows/access-protection/smart-cards/images/sc-image402.png diff --git a/windows/keep-secure/images/sc-image403.png b/windows/access-protection/smart-cards/images/sc-image403.png similarity index 100% rename from windows/keep-secure/images/sc-image403.png rename to windows/access-protection/smart-cards/images/sc-image403.png diff --git a/windows/keep-secure/images/sc-image404.png b/windows/access-protection/smart-cards/images/sc-image404.png similarity index 100% rename from windows/keep-secure/images/sc-image404.png rename to windows/access-protection/smart-cards/images/sc-image404.png diff --git a/windows/keep-secure/images/sc-image405.png b/windows/access-protection/smart-cards/images/sc-image405.png similarity index 100% rename from windows/keep-secure/images/sc-image405.png rename to windows/access-protection/smart-cards/images/sc-image405.png diff --git a/windows/keep-secure/images/sc-image406.png b/windows/access-protection/smart-cards/images/sc-image406.png similarity index 100% rename from windows/keep-secure/images/sc-image406.png rename to windows/access-protection/smart-cards/images/sc-image406.png diff --git a/windows/keep-secure/images/sc-image407.png b/windows/access-protection/smart-cards/images/sc-image407.png similarity index 100% rename from windows/keep-secure/images/sc-image407.png rename to windows/access-protection/smart-cards/images/sc-image407.png diff --git a/windows/keep-secure/images/sc-image501.gif b/windows/access-protection/smart-cards/images/sc-image501.gif similarity index 100% rename from windows/keep-secure/images/sc-image501.gif rename to windows/access-protection/smart-cards/images/sc-image501.gif diff --git a/windows/keep-secure/smart-card-and-remote-desktop-services.md b/windows/access-protection/smart-cards/smart-card-and-remote-desktop-services.md similarity index 100% rename from windows/keep-secure/smart-card-and-remote-desktop-services.md rename to windows/access-protection/smart-cards/smart-card-and-remote-desktop-services.md diff --git a/windows/keep-secure/smart-card-architecture.md b/windows/access-protection/smart-cards/smart-card-architecture.md similarity index 100% rename from windows/keep-secure/smart-card-architecture.md rename to windows/access-protection/smart-cards/smart-card-architecture.md diff --git a/windows/keep-secure/smart-card-certificate-propagation-service.md b/windows/access-protection/smart-cards/smart-card-certificate-propagation-service.md similarity index 100% rename from windows/keep-secure/smart-card-certificate-propagation-service.md rename to windows/access-protection/smart-cards/smart-card-certificate-propagation-service.md diff --git a/windows/keep-secure/smart-card-certificate-requirements-and-enumeration.md b/windows/access-protection/smart-cards/smart-card-certificate-requirements-and-enumeration.md similarity index 100% rename from windows/keep-secure/smart-card-certificate-requirements-and-enumeration.md rename to windows/access-protection/smart-cards/smart-card-certificate-requirements-and-enumeration.md diff --git a/windows/keep-secure/smart-card-debugging-information.md b/windows/access-protection/smart-cards/smart-card-debugging-information.md similarity index 100% rename from windows/keep-secure/smart-card-debugging-information.md rename to windows/access-protection/smart-cards/smart-card-debugging-information.md diff --git a/windows/keep-secure/smart-card-events.md b/windows/access-protection/smart-cards/smart-card-events.md similarity index 100% rename from windows/keep-secure/smart-card-events.md rename to windows/access-protection/smart-cards/smart-card-events.md diff --git a/windows/keep-secure/smart-card-group-policy-and-registry-settings.md b/windows/access-protection/smart-cards/smart-card-group-policy-and-registry-settings.md similarity index 100% rename from windows/keep-secure/smart-card-group-policy-and-registry-settings.md rename to windows/access-protection/smart-cards/smart-card-group-policy-and-registry-settings.md diff --git a/windows/keep-secure/smart-card-how-smart-card-sign-in-works-in-windows.md b/windows/access-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows.md similarity index 100% rename from windows/keep-secure/smart-card-how-smart-card-sign-in-works-in-windows.md rename to windows/access-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows.md diff --git a/windows/keep-secure/smart-card-removal-policy-service.md b/windows/access-protection/smart-cards/smart-card-removal-policy-service.md similarity index 100% rename from windows/keep-secure/smart-card-removal-policy-service.md rename to windows/access-protection/smart-cards/smart-card-removal-policy-service.md diff --git a/windows/keep-secure/smart-card-smart-cards-for-windows-service.md b/windows/access-protection/smart-cards/smart-card-smart-cards-for-windows-service.md similarity index 100% rename from windows/keep-secure/smart-card-smart-cards-for-windows-service.md rename to windows/access-protection/smart-cards/smart-card-smart-cards-for-windows-service.md diff --git a/windows/keep-secure/smart-card-tools-and-settings.md b/windows/access-protection/smart-cards/smart-card-tools-and-settings.md similarity index 100% rename from windows/keep-secure/smart-card-tools-and-settings.md rename to windows/access-protection/smart-cards/smart-card-tools-and-settings.md diff --git a/windows/keep-secure/smart-card-windows-smart-card-technical-reference.md b/windows/access-protection/smart-cards/smart-card-windows-smart-card-technical-reference.md similarity index 97% rename from windows/keep-secure/smart-card-windows-smart-card-technical-reference.md rename to windows/access-protection/smart-cards/smart-card-windows-smart-card-technical-reference.md index bb376178cb..ce2419f808 100644 --- a/windows/keep-secure/smart-card-windows-smart-card-technical-reference.md +++ b/windows/access-protection/smart-cards/smart-card-windows-smart-card-technical-reference.md @@ -36,7 +36,7 @@ Smart cards provide: Smart cards can be used to sign in to domain accounts only, not local accounts. When you use a password to sign in interactively to a domain account, Windows uses the Kerberos version 5 (v5) protocol for authentication. If you use a smart card, the operating system uses Kerberos v5 authentication with X.509 v3 certificates. -**Virtual smart cards** were introduced in Windows Server 2012 and Windows 8 to alleviate the need for a physical smart card, the smart card reader, and the associated administration of that hardware. For information about virtual smart card technology, see [Virtual Smart Card Overview](virtual-smart-card-overview.md). +**Virtual smart cards** were introduced in Windows Server 2012 and Windows 8 to alleviate the need for a physical smart card, the smart card reader, and the associated administration of that hardware. For information about virtual smart card technology, see [Virtual Smart Card Overview](../virtual-smart-cards/virtual-smart-card-overview.md). ## In this technical reference diff --git a/windows/keep-secure/how-user-account-control-works.md b/windows/access-protection/user-account-control/how-user-account-control-works.md similarity index 100% rename from windows/keep-secure/how-user-account-control-works.md rename to windows/access-protection/user-account-control/how-user-account-control-works.md diff --git a/windows/keep-secure/images/uacarchitecture.gif b/windows/access-protection/user-account-control/images/uacarchitecture.gif similarity index 100% rename from windows/keep-secure/images/uacarchitecture.gif rename to windows/access-protection/user-account-control/images/uacarchitecture.gif diff --git a/windows/keep-secure/images/uacconsentprompt.gif b/windows/access-protection/user-account-control/images/uacconsentprompt.gif similarity index 100% rename from windows/keep-secure/images/uacconsentprompt.gif rename to windows/access-protection/user-account-control/images/uacconsentprompt.gif diff --git a/windows/keep-secure/images/uaccredentialprompt.gif b/windows/access-protection/user-account-control/images/uaccredentialprompt.gif similarity index 100% rename from windows/keep-secure/images/uaccredentialprompt.gif rename to windows/access-protection/user-account-control/images/uaccredentialprompt.gif diff --git a/windows/keep-secure/images/uacshieldicon.png b/windows/access-protection/user-account-control/images/uacshieldicon.png similarity index 100% rename from windows/keep-secure/images/uacshieldicon.png rename to windows/access-protection/user-account-control/images/uacshieldicon.png diff --git a/windows/keep-secure/images/uacwindowslogonprocess.gif b/windows/access-protection/user-account-control/images/uacwindowslogonprocess.gif similarity index 100% rename from windows/keep-secure/images/uacwindowslogonprocess.gif rename to windows/access-protection/user-account-control/images/uacwindowslogonprocess.gif diff --git a/windows/keep-secure/user-account-control-group-policy-and-registry-key-settings.md b/windows/access-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings.md similarity index 99% rename from windows/keep-secure/user-account-control-group-policy-and-registry-key-settings.md rename to windows/access-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings.md index 2aa91da1a1..6ee117c85f 100644 --- a/windows/keep-secure/user-account-control-group-policy-and-registry-key-settings.md +++ b/windows/access-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings.md @@ -22,7 +22,7 @@ There are 10 Group Policy settings that can be configured for User Account Contr | Group Policy setting | Registry key | Default | | - | - | - | - | | [User Account Control: Admin Approval Mode for the built-in Administrator account](#user-account-control-admin-approval-mode-for-the-built-in-administrator-account) | FilterAdministratorToken | Disabled | -| [User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop](#user-account-control-allow-uiaccess-applications-to prompt-for-elevation-without-using-the-secure-desktop) | EnableUIADesktopToggle | Disabled | +| [User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop](#user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop) | EnableUIADesktopToggle | Disabled | | [User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode](#user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode) | ConsentPromptBehaviorAdmin | Prompt for consent for non-Windows binaries | | [User Account Control: Behavior of the elevation prompt for standard users](#user-account-control-behavior-of-the-elevation-prompt-for-standard-users) | ConsentPromptBehaviorUser | Prompt for credentials on the secure desktop | | [User Account Control: Detect application installations and prompt for elevation](#user-account-control-detect-application-installations-and-prompt-for-elevation) | EnableInstallerDetection | Enabled (default for home)
Disabled (default for enterprise) | diff --git a/windows/keep-secure/user-account-control-overview.md b/windows/access-protection/user-account-control/user-account-control-overview.md similarity index 95% rename from windows/keep-secure/user-account-control-overview.md rename to windows/access-protection/user-account-control/user-account-control-overview.md index 66f1abdc16..a273e12688 100644 --- a/windows/keep-secure/user-account-control-overview.md +++ b/windows/access-protection/user-account-control/user-account-control-overview.md @@ -28,9 +28,6 @@ When an app needs to run with more than standard user rights, UAC can restore ad Admin Approval Mode in UAC helps prevent malware from silently installing without an administrator's knowledge. It also helps protect from inadvertent system-wide changes. Lastly, it can be used to enforce a higher level of compliance where administrators must actively consent or provide credentials for each administrative process. -## New and changed functionality - -To find out what's new in UAC for Windows 10, see [User Account Control](../whats-new/user-account-control.md). ## In this section | Topic | Description | diff --git a/windows/keep-secure/user-account-control-security-policy-settings.md b/windows/access-protection/user-account-control/user-account-control-security-policy-settings.md similarity index 100% rename from windows/keep-secure/user-account-control-security-policy-settings.md rename to windows/access-protection/user-account-control/user-account-control-security-policy-settings.md diff --git a/windows/keep-secure/images/vsc-02-mmc-add-snap-in.png b/windows/access-protection/virtual-smart-cards/images/vsc-02-mmc-add-snap-in.png similarity index 100% rename from windows/keep-secure/images/vsc-02-mmc-add-snap-in.png rename to windows/access-protection/virtual-smart-cards/images/vsc-02-mmc-add-snap-in.png diff --git a/windows/keep-secure/images/vsc-03-add-certificate-templates-snap-in.png b/windows/access-protection/virtual-smart-cards/images/vsc-03-add-certificate-templates-snap-in.png similarity index 100% rename from windows/keep-secure/images/vsc-03-add-certificate-templates-snap-in.png rename to windows/access-protection/virtual-smart-cards/images/vsc-03-add-certificate-templates-snap-in.png diff --git a/windows/keep-secure/images/vsc-04-right-click-smartcard-logon-template.png b/windows/access-protection/virtual-smart-cards/images/vsc-04-right-click-smartcard-logon-template.png similarity index 100% rename from windows/keep-secure/images/vsc-04-right-click-smartcard-logon-template.png rename to windows/access-protection/virtual-smart-cards/images/vsc-04-right-click-smartcard-logon-template.png diff --git a/windows/keep-secure/images/vsc-05-certificate-template-compatibility.png b/windows/access-protection/virtual-smart-cards/images/vsc-05-certificate-template-compatibility.png similarity index 100% rename from windows/keep-secure/images/vsc-05-certificate-template-compatibility.png rename to windows/access-protection/virtual-smart-cards/images/vsc-05-certificate-template-compatibility.png diff --git a/windows/keep-secure/images/vsc-06-add-certification-authority-snap-in.png b/windows/access-protection/virtual-smart-cards/images/vsc-06-add-certification-authority-snap-in.png similarity index 100% rename from windows/keep-secure/images/vsc-06-add-certification-authority-snap-in.png rename to windows/access-protection/virtual-smart-cards/images/vsc-06-add-certification-authority-snap-in.png diff --git a/windows/keep-secure/images/vsc-07-right-click-certificate-templates.png b/windows/access-protection/virtual-smart-cards/images/vsc-07-right-click-certificate-templates.png similarity index 100% rename from windows/keep-secure/images/vsc-07-right-click-certificate-templates.png rename to windows/access-protection/virtual-smart-cards/images/vsc-07-right-click-certificate-templates.png diff --git a/windows/keep-secure/images/vsc-08-enable-certificate-template.png b/windows/access-protection/virtual-smart-cards/images/vsc-08-enable-certificate-template.png similarity index 100% rename from windows/keep-secure/images/vsc-08-enable-certificate-template.png rename to windows/access-protection/virtual-smart-cards/images/vsc-08-enable-certificate-template.png diff --git a/windows/keep-secure/images/vsc-09-stop-service-start-service.png b/windows/access-protection/virtual-smart-cards/images/vsc-09-stop-service-start-service.png similarity index 100% rename from windows/keep-secure/images/vsc-09-stop-service-start-service.png rename to windows/access-protection/virtual-smart-cards/images/vsc-09-stop-service-start-service.png diff --git a/windows/keep-secure/images/vsc-10-cmd-run-as-administrator.png b/windows/access-protection/virtual-smart-cards/images/vsc-10-cmd-run-as-administrator.png similarity index 100% rename from windows/keep-secure/images/vsc-10-cmd-run-as-administrator.png rename to windows/access-protection/virtual-smart-cards/images/vsc-10-cmd-run-as-administrator.png diff --git a/windows/keep-secure/images/vsc-11-certificates-request-new-certificate.png b/windows/access-protection/virtual-smart-cards/images/vsc-11-certificates-request-new-certificate.png similarity index 100% rename from windows/keep-secure/images/vsc-11-certificates-request-new-certificate.png rename to windows/access-protection/virtual-smart-cards/images/vsc-11-certificates-request-new-certificate.png diff --git a/windows/keep-secure/images/vsc-12-certificate-enrollment-select-certificate.png b/windows/access-protection/virtual-smart-cards/images/vsc-12-certificate-enrollment-select-certificate.png similarity index 100% rename from windows/keep-secure/images/vsc-12-certificate-enrollment-select-certificate.png rename to windows/access-protection/virtual-smart-cards/images/vsc-12-certificate-enrollment-select-certificate.png diff --git a/windows/keep-secure/images/vsc-physical-smart-card-lifecycle.png b/windows/access-protection/virtual-smart-cards/images/vsc-physical-smart-card-lifecycle.png similarity index 100% rename from windows/keep-secure/images/vsc-physical-smart-card-lifecycle.png rename to windows/access-protection/virtual-smart-cards/images/vsc-physical-smart-card-lifecycle.png diff --git a/windows/keep-secure/images/vsc-process-of-accessing-user-key.png b/windows/access-protection/virtual-smart-cards/images/vsc-process-of-accessing-user-key.png similarity index 100% rename from windows/keep-secure/images/vsc-process-of-accessing-user-key.png rename to windows/access-protection/virtual-smart-cards/images/vsc-process-of-accessing-user-key.png diff --git a/windows/keep-secure/images/vsc-virtual-smart-card-icon.png b/windows/access-protection/virtual-smart-cards/images/vsc-virtual-smart-card-icon.png similarity index 100% rename from windows/keep-secure/images/vsc-virtual-smart-card-icon.png rename to windows/access-protection/virtual-smart-cards/images/vsc-virtual-smart-card-icon.png diff --git a/windows/keep-secure/virtual-smart-card-deploy-virtual-smart-cards.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-deploy-virtual-smart-cards.md similarity index 100% rename from windows/keep-secure/virtual-smart-card-deploy-virtual-smart-cards.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-deploy-virtual-smart-cards.md diff --git a/windows/keep-secure/virtual-smart-card-evaluate-security.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-evaluate-security.md similarity index 100% rename from windows/keep-secure/virtual-smart-card-evaluate-security.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-evaluate-security.md diff --git a/windows/keep-secure/virtual-smart-card-get-started.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-get-started.md similarity index 100% rename from windows/keep-secure/virtual-smart-card-get-started.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-get-started.md diff --git a/windows/keep-secure/virtual-smart-card-overview.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-overview.md similarity index 99% rename from windows/keep-secure/virtual-smart-card-overview.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-overview.md index 54e8c6f4d2..4ff1788ca5 100644 --- a/windows/keep-secure/virtual-smart-card-overview.md +++ b/windows/access-protection/virtual-smart-cards/virtual-smart-card-overview.md @@ -16,7 +16,7 @@ This topic for IT professional provides an overview of the virtual smart card te **Did you mean…** -- [Smart Cards](smart-card-windows-smart-card-technical-reference.md) +- [Smart Cards](../smart-cards/smart-card-windows-smart-card-technical-reference.md) ## Feature description diff --git a/windows/keep-secure/virtual-smart-card-tpmvscmgr.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md similarity index 100% rename from windows/keep-secure/virtual-smart-card-tpmvscmgr.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md diff --git a/windows/keep-secure/virtual-smart-card-understanding-and-evaluating.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-understanding-and-evaluating.md similarity index 100% rename from windows/keep-secure/virtual-smart-card-understanding-and-evaluating.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-understanding-and-evaluating.md diff --git a/windows/keep-secure/virtual-smart-card-use-virtual-smart-cards.md b/windows/access-protection/virtual-smart-cards/virtual-smart-card-use-virtual-smart-cards.md similarity index 100% rename from windows/keep-secure/virtual-smart-card-use-virtual-smart-cards.md rename to windows/access-protection/virtual-smart-cards/virtual-smart-card-use-virtual-smart-cards.md diff --git a/windows/keep-secure/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md b/windows/access-protection/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md similarity index 100% rename from windows/keep-secure/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md rename to windows/access-protection/vpn/how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md diff --git a/windows/keep-secure/images/vpn-app-rules.png b/windows/access-protection/vpn/images/vpn-app-rules.png similarity index 100% rename from windows/keep-secure/images/vpn-app-rules.png rename to windows/access-protection/vpn/images/vpn-app-rules.png diff --git a/windows/keep-secure/images/vpn-app-trigger.PNG b/windows/access-protection/vpn/images/vpn-app-trigger.PNG similarity index 100% rename from windows/keep-secure/images/vpn-app-trigger.PNG rename to windows/access-protection/vpn/images/vpn-app-trigger.PNG diff --git a/windows/keep-secure/images/vpn-conditional-access-intune.png b/windows/access-protection/vpn/images/vpn-conditional-access-intune.png similarity index 100% rename from windows/keep-secure/images/vpn-conditional-access-intune.png rename to windows/access-protection/vpn/images/vpn-conditional-access-intune.png diff --git a/windows/keep-secure/images/vpn-connection-intune.png b/windows/access-protection/vpn/images/vpn-connection-intune.png similarity index 100% rename from windows/keep-secure/images/vpn-connection-intune.png rename to windows/access-protection/vpn/images/vpn-connection-intune.png diff --git a/windows/keep-secure/images/vpn-connection.png b/windows/access-protection/vpn/images/vpn-connection.png similarity index 100% rename from windows/keep-secure/images/vpn-connection.png rename to windows/access-protection/vpn/images/vpn-connection.png diff --git a/windows/keep-secure/images/vpn-custom-xml-intune.png b/windows/access-protection/vpn/images/vpn-custom-xml-intune.png similarity index 100% rename from windows/keep-secure/images/vpn-custom-xml-intune.png rename to windows/access-protection/vpn/images/vpn-custom-xml-intune.png diff --git a/windows/keep-secure/images/vpn-device-compliance.png b/windows/access-protection/vpn/images/vpn-device-compliance.png similarity index 100% rename from windows/keep-secure/images/vpn-device-compliance.png rename to windows/access-protection/vpn/images/vpn-device-compliance.png diff --git a/windows/keep-secure/images/vpn-eap-xml.png b/windows/access-protection/vpn/images/vpn-eap-xml.png similarity index 100% rename from windows/keep-secure/images/vpn-eap-xml.png rename to windows/access-protection/vpn/images/vpn-eap-xml.png diff --git a/windows/keep-secure/images/vpn-intune-policy.png b/windows/access-protection/vpn/images/vpn-intune-policy.png similarity index 100% rename from windows/keep-secure/images/vpn-intune-policy.png rename to windows/access-protection/vpn/images/vpn-intune-policy.png diff --git a/windows/keep-secure/images/vpn-name-intune.png b/windows/access-protection/vpn/images/vpn-name-intune.png similarity index 100% rename from windows/keep-secure/images/vpn-name-intune.png rename to windows/access-protection/vpn/images/vpn-name-intune.png diff --git a/windows/keep-secure/images/vpn-profilexml-intune.png b/windows/access-protection/vpn/images/vpn-profilexml-intune.png similarity index 100% rename from windows/keep-secure/images/vpn-profilexml-intune.png rename to windows/access-protection/vpn/images/vpn-profilexml-intune.png diff --git a/windows/keep-secure/images/vpn-split-route.png b/windows/access-protection/vpn/images/vpn-split-route.png similarity index 100% rename from windows/keep-secure/images/vpn-split-route.png rename to windows/access-protection/vpn/images/vpn-split-route.png diff --git a/windows/keep-secure/images/vpn-split.png b/windows/access-protection/vpn/images/vpn-split.png similarity index 100% rename from windows/keep-secure/images/vpn-split.png rename to windows/access-protection/vpn/images/vpn-split.png diff --git a/windows/keep-secure/images/vpn-traffic-rules.png b/windows/access-protection/vpn/images/vpn-traffic-rules.png similarity index 100% rename from windows/keep-secure/images/vpn-traffic-rules.png rename to windows/access-protection/vpn/images/vpn-traffic-rules.png diff --git a/windows/keep-secure/vpn-authentication.md b/windows/access-protection/vpn/vpn-authentication.md similarity index 100% rename from windows/keep-secure/vpn-authentication.md rename to windows/access-protection/vpn/vpn-authentication.md diff --git a/windows/keep-secure/vpn-auto-trigger-profile.md b/windows/access-protection/vpn/vpn-auto-trigger-profile.md similarity index 100% rename from windows/keep-secure/vpn-auto-trigger-profile.md rename to windows/access-protection/vpn/vpn-auto-trigger-profile.md diff --git a/windows/keep-secure/vpn-conditional-access.md b/windows/access-protection/vpn/vpn-conditional-access.md similarity index 100% rename from windows/keep-secure/vpn-conditional-access.md rename to windows/access-protection/vpn/vpn-conditional-access.md diff --git a/windows/keep-secure/vpn-connection-type.md b/windows/access-protection/vpn/vpn-connection-type.md similarity index 100% rename from windows/keep-secure/vpn-connection-type.md rename to windows/access-protection/vpn/vpn-connection-type.md diff --git a/windows/keep-secure/vpn-guide.md b/windows/access-protection/vpn/vpn-guide.md similarity index 100% rename from windows/keep-secure/vpn-guide.md rename to windows/access-protection/vpn/vpn-guide.md diff --git a/windows/keep-secure/vpn-name-resolution.md b/windows/access-protection/vpn/vpn-name-resolution.md similarity index 100% rename from windows/keep-secure/vpn-name-resolution.md rename to windows/access-protection/vpn/vpn-name-resolution.md diff --git a/windows/keep-secure/vpn-profile-options.md b/windows/access-protection/vpn/vpn-profile-options.md similarity index 100% rename from windows/keep-secure/vpn-profile-options.md rename to windows/access-protection/vpn/vpn-profile-options.md diff --git a/windows/keep-secure/vpn-routing.md b/windows/access-protection/vpn/vpn-routing.md similarity index 100% rename from windows/keep-secure/vpn-routing.md rename to windows/access-protection/vpn/vpn-routing.md diff --git a/windows/keep-secure/vpn-security-features.md b/windows/access-protection/vpn/vpn-security-features.md similarity index 96% rename from windows/keep-secure/vpn-security-features.md rename to windows/access-protection/vpn/vpn-security-features.md index 93238fc9ca..5fd8b19932 100644 --- a/windows/keep-secure/vpn-security-features.md +++ b/windows/access-protection/vpn/vpn-security-features.md @@ -49,7 +49,7 @@ The value of the **EdpModeId** is an Enterprise ID. The networking stack will lo Additionally, when connecting with WIP, the admin does not have to specify AppTriggerList and TrafficFilterList rules separately in this profile (unless more advanced configuration is needed) because the WIP policies and App lists automatically take effect. -[Learn more about Windows Information Protection](protect-enterprise-data-using-wip.md) +[Learn more about Windows Information Protection](/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip) ## Traffic filters diff --git a/windows/keep-secure/windows-credential-theft-mitigation-guide-abstract.md b/windows/access-protection/windows-credential-theft-mitigation-guide-abstract.md similarity index 100% rename from windows/keep-secure/windows-credential-theft-mitigation-guide-abstract.md rename to windows/access-protection/windows-credential-theft-mitigation-guide-abstract.md diff --git a/windows/keep-secure/add-production-devices-to-the-membership-group-for-a-zone.md b/windows/access-protection/windows-firewall/add-production-devices-to-the-membership-group-for-a-zone.md similarity index 100% rename from windows/keep-secure/add-production-devices-to-the-membership-group-for-a-zone.md rename to windows/access-protection/windows-firewall/add-production-devices-to-the-membership-group-for-a-zone.md diff --git a/windows/keep-secure/add-test-devices-to-the-membership-group-for-a-zone.md b/windows/access-protection/windows-firewall/add-test-devices-to-the-membership-group-for-a-zone.md similarity index 100% rename from windows/keep-secure/add-test-devices-to-the-membership-group-for-a-zone.md rename to windows/access-protection/windows-firewall/add-test-devices-to-the-membership-group-for-a-zone.md diff --git a/windows/keep-secure/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md b/windows/access-protection/windows-firewall/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md similarity index 100% rename from windows/keep-secure/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md rename to windows/access-protection/windows-firewall/appendix-a-sample-gpo-template-files-for-settings-used-in-this-guide.md diff --git a/windows/keep-secure/assign-security-group-filters-to-the-gpo.md b/windows/access-protection/windows-firewall/assign-security-group-filters-to-the-gpo.md similarity index 100% rename from windows/keep-secure/assign-security-group-filters-to-the-gpo.md rename to windows/access-protection/windows-firewall/assign-security-group-filters-to-the-gpo.md diff --git a/windows/keep-secure/basic-firewall-policy-design.md b/windows/access-protection/windows-firewall/basic-firewall-policy-design.md similarity index 100% rename from windows/keep-secure/basic-firewall-policy-design.md rename to windows/access-protection/windows-firewall/basic-firewall-policy-design.md diff --git a/windows/keep-secure/boundary-zone-gpos.md b/windows/access-protection/windows-firewall/boundary-zone-gpos.md similarity index 100% rename from windows/keep-secure/boundary-zone-gpos.md rename to windows/access-protection/windows-firewall/boundary-zone-gpos.md diff --git a/windows/keep-secure/boundary-zone.md b/windows/access-protection/windows-firewall/boundary-zone.md similarity index 100% rename from windows/keep-secure/boundary-zone.md rename to windows/access-protection/windows-firewall/boundary-zone.md diff --git a/windows/keep-secure/certificate-based-isolation-policy-design-example.md b/windows/access-protection/windows-firewall/certificate-based-isolation-policy-design-example.md similarity index 100% rename from windows/keep-secure/certificate-based-isolation-policy-design-example.md rename to windows/access-protection/windows-firewall/certificate-based-isolation-policy-design-example.md diff --git a/windows/keep-secure/certificate-based-isolation-policy-design.md b/windows/access-protection/windows-firewall/certificate-based-isolation-policy-design.md similarity index 100% rename from windows/keep-secure/certificate-based-isolation-policy-design.md rename to windows/access-protection/windows-firewall/certificate-based-isolation-policy-design.md diff --git a/windows/keep-secure/change-rules-from-request-to-require-mode.md b/windows/access-protection/windows-firewall/change-rules-from-request-to-require-mode.md similarity index 100% rename from windows/keep-secure/change-rules-from-request-to-require-mode.md rename to windows/access-protection/windows-firewall/change-rules-from-request-to-require-mode.md diff --git a/windows/keep-secure/checklist-configuring-basic-firewall-settings.md b/windows/access-protection/windows-firewall/checklist-configuring-basic-firewall-settings.md similarity index 100% rename from windows/keep-secure/checklist-configuring-basic-firewall-settings.md rename to windows/access-protection/windows-firewall/checklist-configuring-basic-firewall-settings.md diff --git a/windows/keep-secure/checklist-configuring-rules-for-an-isolated-server-zone.md b/windows/access-protection/windows-firewall/checklist-configuring-rules-for-an-isolated-server-zone.md similarity index 100% rename from windows/keep-secure/checklist-configuring-rules-for-an-isolated-server-zone.md rename to windows/access-protection/windows-firewall/checklist-configuring-rules-for-an-isolated-server-zone.md diff --git a/windows/keep-secure/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md b/windows/access-protection/windows-firewall/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md similarity index 100% rename from windows/keep-secure/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md rename to windows/access-protection/windows-firewall/checklist-configuring-rules-for-servers-in-a-standalone-isolated-server-zone.md diff --git a/windows/keep-secure/checklist-configuring-rules-for-the-boundary-zone.md b/windows/access-protection/windows-firewall/checklist-configuring-rules-for-the-boundary-zone.md similarity index 100% rename from windows/keep-secure/checklist-configuring-rules-for-the-boundary-zone.md rename to windows/access-protection/windows-firewall/checklist-configuring-rules-for-the-boundary-zone.md diff --git a/windows/keep-secure/checklist-configuring-rules-for-the-encryption-zone.md b/windows/access-protection/windows-firewall/checklist-configuring-rules-for-the-encryption-zone.md similarity index 100% rename from windows/keep-secure/checklist-configuring-rules-for-the-encryption-zone.md rename to windows/access-protection/windows-firewall/checklist-configuring-rules-for-the-encryption-zone.md diff --git a/windows/keep-secure/checklist-configuring-rules-for-the-isolated-domain.md b/windows/access-protection/windows-firewall/checklist-configuring-rules-for-the-isolated-domain.md similarity index 100% rename from windows/keep-secure/checklist-configuring-rules-for-the-isolated-domain.md rename to windows/access-protection/windows-firewall/checklist-configuring-rules-for-the-isolated-domain.md diff --git a/windows/keep-secure/checklist-creating-group-policy-objects.md b/windows/access-protection/windows-firewall/checklist-creating-group-policy-objects.md similarity index 100% rename from windows/keep-secure/checklist-creating-group-policy-objects.md rename to windows/access-protection/windows-firewall/checklist-creating-group-policy-objects.md diff --git a/windows/keep-secure/checklist-creating-inbound-firewall-rules.md b/windows/access-protection/windows-firewall/checklist-creating-inbound-firewall-rules.md similarity index 100% rename from windows/keep-secure/checklist-creating-inbound-firewall-rules.md rename to windows/access-protection/windows-firewall/checklist-creating-inbound-firewall-rules.md diff --git a/windows/keep-secure/checklist-creating-outbound-firewall-rules.md b/windows/access-protection/windows-firewall/checklist-creating-outbound-firewall-rules.md similarity index 100% rename from windows/keep-secure/checklist-creating-outbound-firewall-rules.md rename to windows/access-protection/windows-firewall/checklist-creating-outbound-firewall-rules.md diff --git a/windows/keep-secure/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md b/windows/access-protection/windows-firewall/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md similarity index 100% rename from windows/keep-secure/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md rename to windows/access-protection/windows-firewall/checklist-creating-rules-for-clients-of-a-standalone-isolated-server-zone.md diff --git a/windows/keep-secure/checklist-implementing-a-basic-firewall-policy-design.md b/windows/access-protection/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md similarity index 100% rename from windows/keep-secure/checklist-implementing-a-basic-firewall-policy-design.md rename to windows/access-protection/windows-firewall/checklist-implementing-a-basic-firewall-policy-design.md diff --git a/windows/keep-secure/checklist-implementing-a-certificate-based-isolation-policy-design.md b/windows/access-protection/windows-firewall/checklist-implementing-a-certificate-based-isolation-policy-design.md similarity index 100% rename from windows/keep-secure/checklist-implementing-a-certificate-based-isolation-policy-design.md rename to windows/access-protection/windows-firewall/checklist-implementing-a-certificate-based-isolation-policy-design.md diff --git a/windows/keep-secure/checklist-implementing-a-domain-isolation-policy-design.md b/windows/access-protection/windows-firewall/checklist-implementing-a-domain-isolation-policy-design.md similarity index 100% rename from windows/keep-secure/checklist-implementing-a-domain-isolation-policy-design.md rename to windows/access-protection/windows-firewall/checklist-implementing-a-domain-isolation-policy-design.md diff --git a/windows/keep-secure/checklist-implementing-a-standalone-server-isolation-policy-design.md b/windows/access-protection/windows-firewall/checklist-implementing-a-standalone-server-isolation-policy-design.md similarity index 100% rename from windows/keep-secure/checklist-implementing-a-standalone-server-isolation-policy-design.md rename to windows/access-protection/windows-firewall/checklist-implementing-a-standalone-server-isolation-policy-design.md diff --git a/windows/keep-secure/configure-authentication-methods.md b/windows/access-protection/windows-firewall/configure-authentication-methods.md similarity index 100% rename from windows/keep-secure/configure-authentication-methods.md rename to windows/access-protection/windows-firewall/configure-authentication-methods.md diff --git a/windows/keep-secure/configure-data-protection-quick-mode-settings.md b/windows/access-protection/windows-firewall/configure-data-protection-quick-mode-settings.md similarity index 100% rename from windows/keep-secure/configure-data-protection-quick-mode-settings.md rename to windows/access-protection/windows-firewall/configure-data-protection-quick-mode-settings.md diff --git a/windows/keep-secure/configure-group-policy-to-autoenroll-and-deploy-certificates.md b/windows/access-protection/windows-firewall/configure-group-policy-to-autoenroll-and-deploy-certificates.md similarity index 100% rename from windows/keep-secure/configure-group-policy-to-autoenroll-and-deploy-certificates.md rename to windows/access-protection/windows-firewall/configure-group-policy-to-autoenroll-and-deploy-certificates.md diff --git a/windows/keep-secure/configure-key-exchange-main-mode-settings.md b/windows/access-protection/windows-firewall/configure-key-exchange-main-mode-settings.md similarity index 100% rename from windows/keep-secure/configure-key-exchange-main-mode-settings.md rename to windows/access-protection/windows-firewall/configure-key-exchange-main-mode-settings.md diff --git a/windows/keep-secure/configure-the-rules-to-require-encryption.md b/windows/access-protection/windows-firewall/configure-the-rules-to-require-encryption.md similarity index 100% rename from windows/keep-secure/configure-the-rules-to-require-encryption.md rename to windows/access-protection/windows-firewall/configure-the-rules-to-require-encryption.md diff --git a/windows/keep-secure/configure-the-windows-firewall-log.md b/windows/access-protection/windows-firewall/configure-the-windows-firewall-log.md similarity index 100% rename from windows/keep-secure/configure-the-windows-firewall-log.md rename to windows/access-protection/windows-firewall/configure-the-windows-firewall-log.md diff --git a/windows/keep-secure/configure-the-workstation-authentication-certificate-template.md b/windows/access-protection/windows-firewall/configure-the-workstation-authentication-certificate-template.md similarity index 100% rename from windows/keep-secure/configure-the-workstation-authentication-certificate-template.md rename to windows/access-protection/windows-firewall/configure-the-workstation-authentication-certificate-template.md diff --git a/windows/keep-secure/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md b/windows/access-protection/windows-firewall/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md similarity index 100% rename from windows/keep-secure/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md rename to windows/access-protection/windows-firewall/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md diff --git a/windows/keep-secure/confirm-that-certificates-are-deployed-correctly.md b/windows/access-protection/windows-firewall/confirm-that-certificates-are-deployed-correctly.md similarity index 100% rename from windows/keep-secure/confirm-that-certificates-are-deployed-correctly.md rename to windows/access-protection/windows-firewall/confirm-that-certificates-are-deployed-correctly.md diff --git a/windows/keep-secure/copy-a-gpo-to-create-a-new-gpo.md b/windows/access-protection/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md similarity index 100% rename from windows/keep-secure/copy-a-gpo-to-create-a-new-gpo.md rename to windows/access-protection/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md diff --git a/windows/keep-secure/create-a-group-account-in-active-directory.md b/windows/access-protection/windows-firewall/create-a-group-account-in-active-directory.md similarity index 100% rename from windows/keep-secure/create-a-group-account-in-active-directory.md rename to windows/access-protection/windows-firewall/create-a-group-account-in-active-directory.md diff --git a/windows/keep-secure/create-a-group-policy-object.md b/windows/access-protection/windows-firewall/create-a-group-policy-object.md similarity index 100% rename from windows/keep-secure/create-a-group-policy-object.md rename to windows/access-protection/windows-firewall/create-a-group-policy-object.md diff --git a/windows/keep-secure/create-an-authentication-exemption-list-rule.md b/windows/access-protection/windows-firewall/create-an-authentication-exemption-list-rule.md similarity index 100% rename from windows/keep-secure/create-an-authentication-exemption-list-rule.md rename to windows/access-protection/windows-firewall/create-an-authentication-exemption-list-rule.md diff --git a/windows/keep-secure/create-an-authentication-request-rule.md b/windows/access-protection/windows-firewall/create-an-authentication-request-rule.md similarity index 100% rename from windows/keep-secure/create-an-authentication-request-rule.md rename to windows/access-protection/windows-firewall/create-an-authentication-request-rule.md diff --git a/windows/keep-secure/create-an-inbound-icmp-rule.md b/windows/access-protection/windows-firewall/create-an-inbound-icmp-rule.md similarity index 100% rename from windows/keep-secure/create-an-inbound-icmp-rule.md rename to windows/access-protection/windows-firewall/create-an-inbound-icmp-rule.md diff --git a/windows/keep-secure/create-an-inbound-port-rule.md b/windows/access-protection/windows-firewall/create-an-inbound-port-rule.md similarity index 100% rename from windows/keep-secure/create-an-inbound-port-rule.md rename to windows/access-protection/windows-firewall/create-an-inbound-port-rule.md diff --git a/windows/keep-secure/create-an-inbound-program-or-service-rule.md b/windows/access-protection/windows-firewall/create-an-inbound-program-or-service-rule.md similarity index 100% rename from windows/keep-secure/create-an-inbound-program-or-service-rule.md rename to windows/access-protection/windows-firewall/create-an-inbound-program-or-service-rule.md diff --git a/windows/keep-secure/create-an-outbound-port-rule.md b/windows/access-protection/windows-firewall/create-an-outbound-port-rule.md similarity index 100% rename from windows/keep-secure/create-an-outbound-port-rule.md rename to windows/access-protection/windows-firewall/create-an-outbound-port-rule.md diff --git a/windows/keep-secure/create-an-outbound-program-or-service-rule.md b/windows/access-protection/windows-firewall/create-an-outbound-program-or-service-rule.md similarity index 100% rename from windows/keep-secure/create-an-outbound-program-or-service-rule.md rename to windows/access-protection/windows-firewall/create-an-outbound-program-or-service-rule.md diff --git a/windows/keep-secure/create-inbound-rules-to-support-rpc.md b/windows/access-protection/windows-firewall/create-inbound-rules-to-support-rpc.md similarity index 100% rename from windows/keep-secure/create-inbound-rules-to-support-rpc.md rename to windows/access-protection/windows-firewall/create-inbound-rules-to-support-rpc.md diff --git a/windows/keep-secure/create-wmi-filters-for-the-gpo.md b/windows/access-protection/windows-firewall/create-wmi-filters-for-the-gpo.md similarity index 100% rename from windows/keep-secure/create-wmi-filters-for-the-gpo.md rename to windows/access-protection/windows-firewall/create-wmi-filters-for-the-gpo.md diff --git a/windows/keep-secure/designing-a-windows-firewall-with-advanced-security-strategy.md b/windows/access-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md similarity index 100% rename from windows/keep-secure/designing-a-windows-firewall-with-advanced-security-strategy.md rename to windows/access-protection/windows-firewall/designing-a-windows-firewall-with-advanced-security-strategy.md diff --git a/windows/keep-secure/determining-the-trusted-state-of-your-devices.md b/windows/access-protection/windows-firewall/determining-the-trusted-state-of-your-devices.md similarity index 100% rename from windows/keep-secure/determining-the-trusted-state-of-your-devices.md rename to windows/access-protection/windows-firewall/determining-the-trusted-state-of-your-devices.md diff --git a/windows/keep-secure/documenting-the-zones.md b/windows/access-protection/windows-firewall/documenting-the-zones.md similarity index 100% rename from windows/keep-secure/documenting-the-zones.md rename to windows/access-protection/windows-firewall/documenting-the-zones.md diff --git a/windows/keep-secure/domain-isolation-policy-design-example.md b/windows/access-protection/windows-firewall/domain-isolation-policy-design-example.md similarity index 100% rename from windows/keep-secure/domain-isolation-policy-design-example.md rename to windows/access-protection/windows-firewall/domain-isolation-policy-design-example.md diff --git a/windows/keep-secure/domain-isolation-policy-design.md b/windows/access-protection/windows-firewall/domain-isolation-policy-design.md similarity index 100% rename from windows/keep-secure/domain-isolation-policy-design.md rename to windows/access-protection/windows-firewall/domain-isolation-policy-design.md diff --git a/windows/keep-secure/enable-predefined-inbound-rules.md b/windows/access-protection/windows-firewall/enable-predefined-inbound-rules.md similarity index 100% rename from windows/keep-secure/enable-predefined-inbound-rules.md rename to windows/access-protection/windows-firewall/enable-predefined-inbound-rules.md diff --git a/windows/keep-secure/enable-predefined-outbound-rules.md b/windows/access-protection/windows-firewall/enable-predefined-outbound-rules.md similarity index 100% rename from windows/keep-secure/enable-predefined-outbound-rules.md rename to windows/access-protection/windows-firewall/enable-predefined-outbound-rules.md diff --git a/windows/keep-secure/encryption-zone-gpos.md b/windows/access-protection/windows-firewall/encryption-zone-gpos.md similarity index 100% rename from windows/keep-secure/encryption-zone-gpos.md rename to windows/access-protection/windows-firewall/encryption-zone-gpos.md diff --git a/windows/keep-secure/encryption-zone.md b/windows/access-protection/windows-firewall/encryption-zone.md similarity index 100% rename from windows/keep-secure/encryption-zone.md rename to windows/access-protection/windows-firewall/encryption-zone.md diff --git a/windows/keep-secure/evaluating-windows-firewall-with-advanced-security-design-examples.md b/windows/access-protection/windows-firewall/evaluating-windows-firewall-with-advanced-security-design-examples.md similarity index 100% rename from windows/keep-secure/evaluating-windows-firewall-with-advanced-security-design-examples.md rename to windows/access-protection/windows-firewall/evaluating-windows-firewall-with-advanced-security-design-examples.md diff --git a/windows/keep-secure/exempt-icmp-from-authentication.md b/windows/access-protection/windows-firewall/exempt-icmp-from-authentication.md similarity index 100% rename from windows/keep-secure/exempt-icmp-from-authentication.md rename to windows/access-protection/windows-firewall/exempt-icmp-from-authentication.md diff --git a/windows/keep-secure/exemption-list.md b/windows/access-protection/windows-firewall/exemption-list.md similarity index 100% rename from windows/keep-secure/exemption-list.md rename to windows/access-protection/windows-firewall/exemption-list.md diff --git a/windows/keep-secure/firewall-gpos.md b/windows/access-protection/windows-firewall/firewall-gpos.md similarity index 100% rename from windows/keep-secure/firewall-gpos.md rename to windows/access-protection/windows-firewall/firewall-gpos.md diff --git a/windows/keep-secure/firewall-policy-design-example.md b/windows/access-protection/windows-firewall/firewall-policy-design-example.md similarity index 100% rename from windows/keep-secure/firewall-policy-design-example.md rename to windows/access-protection/windows-firewall/firewall-policy-design-example.md diff --git a/windows/keep-secure/gathering-information-about-your-active-directory-deployment.md b/windows/access-protection/windows-firewall/gathering-information-about-your-active-directory-deployment.md similarity index 100% rename from windows/keep-secure/gathering-information-about-your-active-directory-deployment.md rename to windows/access-protection/windows-firewall/gathering-information-about-your-active-directory-deployment.md diff --git a/windows/keep-secure/gathering-information-about-your-current-network-infrastructure.md b/windows/access-protection/windows-firewall/gathering-information-about-your-current-network-infrastructure.md similarity index 100% rename from windows/keep-secure/gathering-information-about-your-current-network-infrastructure.md rename to windows/access-protection/windows-firewall/gathering-information-about-your-current-network-infrastructure.md diff --git a/windows/keep-secure/gathering-information-about-your-devices.md b/windows/access-protection/windows-firewall/gathering-information-about-your-devices.md similarity index 100% rename from windows/keep-secure/gathering-information-about-your-devices.md rename to windows/access-protection/windows-firewall/gathering-information-about-your-devices.md diff --git a/windows/keep-secure/gathering-other-relevant-information.md b/windows/access-protection/windows-firewall/gathering-other-relevant-information.md similarity index 100% rename from windows/keep-secure/gathering-other-relevant-information.md rename to windows/access-protection/windows-firewall/gathering-other-relevant-information.md diff --git a/windows/keep-secure/gathering-the-information-you-need.md b/windows/access-protection/windows-firewall/gathering-the-information-you-need.md similarity index 100% rename from windows/keep-secure/gathering-the-information-you-need.md rename to windows/access-protection/windows-firewall/gathering-the-information-you-need.md diff --git a/windows/keep-secure/gpo-domiso-boundary.md b/windows/access-protection/windows-firewall/gpo-domiso-boundary.md similarity index 100% rename from windows/keep-secure/gpo-domiso-boundary.md rename to windows/access-protection/windows-firewall/gpo-domiso-boundary.md diff --git a/windows/keep-secure/gpo-domiso-encryption.md b/windows/access-protection/windows-firewall/gpo-domiso-encryption.md similarity index 97% rename from windows/keep-secure/gpo-domiso-encryption.md rename to windows/access-protection/windows-firewall/gpo-domiso-encryption.md index dac33f72d4..b5d3c6801e 100644 --- a/windows/keep-secure/gpo-domiso-encryption.md +++ b/windows/access-protection/windows-firewall/gpo-domiso-encryption.md @@ -3,6 +3,10 @@ title: GPO\_DOMISO\_Encryption\_WS2008 (Windows 10) description: GPO\_DOMISO\_Encryption\_WS2008 ms.assetid: 84375480-af6a-4c79-aafe-0a37115a7446 author: brianlic-msft +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security --- # GPO\_DOMISO\_Encryption\_WS2008 diff --git a/windows/keep-secure/gpo-domiso-firewall.md b/windows/access-protection/windows-firewall/gpo-domiso-firewall.md similarity index 100% rename from windows/keep-secure/gpo-domiso-firewall.md rename to windows/access-protection/windows-firewall/gpo-domiso-firewall.md diff --git a/windows/keep-secure/gpo-domiso-isolateddomain-clients.md b/windows/access-protection/windows-firewall/gpo-domiso-isolateddomain-clients.md similarity index 100% rename from windows/keep-secure/gpo-domiso-isolateddomain-clients.md rename to windows/access-protection/windows-firewall/gpo-domiso-isolateddomain-clients.md diff --git a/windows/keep-secure/gpo-domiso-isolateddomain-servers.md b/windows/access-protection/windows-firewall/gpo-domiso-isolateddomain-servers.md similarity index 100% rename from windows/keep-secure/gpo-domiso-isolateddomain-servers.md rename to windows/access-protection/windows-firewall/gpo-domiso-isolateddomain-servers.md diff --git a/windows/keep-secure/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md b/windows/access-protection/windows-firewall/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md similarity index 100% rename from windows/keep-secure/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md rename to windows/access-protection/windows-firewall/identifying-your-windows-firewall-with-advanced-security-deployment-goals.md diff --git a/windows/access-protection/windows-firewall/images/corpnet.gif b/windows/access-protection/windows-firewall/images/corpnet.gif new file mode 100644 index 0000000000..f76182ee25 Binary files /dev/null and b/windows/access-protection/windows-firewall/images/corpnet.gif differ diff --git a/windows/keep-secure/images/createipsecrule.gif b/windows/access-protection/windows-firewall/images/createipsecrule.gif similarity index 100% rename from windows/keep-secure/images/createipsecrule.gif rename to windows/access-protection/windows-firewall/images/createipsecrule.gif diff --git a/windows/keep-secure/images/powershelllogosmall.gif b/windows/access-protection/windows-firewall/images/powershelllogosmall.gif similarity index 100% rename from windows/keep-secure/images/powershelllogosmall.gif rename to windows/access-protection/windows-firewall/images/powershelllogosmall.gif diff --git a/windows/keep-secure/images/qmcryptoset.gif b/windows/access-protection/windows-firewall/images/qmcryptoset.gif similarity index 100% rename from windows/keep-secure/images/qmcryptoset.gif rename to windows/access-protection/windows-firewall/images/qmcryptoset.gif diff --git a/windows/keep-secure/images/wfas-design2example1.gif b/windows/access-protection/windows-firewall/images/wfas-design2example1.gif similarity index 100% rename from windows/keep-secure/images/wfas-design2example1.gif rename to windows/access-protection/windows-firewall/images/wfas-design2example1.gif diff --git a/windows/keep-secure/images/wfas-design3example1.gif b/windows/access-protection/windows-firewall/images/wfas-design3example1.gif similarity index 100% rename from windows/keep-secure/images/wfas-design3example1.gif rename to windows/access-protection/windows-firewall/images/wfas-design3example1.gif diff --git a/windows/keep-secure/images/wfas-designexample1.gif b/windows/access-protection/windows-firewall/images/wfas-designexample1.gif similarity index 100% rename from windows/keep-secure/images/wfas-designexample1.gif rename to windows/access-protection/windows-firewall/images/wfas-designexample1.gif diff --git a/windows/keep-secure/images/wfas-designflowchart1.gif b/windows/access-protection/windows-firewall/images/wfas-designflowchart1.gif similarity index 100% rename from windows/keep-secure/images/wfas-designflowchart1.gif rename to windows/access-protection/windows-firewall/images/wfas-designflowchart1.gif diff --git a/windows/keep-secure/images/wfas-domainiso.gif b/windows/access-protection/windows-firewall/images/wfas-domainiso.gif similarity index 100% rename from windows/keep-secure/images/wfas-domainiso.gif rename to windows/access-protection/windows-firewall/images/wfas-domainiso.gif diff --git a/windows/keep-secure/images/wfas-domainisoencrypt.gif b/windows/access-protection/windows-firewall/images/wfas-domainisoencrypt.gif similarity index 100% rename from windows/keep-secure/images/wfas-domainisoencrypt.gif rename to windows/access-protection/windows-firewall/images/wfas-domainisoencrypt.gif diff --git a/windows/keep-secure/images/wfas-domainisohighsec.gif b/windows/access-protection/windows-firewall/images/wfas-domainisohighsec.gif similarity index 100% rename from windows/keep-secure/images/wfas-domainisohighsec.gif rename to windows/access-protection/windows-firewall/images/wfas-domainisohighsec.gif diff --git a/windows/keep-secure/images/wfas-domainnag.gif b/windows/access-protection/windows-firewall/images/wfas-domainnag.gif similarity index 100% rename from windows/keep-secure/images/wfas-domainnag.gif rename to windows/access-protection/windows-firewall/images/wfas-domainnag.gif diff --git a/windows/keep-secure/images/wfas-icon-checkbox.gif b/windows/access-protection/windows-firewall/images/wfas-icon-checkbox.gif similarity index 100% rename from windows/keep-secure/images/wfas-icon-checkbox.gif rename to windows/access-protection/windows-firewall/images/wfas-icon-checkbox.gif diff --git a/windows/keep-secure/images/wfas-implement.gif b/windows/access-protection/windows-firewall/images/wfas-implement.gif similarity index 100% rename from windows/keep-secure/images/wfas-implement.gif rename to windows/access-protection/windows-firewall/images/wfas-implement.gif diff --git a/windows/keep-secure/images/wfasdomainisoboundary.gif b/windows/access-protection/windows-firewall/images/wfasdomainisoboundary.gif similarity index 100% rename from windows/keep-secure/images/wfasdomainisoboundary.gif rename to windows/access-protection/windows-firewall/images/wfasdomainisoboundary.gif diff --git a/windows/keep-secure/implementing-your-windows-firewall-with-advanced-security-design-plan.md b/windows/access-protection/windows-firewall/implementing-your-windows-firewall-with-advanced-security-design-plan.md similarity index 100% rename from windows/keep-secure/implementing-your-windows-firewall-with-advanced-security-design-plan.md rename to windows/access-protection/windows-firewall/implementing-your-windows-firewall-with-advanced-security-design-plan.md diff --git a/windows/keep-secure/isolated-domain-gpos.md b/windows/access-protection/windows-firewall/isolated-domain-gpos.md similarity index 100% rename from windows/keep-secure/isolated-domain-gpos.md rename to windows/access-protection/windows-firewall/isolated-domain-gpos.md diff --git a/windows/keep-secure/isolated-domain.md b/windows/access-protection/windows-firewall/isolated-domain.md similarity index 100% rename from windows/keep-secure/isolated-domain.md rename to windows/access-protection/windows-firewall/isolated-domain.md diff --git a/windows/keep-secure/isolating-apps-on-your-network.md b/windows/access-protection/windows-firewall/isolating-apps-on-your-network.md similarity index 100% rename from windows/keep-secure/isolating-apps-on-your-network.md rename to windows/access-protection/windows-firewall/isolating-apps-on-your-network.md diff --git a/windows/keep-secure/link-the-gpo-to-the-domain.md b/windows/access-protection/windows-firewall/link-the-gpo-to-the-domain.md similarity index 100% rename from windows/keep-secure/link-the-gpo-to-the-domain.md rename to windows/access-protection/windows-firewall/link-the-gpo-to-the-domain.md diff --git a/windows/keep-secure/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md b/windows/access-protection/windows-firewall/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md similarity index 100% rename from windows/keep-secure/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md rename to windows/access-protection/windows-firewall/mapping-your-deployment-goals-to-a-windows-firewall-with-advanced-security-design.md diff --git a/windows/keep-secure/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md b/windows/access-protection/windows-firewall/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md similarity index 100% rename from windows/keep-secure/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md rename to windows/access-protection/windows-firewall/modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md diff --git a/windows/keep-secure/open-the-group-policy-management-console-to-ip-security-policies.md b/windows/access-protection/windows-firewall/open-the-group-policy-management-console-to-ip-security-policies.md similarity index 100% rename from windows/keep-secure/open-the-group-policy-management-console-to-ip-security-policies.md rename to windows/access-protection/windows-firewall/open-the-group-policy-management-console-to-ip-security-policies.md diff --git a/windows/keep-secure/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md b/windows/access-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md similarity index 100% rename from windows/keep-secure/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md rename to windows/access-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md diff --git a/windows/keep-secure/open-the-group-policy-management-console-to-windows-firewall.md b/windows/access-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md similarity index 100% rename from windows/keep-secure/open-the-group-policy-management-console-to-windows-firewall.md rename to windows/access-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md diff --git a/windows/keep-secure/open-windows-firewall-with-advanced-security.md b/windows/access-protection/windows-firewall/open-windows-firewall-with-advanced-security.md similarity index 100% rename from windows/keep-secure/open-windows-firewall-with-advanced-security.md rename to windows/access-protection/windows-firewall/open-windows-firewall-with-advanced-security.md diff --git a/windows/keep-secure/planning-certificate-based-authentication.md b/windows/access-protection/windows-firewall/planning-certificate-based-authentication.md similarity index 100% rename from windows/keep-secure/planning-certificate-based-authentication.md rename to windows/access-protection/windows-firewall/planning-certificate-based-authentication.md diff --git a/windows/keep-secure/planning-domain-isolation-zones.md b/windows/access-protection/windows-firewall/planning-domain-isolation-zones.md similarity index 100% rename from windows/keep-secure/planning-domain-isolation-zones.md rename to windows/access-protection/windows-firewall/planning-domain-isolation-zones.md diff --git a/windows/keep-secure/planning-gpo-deployment.md b/windows/access-protection/windows-firewall/planning-gpo-deployment.md similarity index 100% rename from windows/keep-secure/planning-gpo-deployment.md rename to windows/access-protection/windows-firewall/planning-gpo-deployment.md diff --git a/windows/keep-secure/planning-group-policy-deployment-for-your-isolation-zones.md b/windows/access-protection/windows-firewall/planning-group-policy-deployment-for-your-isolation-zones.md similarity index 100% rename from windows/keep-secure/planning-group-policy-deployment-for-your-isolation-zones.md rename to windows/access-protection/windows-firewall/planning-group-policy-deployment-for-your-isolation-zones.md diff --git a/windows/keep-secure/planning-isolation-groups-for-the-zones.md b/windows/access-protection/windows-firewall/planning-isolation-groups-for-the-zones.md similarity index 100% rename from windows/keep-secure/planning-isolation-groups-for-the-zones.md rename to windows/access-protection/windows-firewall/planning-isolation-groups-for-the-zones.md diff --git a/windows/keep-secure/planning-network-access-groups.md b/windows/access-protection/windows-firewall/planning-network-access-groups.md similarity index 100% rename from windows/keep-secure/planning-network-access-groups.md rename to windows/access-protection/windows-firewall/planning-network-access-groups.md diff --git a/windows/keep-secure/planning-server-isolation-zones.md b/windows/access-protection/windows-firewall/planning-server-isolation-zones.md similarity index 100% rename from windows/keep-secure/planning-server-isolation-zones.md rename to windows/access-protection/windows-firewall/planning-server-isolation-zones.md diff --git a/windows/keep-secure/planning-settings-for-a-basic-firewall-policy.md b/windows/access-protection/windows-firewall/planning-settings-for-a-basic-firewall-policy.md similarity index 100% rename from windows/keep-secure/planning-settings-for-a-basic-firewall-policy.md rename to windows/access-protection/windows-firewall/planning-settings-for-a-basic-firewall-policy.md diff --git a/windows/keep-secure/planning-the-gpos.md b/windows/access-protection/windows-firewall/planning-the-gpos.md similarity index 100% rename from windows/keep-secure/planning-the-gpos.md rename to windows/access-protection/windows-firewall/planning-the-gpos.md diff --git a/windows/keep-secure/planning-to-deploy-windows-firewall-with-advanced-security.md b/windows/access-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md similarity index 100% rename from windows/keep-secure/planning-to-deploy-windows-firewall-with-advanced-security.md rename to windows/access-protection/windows-firewall/planning-to-deploy-windows-firewall-with-advanced-security.md diff --git a/windows/keep-secure/planning-your-windows-firewall-with-advanced-security-design.md b/windows/access-protection/windows-firewall/planning-your-windows-firewall-with-advanced-security-design.md similarity index 100% rename from windows/keep-secure/planning-your-windows-firewall-with-advanced-security-design.md rename to windows/access-protection/windows-firewall/planning-your-windows-firewall-with-advanced-security-design.md diff --git a/windows/keep-secure/procedures-used-in-this-guide.md b/windows/access-protection/windows-firewall/procedures-used-in-this-guide.md similarity index 100% rename from windows/keep-secure/procedures-used-in-this-guide.md rename to windows/access-protection/windows-firewall/procedures-used-in-this-guide.md diff --git a/windows/keep-secure/protect-devices-from-unwanted-network-traffic.md b/windows/access-protection/windows-firewall/protect-devices-from-unwanted-network-traffic.md similarity index 100% rename from windows/keep-secure/protect-devices-from-unwanted-network-traffic.md rename to windows/access-protection/windows-firewall/protect-devices-from-unwanted-network-traffic.md diff --git a/windows/keep-secure/require-encryption-when-accessing-sensitive-network-resources.md b/windows/access-protection/windows-firewall/require-encryption-when-accessing-sensitive-network-resources.md similarity index 100% rename from windows/keep-secure/require-encryption-when-accessing-sensitive-network-resources.md rename to windows/access-protection/windows-firewall/require-encryption-when-accessing-sensitive-network-resources.md diff --git a/windows/keep-secure/restrict-access-to-only-specified-users-or-devices.md b/windows/access-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices.md similarity index 100% rename from windows/keep-secure/restrict-access-to-only-specified-users-or-devices.md rename to windows/access-protection/windows-firewall/restrict-access-to-only-specified-users-or-devices.md diff --git a/windows/keep-secure/restrict-access-to-only-trusted-devices.md b/windows/access-protection/windows-firewall/restrict-access-to-only-trusted-devices.md similarity index 100% rename from windows/keep-secure/restrict-access-to-only-trusted-devices.md rename to windows/access-protection/windows-firewall/restrict-access-to-only-trusted-devices.md diff --git a/windows/keep-secure/restrict-server-access-to-members-of-a-group-only.md b/windows/access-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only.md similarity index 100% rename from windows/keep-secure/restrict-server-access-to-members-of-a-group-only.md rename to windows/access-protection/windows-firewall/restrict-server-access-to-members-of-a-group-only.md diff --git a/windows/keep-secure/securing-end-to-end-ipsec-connections-by-using-ikev2.md b/windows/access-protection/windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md similarity index 100% rename from windows/keep-secure/securing-end-to-end-ipsec-connections-by-using-ikev2.md rename to windows/access-protection/windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2.md diff --git a/windows/keep-secure/server-isolation-gpos.md b/windows/access-protection/windows-firewall/server-isolation-gpos.md similarity index 100% rename from windows/keep-secure/server-isolation-gpos.md rename to windows/access-protection/windows-firewall/server-isolation-gpos.md diff --git a/windows/keep-secure/server-isolation-policy-design-example.md b/windows/access-protection/windows-firewall/server-isolation-policy-design-example.md similarity index 100% rename from windows/keep-secure/server-isolation-policy-design-example.md rename to windows/access-protection/windows-firewall/server-isolation-policy-design-example.md diff --git a/windows/keep-secure/server-isolation-policy-design.md b/windows/access-protection/windows-firewall/server-isolation-policy-design.md similarity index 100% rename from windows/keep-secure/server-isolation-policy-design.md rename to windows/access-protection/windows-firewall/server-isolation-policy-design.md diff --git a/windows/keep-secure/turn-on-windows-firewall-and-configure-default-behavior.md b/windows/access-protection/windows-firewall/turn-on-windows-firewall-and-configure-default-behavior.md similarity index 100% rename from windows/keep-secure/turn-on-windows-firewall-and-configure-default-behavior.md rename to windows/access-protection/windows-firewall/turn-on-windows-firewall-and-configure-default-behavior.md diff --git a/windows/keep-secure/understanding-the-windows-firewall-with-advanced-security-design-process.md b/windows/access-protection/windows-firewall/understanding-the-windows-firewall-with-advanced-security-design-process.md similarity index 100% rename from windows/keep-secure/understanding-the-windows-firewall-with-advanced-security-design-process.md rename to windows/access-protection/windows-firewall/understanding-the-windows-firewall-with-advanced-security-design-process.md diff --git a/windows/keep-secure/verify-that-network-traffic-is-authenticated.md b/windows/access-protection/windows-firewall/verify-that-network-traffic-is-authenticated.md similarity index 100% rename from windows/keep-secure/verify-that-network-traffic-is-authenticated.md rename to windows/access-protection/windows-firewall/verify-that-network-traffic-is-authenticated.md diff --git a/windows/keep-secure/windows-firewall-with-advanced-security-administration-with-windows-powershell.md b/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md similarity index 100% rename from windows/keep-secure/windows-firewall-with-advanced-security-administration-with-windows-powershell.md rename to windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-administration-with-windows-powershell.md diff --git a/windows/keep-secure/windows-firewall-with-advanced-security-deployment-guide.md b/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide.md similarity index 100% rename from windows/keep-secure/windows-firewall-with-advanced-security-deployment-guide.md rename to windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-deployment-guide.md diff --git a/windows/keep-secure/windows-firewall-with-advanced-security-design-guide.md b/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md similarity index 100% rename from windows/keep-secure/windows-firewall-with-advanced-security-design-guide.md rename to windows/access-protection/windows-firewall/windows-firewall-with-advanced-security-design-guide.md diff --git a/windows/keep-secure/windows-firewall-with-advanced-security.md b/windows/access-protection/windows-firewall/windows-firewall-with-advanced-security.md similarity index 100% rename from windows/keep-secure/windows-firewall-with-advanced-security.md rename to windows/access-protection/windows-firewall/windows-firewall-with-advanced-security.md diff --git a/windows/application-management/TOC.md b/windows/application-management/TOC.md new file mode 100644 index 0000000000..7f815bfe0e --- /dev/null +++ b/windows/application-management/TOC.md @@ -0,0 +1,101 @@ +# [Manage applications in Windows 10](index.md) +## [Sideload apps](sideload-apps-in-windows-10.md) +## [Application Virtualization (App-V) for Windows](app-v/appv-for-windows.md) +### [Getting Started with App-V](app-v/appv-getting-started.md) +#### [What's new in App-V for Windows 10, version 1703 and earlier](app-v/appv-about-appv.md) +##### [Release Notes for App-V for Windows 10, version 1607](app-v/appv-release-notes-for-appv-for-windows.md) +##### [Release Notes for App-V for Windows 10, version 1703](app-v/appv-release-notes-for-appv-for-windows-1703.md) +#### [Evaluating App-V](app-v/appv-evaluating-appv.md) +#### [High Level Architecture for App-V](app-v/appv-high-level-architecture.md) +### [Planning for App-V](app-v/appv-planning-for-appv.md) +#### [Preparing Your Environment for App-V](app-v/appv-preparing-your-environment.md) +##### [App-V Prerequisites](app-v/appv-prerequisites.md) +##### [App-V Security Considerations](app-v/appv-security-considerations.md) +#### [Planning to Deploy App-V](app-v/appv-planning-to-deploy-appv.md) +##### [App-V Supported Configurations](app-v/appv-supported-configurations.md) +##### [App-V Capacity Planning](app-v/appv-capacity-planning.md) +##### [Planning for High Availability with App-V](app-v/appv-planning-for-high-availability-with-appv.md) +##### [Planning to Deploy App-V with an Electronic Software Distribution System](app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md) +##### [Planning for the App-V Server Deployment](app-v/appv-planning-for-appv-server-deployment.md) +##### [Planning for the App-V Sequencer and Client Deployment](app-v/appv-planning-for-sequencer-and-client-deployment.md) +##### [Planning for Using App-V with Office](app-v/appv-planning-for-using-appv-with-office.md) +##### [Planning to Use Folder Redirection with App-V](app-v/appv-planning-folder-redirection-with-appv.md) +#### [App-V Planning Checklist](app-v/appv-planning-checklist.md) +### [Deploying App-V](app-v/appv-deploying-appv.md) +#### [Deploying the App-V Sequencer and Configuring the Client](app-v/appv-deploying-the-appv-sequencer-and-client.md) +##### [About Client Configuration Settings](app-v/appv-client-configuration-settings.md) +##### [Enable the App-V desktop client](app-v/appv-enable-the-app-v-desktop-client.md) +##### [How to Install the Sequencer](app-v/appv-install-the-sequencer.md) +#### [Deploying the App-V Server](app-v/appv-deploying-the-appv-server.md) +##### [How to Deploy the App-V Server](app-v/appv-deploy-the-appv-server.md) +##### [How to Deploy the App-V Server Using a Script](app-v/appv-deploy-the-appv-server-with-a-script.md) +##### [How to Deploy the App-V Databases by Using SQL Scripts](app-v/appv-deploy-appv-databases-with-sql-scripts.md) +##### [How to Install the Publishing Server on a Remote Computer](app-v/appv-install-the-publishing-server-on-a-remote-computer.md) +##### [How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services](app-v/appv-install-the-management-and-reporting-databases-on-separate-computers.md) +##### [How to install the Management Server on a Standalone Computer and Connect it to the Database ](app-v/appv-install-the-management-server-on-a-standalone-computer.md) +##### [About App-V Reporting](app-v/appv-reporting.md) +##### [How to install the Reporting Server on a Standalone Computer and Connect it to the Database](app-v/appv-install-the-reporting-server-on-a-standalone-computer.md) +#### [App-V Deployment Checklist](app-v/appv-deployment-checklist.md) +#### [Deploying Microsoft Office 2016 by Using App-V](app-v/appv-deploying-microsoft-office-2016-with-appv.md) +#### [Deploying Microsoft Office 2013 by Using App-V](app-v/appv-deploying-microsoft-office-2013-with-appv.md) +#### [Deploying Microsoft Office 2010 by Using App-V](app-v/appv-deploying-microsoft-office-2010-wth-appv.md) +### [Operations for App-V](app-v/appv-operations.md) +#### [Creating and Managing App-V Virtualized Applications](app-v/appv-creating-and-managing-virtualized-applications.md) +##### [Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)](app-v/appv-auto-provision-a-vm.md) +##### [Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](app-v/appv-auto-batch-sequencing.md) +##### [Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](app-v/appv-auto-batch-updating.md) +##### [Manually sequence a new app using Microsoft Application Virtualization Sequencer (App-V Sequencer)](app-v/appv-sequence-a-new-application.md) +##### [How to Modify an Existing Virtual Application Package](app-v/appv-modify-an-existing-virtual-application-package.md) +##### [How to Create and Use a Project Template](app-v/appv-create-and-use-a-project-template.md) +##### [How to Create a Package Accelerator](app-v/appv-create-a-package-accelerator.md) +##### [How to Create a Virtual Application Package Using an App-V Package Accelerator](app-v/appv-create-a-virtual-application-package-package-accelerator.md) +#### [Administering App-V Virtual Applications by Using the Management Console](app-v/appv-administering-virtual-applications-with-the-management-console.md) +##### [About App-V Dynamic Configuration](app-v/appv-dynamic-configuration.md) +##### [How to Connect to the Management Console ](app-v/appv-connect-to-the-management-console.md) +##### [How to Add or Upgrade Packages by Using the Management Console](app-v/appv-add-or-upgrade-packages-with-the-management-console.md) +##### [How to Configure Access to Packages by Using the Management Console ](app-v/appv-configure-access-to-packages-with-the-management-console.md) +##### [How to Publish a Package by Using the Management Console ](app-v/appv-publish-a-packages-with-the-management-console.md) +##### [How to Delete a Package in the Management Console ](app-v/appv-delete-a-package-with-the-management-console.md) +##### [How to Add or Remove an Administrator by Using the Management Console](app-v/appv-add-or-remove-an-administrator-with-the-management-console.md) +##### [How to Register and Unregister a Publishing Server by Using the Management Console](app-v/appv-register-and-unregister-a-publishing-server-with-the-management-console.md) +##### [How to Create a Custom Configuration File by Using the App-V Management Console](app-v/appv-create-a-custom-configuration-file-with-the-management-console.md) +##### [How to Transfer Access and Configurations to Another Version of a Package by Using the Management Console](app-v/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console.md) +##### [How to Customize Virtual Applications Extensions for a Specific AD Group by Using the Management Console](app-v/appv-customize-virtual-application-extensions-with-the-management-console.md) +##### [How to View and Configure Applications and Default Virtual Application Extensions by Using the Management Console ](app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md) +#### [Managing Connection Groups](app-v/appv-managing-connection-groups.md) +##### [About the Connection Group Virtual Environment](app-v/appv-connection-group-virtual-environment.md) +##### [About the Connection Group File](app-v/appv-connection-group-file.md) +##### [How to Create a Connection Group](app-v/appv-create-a-connection-group.md) +##### [How to Create a Connection Group with User-Published and Globally Published Packages](app-v/appv-create-a-connection-group-with-user-published-and-globally-published-packages.md) +##### [How to Delete a Connection Group](app-v/appv-delete-a-connection-group.md) +##### [How to Publish a Connection Group](app-v/appv-publish-a-connection-group.md) +##### [How to Make a Connection Group Ignore the Package Version](app-v/appv-configure-connection-groups-to-ignore-the-package-version.md) +##### [How to Allow Only Administrators to Enable Connection Groups](app-v/appv-allow-administrators-to-enable-connection-groups.md) +#### [Deploying App-V Packages by Using Electronic Software Distribution (ESD)](app-v/appv-deploying-packages-with-electronic-software-distribution-solutions.md) +##### [How to deploy App-V Packages Using Electronic Software Distribution](app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md) +##### [How to Enable Only Administrators to Publish Packages by Using an ESD](app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md) +#### [Using the App-V Client Management Console](app-v/appv-using-the-client-management-console.md) +##### [Automatically clean-up unpublished packages on the App-V client](app-v/appv-auto-clean-unpublished-packages.md) +#### [Migrating to App-V from a Previous Version](app-v/appv-migrating-to-appv-from-a-previous-version.md) +##### [How to Convert a Package Created in a Previous Version of App-V](app-v/appv-convert-a-package-created-in-a-previous-version-of-appv.md) +#### [Maintaining App-V](app-v/appv-maintaining-appv.md) +##### [How to Move the App-V Server to Another Computer](app-v/appv-move-the-appv-server-to-another-computer.md) +#### [Administering App-V by Using Windows PowerShell](app-v/appv-administering-appv-with-powershell.md) +##### [How to Load the Windows PowerShell Cmdlets for App-V and Get Cmdlet Help ](app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md) +##### [How to Manage App-V Packages Running on a Stand-Alone Computer by Using Windows PowerShell](app-v/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell.md) +##### [How to Manage Connection Groups on a Stand-alone Computer by Using Windows PowerShell](app-v/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell.md) +##### [How to Modify Client Configuration by Using Windows PowerShell](app-v/appv-modify-client-configuration-with-powershell.md) +##### [How to Configure the Client to Receive Package and Connection Groups Updates From the Publishing Server](app-v/appv-configure-the-client-to-receive-updates-from-the-publishing-server.md) +##### [How to Apply the User Configuration File by Using Windows PowerShell](app-v/appv-apply-the-user-configuration-file-with-powershell.md) +##### [How to Apply the Deployment Configuration File by Using Windows PowerShell](app-v/appv-apply-the-deployment-configuration-file-with-powershell.md) +##### [How to Sequence a Package by Using Windows PowerShell ](app-v/appv-sequence-a-package-with-powershell.md) +##### [How to Create a Package Accelerator by Using Windows PowerShell](app-v/appv-create-a-package-accelerator-with-powershell.md) +##### [How to Enable Reporting on the App-V Client by Using Windows PowerShell](app-v/appv-enable-reporting-on-the-appv-client-with-powershell.md) +##### [How to Install the App-V Databases and Convert the Associated Security Identifiers by Using Windows PowerShell](app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md) +### [Troubleshooting App-V](app-v/appv-troubleshooting.md) +### [Technical Reference for App-V](app-v/appv-technical-reference.md) +#### [Available Mobile Device Management (MDM) settings for App-V](app-v/appv-available-mdm-settings.md) +#### [Performance Guidance for Application Virtualization](app-v/appv-performance-guidance.md) +#### [Application Publishing and Client Interaction](app-v/appv-application-publishing-and-client-interaction.md) +#### [Viewing App-V Server Publishing Metadata](app-v/appv-viewing-appv-server-publishing-metadata.md) +#### [Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications](app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md) diff --git a/windows/manage/appv-about-appv.md b/windows/application-management/app-v/appv-about-appv.md similarity index 100% rename from windows/manage/appv-about-appv.md rename to windows/application-management/app-v/appv-about-appv.md diff --git a/windows/manage/appv-add-or-remove-an-administrator-with-the-management-console.md b/windows/application-management/app-v/appv-add-or-remove-an-administrator-with-the-management-console.md similarity index 100% rename from windows/manage/appv-add-or-remove-an-administrator-with-the-management-console.md rename to windows/application-management/app-v/appv-add-or-remove-an-administrator-with-the-management-console.md diff --git a/windows/manage/appv-add-or-upgrade-packages-with-the-management-console.md b/windows/application-management/app-v/appv-add-or-upgrade-packages-with-the-management-console.md similarity index 100% rename from windows/manage/appv-add-or-upgrade-packages-with-the-management-console.md rename to windows/application-management/app-v/appv-add-or-upgrade-packages-with-the-management-console.md diff --git a/windows/manage/appv-administering-appv-with-powershell.md b/windows/application-management/app-v/appv-administering-appv-with-powershell.md similarity index 100% rename from windows/manage/appv-administering-appv-with-powershell.md rename to windows/application-management/app-v/appv-administering-appv-with-powershell.md diff --git a/windows/manage/appv-administering-virtual-applications-with-the-management-console.md b/windows/application-management/app-v/appv-administering-virtual-applications-with-the-management-console.md similarity index 100% rename from windows/manage/appv-administering-virtual-applications-with-the-management-console.md rename to windows/application-management/app-v/appv-administering-virtual-applications-with-the-management-console.md diff --git a/windows/manage/appv-allow-administrators-to-enable-connection-groups.md b/windows/application-management/app-v/appv-allow-administrators-to-enable-connection-groups.md similarity index 100% rename from windows/manage/appv-allow-administrators-to-enable-connection-groups.md rename to windows/application-management/app-v/appv-allow-administrators-to-enable-connection-groups.md diff --git a/windows/manage/appv-application-publishing-and-client-interaction.md b/windows/application-management/app-v/appv-application-publishing-and-client-interaction.md similarity index 100% rename from windows/manage/appv-application-publishing-and-client-interaction.md rename to windows/application-management/app-v/appv-application-publishing-and-client-interaction.md diff --git a/windows/manage/appv-apply-the-deployment-configuration-file-with-powershell.md b/windows/application-management/app-v/appv-apply-the-deployment-configuration-file-with-powershell.md similarity index 100% rename from windows/manage/appv-apply-the-deployment-configuration-file-with-powershell.md rename to windows/application-management/app-v/appv-apply-the-deployment-configuration-file-with-powershell.md diff --git a/windows/manage/appv-apply-the-user-configuration-file-with-powershell.md b/windows/application-management/app-v/appv-apply-the-user-configuration-file-with-powershell.md similarity index 100% rename from windows/manage/appv-apply-the-user-configuration-file-with-powershell.md rename to windows/application-management/app-v/appv-apply-the-user-configuration-file-with-powershell.md diff --git a/windows/manage/appv-auto-batch-sequencing.md b/windows/application-management/app-v/appv-auto-batch-sequencing.md similarity index 100% rename from windows/manage/appv-auto-batch-sequencing.md rename to windows/application-management/app-v/appv-auto-batch-sequencing.md diff --git a/windows/manage/appv-auto-batch-updating.md b/windows/application-management/app-v/appv-auto-batch-updating.md similarity index 100% rename from windows/manage/appv-auto-batch-updating.md rename to windows/application-management/app-v/appv-auto-batch-updating.md diff --git a/windows/manage/appv-auto-clean-unpublished-packages.md b/windows/application-management/app-v/appv-auto-clean-unpublished-packages.md similarity index 100% rename from windows/manage/appv-auto-clean-unpublished-packages.md rename to windows/application-management/app-v/appv-auto-clean-unpublished-packages.md diff --git a/windows/manage/appv-auto-provision-a-vm.md b/windows/application-management/app-v/appv-auto-provision-a-vm.md similarity index 100% rename from windows/manage/appv-auto-provision-a-vm.md rename to windows/application-management/app-v/appv-auto-provision-a-vm.md diff --git a/windows/manage/appv-available-mdm-settings.md b/windows/application-management/app-v/appv-available-mdm-settings.md similarity index 100% rename from windows/manage/appv-available-mdm-settings.md rename to windows/application-management/app-v/appv-available-mdm-settings.md diff --git a/windows/manage/appv-capacity-planning.md b/windows/application-management/app-v/appv-capacity-planning.md similarity index 100% rename from windows/manage/appv-capacity-planning.md rename to windows/application-management/app-v/appv-capacity-planning.md diff --git a/windows/manage/appv-client-configuration-settings.md b/windows/application-management/app-v/appv-client-configuration-settings.md similarity index 100% rename from windows/manage/appv-client-configuration-settings.md rename to windows/application-management/app-v/appv-client-configuration-settings.md diff --git a/windows/manage/appv-configure-access-to-packages-with-the-management-console.md b/windows/application-management/app-v/appv-configure-access-to-packages-with-the-management-console.md similarity index 100% rename from windows/manage/appv-configure-access-to-packages-with-the-management-console.md rename to windows/application-management/app-v/appv-configure-access-to-packages-with-the-management-console.md diff --git a/windows/manage/appv-configure-connection-groups-to-ignore-the-package-version.md b/windows/application-management/app-v/appv-configure-connection-groups-to-ignore-the-package-version.md similarity index 100% rename from windows/manage/appv-configure-connection-groups-to-ignore-the-package-version.md rename to windows/application-management/app-v/appv-configure-connection-groups-to-ignore-the-package-version.md diff --git a/windows/manage/appv-configure-the-client-to-receive-updates-from-the-publishing-server.md b/windows/application-management/app-v/appv-configure-the-client-to-receive-updates-from-the-publishing-server.md similarity index 100% rename from windows/manage/appv-configure-the-client-to-receive-updates-from-the-publishing-server.md rename to windows/application-management/app-v/appv-configure-the-client-to-receive-updates-from-the-publishing-server.md diff --git a/windows/manage/appv-connect-to-the-management-console.md b/windows/application-management/app-v/appv-connect-to-the-management-console.md similarity index 100% rename from windows/manage/appv-connect-to-the-management-console.md rename to windows/application-management/app-v/appv-connect-to-the-management-console.md diff --git a/windows/manage/appv-connection-group-file.md b/windows/application-management/app-v/appv-connection-group-file.md similarity index 100% rename from windows/manage/appv-connection-group-file.md rename to windows/application-management/app-v/appv-connection-group-file.md diff --git a/windows/manage/appv-connection-group-virtual-environment.md b/windows/application-management/app-v/appv-connection-group-virtual-environment.md similarity index 100% rename from windows/manage/appv-connection-group-virtual-environment.md rename to windows/application-management/app-v/appv-connection-group-virtual-environment.md diff --git a/windows/manage/appv-convert-a-package-created-in-a-previous-version-of-appv.md b/windows/application-management/app-v/appv-convert-a-package-created-in-a-previous-version-of-appv.md similarity index 100% rename from windows/manage/appv-convert-a-package-created-in-a-previous-version-of-appv.md rename to windows/application-management/app-v/appv-convert-a-package-created-in-a-previous-version-of-appv.md diff --git a/windows/manage/appv-create-a-connection-group-with-user-published-and-globally-published-packages.md b/windows/application-management/app-v/appv-create-a-connection-group-with-user-published-and-globally-published-packages.md similarity index 100% rename from windows/manage/appv-create-a-connection-group-with-user-published-and-globally-published-packages.md rename to windows/application-management/app-v/appv-create-a-connection-group-with-user-published-and-globally-published-packages.md diff --git a/windows/manage/appv-create-a-connection-group.md b/windows/application-management/app-v/appv-create-a-connection-group.md similarity index 100% rename from windows/manage/appv-create-a-connection-group.md rename to windows/application-management/app-v/appv-create-a-connection-group.md diff --git a/windows/manage/appv-create-a-custom-configuration-file-with-the-management-console.md b/windows/application-management/app-v/appv-create-a-custom-configuration-file-with-the-management-console.md similarity index 100% rename from windows/manage/appv-create-a-custom-configuration-file-with-the-management-console.md rename to windows/application-management/app-v/appv-create-a-custom-configuration-file-with-the-management-console.md diff --git a/windows/manage/appv-create-a-package-accelerator-with-powershell.md b/windows/application-management/app-v/appv-create-a-package-accelerator-with-powershell.md similarity index 100% rename from windows/manage/appv-create-a-package-accelerator-with-powershell.md rename to windows/application-management/app-v/appv-create-a-package-accelerator-with-powershell.md diff --git a/windows/manage/appv-create-a-package-accelerator.md b/windows/application-management/app-v/appv-create-a-package-accelerator.md similarity index 100% rename from windows/manage/appv-create-a-package-accelerator.md rename to windows/application-management/app-v/appv-create-a-package-accelerator.md diff --git a/windows/manage/appv-create-a-virtual-application-package-package-accelerator.md b/windows/application-management/app-v/appv-create-a-virtual-application-package-package-accelerator.md similarity index 100% rename from windows/manage/appv-create-a-virtual-application-package-package-accelerator.md rename to windows/application-management/app-v/appv-create-a-virtual-application-package-package-accelerator.md diff --git a/windows/manage/appv-create-and-use-a-project-template.md b/windows/application-management/app-v/appv-create-and-use-a-project-template.md similarity index 100% rename from windows/manage/appv-create-and-use-a-project-template.md rename to windows/application-management/app-v/appv-create-and-use-a-project-template.md diff --git a/windows/manage/appv-creating-and-managing-virtualized-applications.md b/windows/application-management/app-v/appv-creating-and-managing-virtualized-applications.md similarity index 100% rename from windows/manage/appv-creating-and-managing-virtualized-applications.md rename to windows/application-management/app-v/appv-creating-and-managing-virtualized-applications.md diff --git a/windows/manage/appv-customize-virtual-application-extensions-with-the-management-console.md b/windows/application-management/app-v/appv-customize-virtual-application-extensions-with-the-management-console.md similarity index 100% rename from windows/manage/appv-customize-virtual-application-extensions-with-the-management-console.md rename to windows/application-management/app-v/appv-customize-virtual-application-extensions-with-the-management-console.md diff --git a/windows/manage/appv-delete-a-connection-group.md b/windows/application-management/app-v/appv-delete-a-connection-group.md similarity index 100% rename from windows/manage/appv-delete-a-connection-group.md rename to windows/application-management/app-v/appv-delete-a-connection-group.md diff --git a/windows/manage/appv-delete-a-package-with-the-management-console.md b/windows/application-management/app-v/appv-delete-a-package-with-the-management-console.md similarity index 100% rename from windows/manage/appv-delete-a-package-with-the-management-console.md rename to windows/application-management/app-v/appv-delete-a-package-with-the-management-console.md diff --git a/windows/manage/appv-deploy-appv-databases-with-sql-scripts.md b/windows/application-management/app-v/appv-deploy-appv-databases-with-sql-scripts.md similarity index 100% rename from windows/manage/appv-deploy-appv-databases-with-sql-scripts.md rename to windows/application-management/app-v/appv-deploy-appv-databases-with-sql-scripts.md diff --git a/windows/manage/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md b/windows/application-management/app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md similarity index 100% rename from windows/manage/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md rename to windows/application-management/app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md diff --git a/windows/manage/appv-deploy-the-appv-server-with-a-script.md b/windows/application-management/app-v/appv-deploy-the-appv-server-with-a-script.md similarity index 100% rename from windows/manage/appv-deploy-the-appv-server-with-a-script.md rename to windows/application-management/app-v/appv-deploy-the-appv-server-with-a-script.md diff --git a/windows/manage/appv-deploy-the-appv-server.md b/windows/application-management/app-v/appv-deploy-the-appv-server.md similarity index 100% rename from windows/manage/appv-deploy-the-appv-server.md rename to windows/application-management/app-v/appv-deploy-the-appv-server.md diff --git a/windows/manage/appv-deploying-appv.md b/windows/application-management/app-v/appv-deploying-appv.md similarity index 100% rename from windows/manage/appv-deploying-appv.md rename to windows/application-management/app-v/appv-deploying-appv.md diff --git a/windows/manage/appv-deploying-microsoft-office-2010-wth-appv.md b/windows/application-management/app-v/appv-deploying-microsoft-office-2010-wth-appv.md similarity index 100% rename from windows/manage/appv-deploying-microsoft-office-2010-wth-appv.md rename to windows/application-management/app-v/appv-deploying-microsoft-office-2010-wth-appv.md diff --git a/windows/manage/appv-deploying-microsoft-office-2013-with-appv.md b/windows/application-management/app-v/appv-deploying-microsoft-office-2013-with-appv.md similarity index 100% rename from windows/manage/appv-deploying-microsoft-office-2013-with-appv.md rename to windows/application-management/app-v/appv-deploying-microsoft-office-2013-with-appv.md diff --git a/windows/manage/appv-deploying-microsoft-office-2016-with-appv.md b/windows/application-management/app-v/appv-deploying-microsoft-office-2016-with-appv.md similarity index 100% rename from windows/manage/appv-deploying-microsoft-office-2016-with-appv.md rename to windows/application-management/app-v/appv-deploying-microsoft-office-2016-with-appv.md diff --git a/windows/manage/appv-deploying-packages-with-electronic-software-distribution-solutions.md b/windows/application-management/app-v/appv-deploying-packages-with-electronic-software-distribution-solutions.md similarity index 100% rename from windows/manage/appv-deploying-packages-with-electronic-software-distribution-solutions.md rename to windows/application-management/app-v/appv-deploying-packages-with-electronic-software-distribution-solutions.md diff --git a/windows/manage/appv-deploying-the-appv-sequencer-and-client.md b/windows/application-management/app-v/appv-deploying-the-appv-sequencer-and-client.md similarity index 100% rename from windows/manage/appv-deploying-the-appv-sequencer-and-client.md rename to windows/application-management/app-v/appv-deploying-the-appv-sequencer-and-client.md diff --git a/windows/manage/appv-deploying-the-appv-server.md b/windows/application-management/app-v/appv-deploying-the-appv-server.md similarity index 100% rename from windows/manage/appv-deploying-the-appv-server.md rename to windows/application-management/app-v/appv-deploying-the-appv-server.md diff --git a/windows/manage/appv-deployment-checklist.md b/windows/application-management/app-v/appv-deployment-checklist.md similarity index 100% rename from windows/manage/appv-deployment-checklist.md rename to windows/application-management/app-v/appv-deployment-checklist.md diff --git a/windows/manage/appv-dynamic-configuration.md b/windows/application-management/app-v/appv-dynamic-configuration.md similarity index 100% rename from windows/manage/appv-dynamic-configuration.md rename to windows/application-management/app-v/appv-dynamic-configuration.md diff --git a/windows/manage/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md b/windows/application-management/app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md similarity index 100% rename from windows/manage/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md rename to windows/application-management/app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md diff --git a/windows/manage/appv-enable-reporting-on-the-appv-client-with-powershell.md b/windows/application-management/app-v/appv-enable-reporting-on-the-appv-client-with-powershell.md similarity index 100% rename from windows/manage/appv-enable-reporting-on-the-appv-client-with-powershell.md rename to windows/application-management/app-v/appv-enable-reporting-on-the-appv-client-with-powershell.md diff --git a/windows/manage/appv-enable-the-app-v-desktop-client.md b/windows/application-management/app-v/appv-enable-the-app-v-desktop-client.md similarity index 100% rename from windows/manage/appv-enable-the-app-v-desktop-client.md rename to windows/application-management/app-v/appv-enable-the-app-v-desktop-client.md diff --git a/windows/manage/appv-evaluating-appv.md b/windows/application-management/app-v/appv-evaluating-appv.md similarity index 100% rename from windows/manage/appv-evaluating-appv.md rename to windows/application-management/app-v/appv-evaluating-appv.md diff --git a/windows/manage/appv-for-windows.md b/windows/application-management/app-v/appv-for-windows.md similarity index 100% rename from windows/manage/appv-for-windows.md rename to windows/application-management/app-v/appv-for-windows.md diff --git a/windows/manage/appv-getting-started.md b/windows/application-management/app-v/appv-getting-started.md similarity index 100% rename from windows/manage/appv-getting-started.md rename to windows/application-management/app-v/appv-getting-started.md diff --git a/windows/manage/appv-high-level-architecture.md b/windows/application-management/app-v/appv-high-level-architecture.md similarity index 100% rename from windows/manage/appv-high-level-architecture.md rename to windows/application-management/app-v/appv-high-level-architecture.md diff --git a/windows/manage/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md b/windows/application-management/app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md similarity index 100% rename from windows/manage/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md rename to windows/application-management/app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md diff --git a/windows/manage/appv-install-the-management-and-reporting-databases-on-separate-computers.md b/windows/application-management/app-v/appv-install-the-management-and-reporting-databases-on-separate-computers.md similarity index 100% rename from windows/manage/appv-install-the-management-and-reporting-databases-on-separate-computers.md rename to windows/application-management/app-v/appv-install-the-management-and-reporting-databases-on-separate-computers.md diff --git a/windows/manage/appv-install-the-management-server-on-a-standalone-computer.md b/windows/application-management/app-v/appv-install-the-management-server-on-a-standalone-computer.md similarity index 100% rename from windows/manage/appv-install-the-management-server-on-a-standalone-computer.md rename to windows/application-management/app-v/appv-install-the-management-server-on-a-standalone-computer.md diff --git a/windows/manage/appv-install-the-publishing-server-on-a-remote-computer.md b/windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md similarity index 100% rename from windows/manage/appv-install-the-publishing-server-on-a-remote-computer.md rename to windows/application-management/app-v/appv-install-the-publishing-server-on-a-remote-computer.md diff --git a/windows/manage/appv-install-the-reporting-server-on-a-standalone-computer.md b/windows/application-management/app-v/appv-install-the-reporting-server-on-a-standalone-computer.md similarity index 100% rename from windows/manage/appv-install-the-reporting-server-on-a-standalone-computer.md rename to windows/application-management/app-v/appv-install-the-reporting-server-on-a-standalone-computer.md diff --git a/windows/manage/appv-install-the-sequencer.md b/windows/application-management/app-v/appv-install-the-sequencer.md similarity index 100% rename from windows/manage/appv-install-the-sequencer.md rename to windows/application-management/app-v/appv-install-the-sequencer.md diff --git a/windows/manage/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md b/windows/application-management/app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md similarity index 100% rename from windows/manage/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md rename to windows/application-management/app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md diff --git a/windows/manage/appv-maintaining-appv.md b/windows/application-management/app-v/appv-maintaining-appv.md similarity index 100% rename from windows/manage/appv-maintaining-appv.md rename to windows/application-management/app-v/appv-maintaining-appv.md diff --git a/windows/manage/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell.md b/windows/application-management/app-v/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell.md similarity index 100% rename from windows/manage/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell.md rename to windows/application-management/app-v/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell.md diff --git a/windows/manage/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell.md b/windows/application-management/app-v/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell.md similarity index 100% rename from windows/manage/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell.md rename to windows/application-management/app-v/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell.md diff --git a/windows/manage/appv-managing-connection-groups.md b/windows/application-management/app-v/appv-managing-connection-groups.md similarity index 100% rename from windows/manage/appv-managing-connection-groups.md rename to windows/application-management/app-v/appv-managing-connection-groups.md diff --git a/windows/manage/appv-migrating-to-appv-from-a-previous-version.md b/windows/application-management/app-v/appv-migrating-to-appv-from-a-previous-version.md similarity index 100% rename from windows/manage/appv-migrating-to-appv-from-a-previous-version.md rename to windows/application-management/app-v/appv-migrating-to-appv-from-a-previous-version.md diff --git a/windows/manage/appv-modify-an-existing-virtual-application-package.md b/windows/application-management/app-v/appv-modify-an-existing-virtual-application-package.md similarity index 100% rename from windows/manage/appv-modify-an-existing-virtual-application-package.md rename to windows/application-management/app-v/appv-modify-an-existing-virtual-application-package.md diff --git a/windows/manage/appv-modify-client-configuration-with-powershell.md b/windows/application-management/app-v/appv-modify-client-configuration-with-powershell.md similarity index 100% rename from windows/manage/appv-modify-client-configuration-with-powershell.md rename to windows/application-management/app-v/appv-modify-client-configuration-with-powershell.md diff --git a/windows/manage/appv-move-the-appv-server-to-another-computer.md b/windows/application-management/app-v/appv-move-the-appv-server-to-another-computer.md similarity index 100% rename from windows/manage/appv-move-the-appv-server-to-another-computer.md rename to windows/application-management/app-v/appv-move-the-appv-server-to-another-computer.md diff --git a/windows/manage/appv-operations.md b/windows/application-management/app-v/appv-operations.md similarity index 100% rename from windows/manage/appv-operations.md rename to windows/application-management/app-v/appv-operations.md diff --git a/windows/manage/appv-performance-guidance.md b/windows/application-management/app-v/appv-performance-guidance.md similarity index 99% rename from windows/manage/appv-performance-guidance.md rename to windows/application-management/app-v/appv-performance-guidance.md index e0a277bf9c..86b7d3eb82 100644 --- a/windows/manage/appv-performance-guidance.md +++ b/windows/application-management/app-v/appv-performance-guidance.md @@ -263,11 +263,11 @@ We recommend using User Experience Virtualization (UE-V) to capture and centrali For more information, see: -- [User Experience Virtualization (UE-V) for Windows 10 overview](uev-for-windows.md) +- [User Experience Virtualization (UE-V) for Windows 10 overview](/windows/configuration/ue-v/uev-for-windows) -- [Get Started with UE-V](uev-getting-started.md) +- [Get Started with UE-V](/windows/configuration/ue-v/uev-getting-started) -In essence all that is required is to enable the UE-V service and download the following Microsoft authored App-V settings template from the [Microsoft User Experience Virtualization (UE-V) template gallery](http://gallery.technet.microsoft.com/Authored-UE-V-Settings-bb442a33). Register the template. For more information about UE-V templates, see [User Experience Virtualization (UE-V) for Windows 10 overview](uev-for-windows.md). +In essence all that is required is to enable the UE-V service and download the following Microsoft authored App-V settings template from the [Microsoft User Experience Virtualization (UE-V) template gallery](http://gallery.technet.microsoft.com/Authored-UE-V-Settings-bb442a33). Register the template. For more information about UE-V templates, see [User Experience Virtualization (UE-V) for Windows 10 overview](/windows/configuration/ue-v/uev-for-windows). **Note**   Without performing an additional configuration step, User Environment Virtualization (UE-V) will not be able to synchronize the Start menu shortcuts (.lnk files) on the target computer. The .lnk file type is excluded by default. diff --git a/windows/manage/appv-planning-checklist.md b/windows/application-management/app-v/appv-planning-checklist.md similarity index 100% rename from windows/manage/appv-planning-checklist.md rename to windows/application-management/app-v/appv-planning-checklist.md diff --git a/windows/manage/appv-planning-folder-redirection-with-appv.md b/windows/application-management/app-v/appv-planning-folder-redirection-with-appv.md similarity index 100% rename from windows/manage/appv-planning-folder-redirection-with-appv.md rename to windows/application-management/app-v/appv-planning-folder-redirection-with-appv.md diff --git a/windows/manage/appv-planning-for-appv-server-deployment.md b/windows/application-management/app-v/appv-planning-for-appv-server-deployment.md similarity index 100% rename from windows/manage/appv-planning-for-appv-server-deployment.md rename to windows/application-management/app-v/appv-planning-for-appv-server-deployment.md diff --git a/windows/manage/appv-planning-for-appv.md b/windows/application-management/app-v/appv-planning-for-appv.md similarity index 100% rename from windows/manage/appv-planning-for-appv.md rename to windows/application-management/app-v/appv-planning-for-appv.md diff --git a/windows/manage/appv-planning-for-high-availability-with-appv.md b/windows/application-management/app-v/appv-planning-for-high-availability-with-appv.md similarity index 100% rename from windows/manage/appv-planning-for-high-availability-with-appv.md rename to windows/application-management/app-v/appv-planning-for-high-availability-with-appv.md diff --git a/windows/manage/appv-planning-for-sequencer-and-client-deployment.md b/windows/application-management/app-v/appv-planning-for-sequencer-and-client-deployment.md similarity index 100% rename from windows/manage/appv-planning-for-sequencer-and-client-deployment.md rename to windows/application-management/app-v/appv-planning-for-sequencer-and-client-deployment.md diff --git a/windows/manage/appv-planning-for-using-appv-with-office.md b/windows/application-management/app-v/appv-planning-for-using-appv-with-office.md similarity index 100% rename from windows/manage/appv-planning-for-using-appv-with-office.md rename to windows/application-management/app-v/appv-planning-for-using-appv-with-office.md diff --git a/windows/manage/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md b/windows/application-management/app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md similarity index 100% rename from windows/manage/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md rename to windows/application-management/app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md diff --git a/windows/manage/appv-planning-to-deploy-appv.md b/windows/application-management/app-v/appv-planning-to-deploy-appv.md similarity index 100% rename from windows/manage/appv-planning-to-deploy-appv.md rename to windows/application-management/app-v/appv-planning-to-deploy-appv.md diff --git a/windows/manage/appv-preparing-your-environment.md b/windows/application-management/app-v/appv-preparing-your-environment.md similarity index 100% rename from windows/manage/appv-preparing-your-environment.md rename to windows/application-management/app-v/appv-preparing-your-environment.md diff --git a/windows/manage/appv-prerequisites.md b/windows/application-management/app-v/appv-prerequisites.md similarity index 100% rename from windows/manage/appv-prerequisites.md rename to windows/application-management/app-v/appv-prerequisites.md diff --git a/windows/manage/appv-publish-a-connection-group.md b/windows/application-management/app-v/appv-publish-a-connection-group.md similarity index 100% rename from windows/manage/appv-publish-a-connection-group.md rename to windows/application-management/app-v/appv-publish-a-connection-group.md diff --git a/windows/manage/appv-publish-a-packages-with-the-management-console.md b/windows/application-management/app-v/appv-publish-a-packages-with-the-management-console.md similarity index 100% rename from windows/manage/appv-publish-a-packages-with-the-management-console.md rename to windows/application-management/app-v/appv-publish-a-packages-with-the-management-console.md diff --git a/windows/manage/appv-register-and-unregister-a-publishing-server-with-the-management-console.md b/windows/application-management/app-v/appv-register-and-unregister-a-publishing-server-with-the-management-console.md similarity index 100% rename from windows/manage/appv-register-and-unregister-a-publishing-server-with-the-management-console.md rename to windows/application-management/app-v/appv-register-and-unregister-a-publishing-server-with-the-management-console.md diff --git a/windows/manage/appv-release-notes-for-appv-for-windows-1703.md b/windows/application-management/app-v/appv-release-notes-for-appv-for-windows-1703.md similarity index 100% rename from windows/manage/appv-release-notes-for-appv-for-windows-1703.md rename to windows/application-management/app-v/appv-release-notes-for-appv-for-windows-1703.md diff --git a/windows/manage/appv-release-notes-for-appv-for-windows.md b/windows/application-management/app-v/appv-release-notes-for-appv-for-windows.md similarity index 100% rename from windows/manage/appv-release-notes-for-appv-for-windows.md rename to windows/application-management/app-v/appv-release-notes-for-appv-for-windows.md diff --git a/windows/manage/appv-reporting.md b/windows/application-management/app-v/appv-reporting.md similarity index 100% rename from windows/manage/appv-reporting.md rename to windows/application-management/app-v/appv-reporting.md diff --git a/windows/manage/appv-running-locally-installed-applications-inside-a-virtual-environment.md b/windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md similarity index 100% rename from windows/manage/appv-running-locally-installed-applications-inside-a-virtual-environment.md rename to windows/application-management/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md diff --git a/windows/manage/appv-security-considerations.md b/windows/application-management/app-v/appv-security-considerations.md similarity index 100% rename from windows/manage/appv-security-considerations.md rename to windows/application-management/app-v/appv-security-considerations.md diff --git a/windows/manage/appv-sequence-a-new-application.md b/windows/application-management/app-v/appv-sequence-a-new-application.md similarity index 100% rename from windows/manage/appv-sequence-a-new-application.md rename to windows/application-management/app-v/appv-sequence-a-new-application.md diff --git a/windows/manage/appv-sequence-a-package-with-powershell.md b/windows/application-management/app-v/appv-sequence-a-package-with-powershell.md similarity index 100% rename from windows/manage/appv-sequence-a-package-with-powershell.md rename to windows/application-management/app-v/appv-sequence-a-package-with-powershell.md diff --git a/windows/manage/appv-supported-configurations.md b/windows/application-management/app-v/appv-supported-configurations.md similarity index 100% rename from windows/manage/appv-supported-configurations.md rename to windows/application-management/app-v/appv-supported-configurations.md diff --git a/windows/manage/appv-technical-reference.md b/windows/application-management/app-v/appv-technical-reference.md similarity index 100% rename from windows/manage/appv-technical-reference.md rename to windows/application-management/app-v/appv-technical-reference.md diff --git a/windows/manage/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console.md b/windows/application-management/app-v/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console.md similarity index 100% rename from windows/manage/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console.md rename to windows/application-management/app-v/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console.md diff --git a/windows/manage/appv-troubleshooting.md b/windows/application-management/app-v/appv-troubleshooting.md similarity index 100% rename from windows/manage/appv-troubleshooting.md rename to windows/application-management/app-v/appv-troubleshooting.md diff --git a/windows/manage/appv-upgrading-to-app-v-for-windows-10-from-an-existing-installation.md b/windows/application-management/app-v/appv-upgrading-to-app-v-for-windows-10-from-an-existing-installation.md similarity index 100% rename from windows/manage/appv-upgrading-to-app-v-for-windows-10-from-an-existing-installation.md rename to windows/application-management/app-v/appv-upgrading-to-app-v-for-windows-10-from-an-existing-installation.md diff --git a/windows/manage/appv-using-the-client-management-console.md b/windows/application-management/app-v/appv-using-the-client-management-console.md similarity index 100% rename from windows/manage/appv-using-the-client-management-console.md rename to windows/application-management/app-v/appv-using-the-client-management-console.md diff --git a/windows/manage/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md b/windows/application-management/app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md similarity index 100% rename from windows/manage/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md rename to windows/application-management/app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md diff --git a/windows/manage/appv-viewing-appv-server-publishing-metadata.md b/windows/application-management/app-v/appv-viewing-appv-server-publishing-metadata.md similarity index 100% rename from windows/manage/appv-viewing-appv-server-publishing-metadata.md rename to windows/application-management/app-v/appv-viewing-appv-server-publishing-metadata.md diff --git a/windows/configure/images/app-v-in-adk.png b/windows/application-management/app-v/images/app-v-in-adk.png similarity index 100% rename from windows/configure/images/app-v-in-adk.png rename to windows/application-management/app-v/images/app-v-in-adk.png diff --git a/windows/configure/images/checklistbox.gif b/windows/application-management/app-v/images/checklistbox.gif similarity index 100% rename from windows/configure/images/checklistbox.gif rename to windows/application-management/app-v/images/checklistbox.gif diff --git a/windows/configure/images/packageaddfileandregistrydata-global.png b/windows/application-management/app-v/images/packageaddfileandregistrydata-global.png similarity index 100% rename from windows/configure/images/packageaddfileandregistrydata-global.png rename to windows/application-management/app-v/images/packageaddfileandregistrydata-global.png diff --git a/windows/configure/images/packageaddfileandregistrydata-stream.png b/windows/application-management/app-v/images/packageaddfileandregistrydata-stream.png similarity index 100% rename from windows/configure/images/packageaddfileandregistrydata-stream.png rename to windows/application-management/app-v/images/packageaddfileandregistrydata-stream.png diff --git a/windows/configure/images/packageaddfileandregistrydata.png b/windows/application-management/app-v/images/packageaddfileandregistrydata.png similarity index 100% rename from windows/configure/images/packageaddfileandregistrydata.png rename to windows/application-management/app-v/images/packageaddfileandregistrydata.png diff --git a/windows/application-management/index.md b/windows/application-management/index.md new file mode 100644 index 0000000000..2302c372d1 --- /dev/null +++ b/windows/application-management/index.md @@ -0,0 +1,23 @@ +--- +title: Windows 10 application management +description: Windows 10 application management +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +author: jdeckerMS +localizationpriority: medium +--- + +# Windows 10 application management + +**Applies to** +- Windows 10 + +Learn about managing applications in Window 10 and Windows 10 Mobile clients. + + +| Topic | Description | +|---|---| +|[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications| +|[Sideload apps in Windows 10](sideload-apps-in-windows-10.md)| Requirements and instructions for side-loading LOB applications on Windows 10 and Windows 10 Mobile clients| + diff --git a/windows/deploy/sideload-apps-in-windows-10.md b/windows/application-management/sideload-apps-in-windows-10.md similarity index 100% rename from windows/deploy/sideload-apps-in-windows-10.md rename to windows/application-management/sideload-apps-in-windows-10.md diff --git a/windows/breadcrumb/toc.yml b/windows/breadcrumb/toc.yml deleted file mode 100644 index 40ff5fde9b..0000000000 --- a/windows/breadcrumb/toc.yml +++ /dev/null @@ -1,25 +0,0 @@ -- name: Windows - tocHref: /itpro/windows/ - topicHref: /itpro/windows/index - items: - - name: What's new - tocHref: /itpro/windows/whats-new/ - topicHref: /itpro/windows/whats-new/index - - name: Plan - tocHref: /itpro/windows/plan/ - topicHref: /itpro/windows/plan/index - - name: Deploy - tocHref: /itpro/windows/deploy/ - topicHref: /itpro/windows/deploy/index - - name: Configure - tocHref: /itpro/windows/configure/ - topicHref: /itpro/windows/configure/index - - name: Update - tocHref: /itpro/windows/update/ - topicHref: /itpro/windows/update/index - - name: Keep secure - tocHref: /itpro/windows/keep-secure/ - topicHref: /itpro/windows/keep-secure/index - - name: Manage - tocHref: /itpro/windows/manage/ - topicHref: /itpro/windows/manage/index \ No newline at end of file diff --git a/windows/client-management/TOC.md b/windows/client-management/TOC.md new file mode 100644 index 0000000000..bc68853b9d --- /dev/null +++ b/windows/client-management/TOC.md @@ -0,0 +1,10 @@ +# [Manage clients in Windows 10](index.md) +## [Create mandatory user profiles](mandatory-user-profile.md) +## [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) +## [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md) +## [New policies for Windows 10](new-policies-for-windows-10.md) +## [Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education](group-policies-for-enterprise-and-education-editions.md) +## [Manage the Settings app with Group Policy](manage-settings-app-with-group-policy.md) +## [Reset a Windows 10 Mobile device](reset-a-windows-10-mobile-device.md) +## [Windows 10 Mobile deployment and management guide](windows-10-mobile-and-mdm.md) +## [Windows libraries](windows-libraries.md) \ No newline at end of file diff --git a/windows/manage/administrative-tools-in-windows-10.md b/windows/client-management/administrative-tools-in-windows-10.md similarity index 100% rename from windows/manage/administrative-tools-in-windows-10.md rename to windows/client-management/administrative-tools-in-windows-10.md diff --git a/windows/manage/connect-to-remote-aadj-pc.md b/windows/client-management/connect-to-remote-aadj-pc.md similarity index 93% rename from windows/manage/connect-to-remote-aadj-pc.md rename to windows/client-management/connect-to-remote-aadj-pc.md index 506052a5b3..e67fdf2234 100644 --- a/windows/manage/connect-to-remote-aadj-pc.md +++ b/windows/client-management/connect-to-remote-aadj-pc.md @@ -24,7 +24,7 @@ From its release, Windows 10 has supported remote connections to PCs that are jo ## Set up - Both PCs (local and remote) must be running Windows 10, version 1607. Remote connection to an Azure AD-joined PC that is running earlier versions of Windows 10 is not supported. -- Ensure [Remote Credential Guard](../keep-secure/remote-credential-guard.md), a new feature in Windows 10, version 1607, is turned off on the client PC that you are using to connect to the remote PC. +- Ensure [Remote Credential Guard](/windows/access-protection/remote-credential-guard), a new feature in Windows 10, version 1607, is turned off on the client PC that you are using to connect to the remote PC. - On the PC that you want to connect to: 1. Open system properties for the remote PC. 2. Enable **Allow remote connections to this computer** and select **Allow connections only from computers running Remote Desktop with Network Level Authentication**. diff --git a/windows/manage/group-policies-for-enterprise-and-education-editions.md b/windows/client-management/group-policies-for-enterprise-and-education-editions.md similarity index 67% rename from windows/manage/group-policies-for-enterprise-and-education-editions.md rename to windows/client-management/group-policies-for-enterprise-and-education-editions.md index 74dced9953..ecb2e27c4a 100644 --- a/windows/manage/group-policies-for-enterprise-and-education-editions.md +++ b/windows/client-management/group-policies-for-enterprise-and-education-editions.md @@ -18,18 +18,18 @@ In Windows 10, version 1607, the following Group Policy settings apply only to W | Policy name | Policy path | Comments | | --- | --- | --- | -| **Configure Spotlight on lock screen** | User Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](../configure/windows-spotlight.md). Note that an additional **Cloud Content** policy, **Do not suggest third-party content in Windows spotlight**, does apply to Windows 10 Pro. | -| **Turn off all Windows Spotlight features** | User Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](../configure/windows-spotlight.md) | -| **Turn off Microsoft consumer features** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](../configure/windows-spotlight.md) | -| **Do not display the lock screen** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](../configure/windows-spotlight.md) | -| **Do not require CTRL+ALT+DEL**
combined with
**Turn off app notifications on the lock screen** | Computer Configuration > Administrative Templates > System > Logon
and
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Interactive logon | When both of these policy settings are enabled, the combination will also disable lock screen apps ([assigned access](set-up-a-device-for-anyone-to-use.md)) on Windows 10 Enterprise and Windows 10 Education only. These policy settings can be applied to Windows 10 Pro, but lock screen apps will not be disabled on Windows 10 Pro.

**Important:** The description for **Interactive logon: Do not require CTRL+ALT+DEL** in the Group Policy Editor incorrectly states that it only applies to Windows 10 Enterprise and Education. The description will be corrected in a future release.| -| **Do not show Windows Tips** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](../configure/windows-spotlight.md | -| **Force a specific default lock screen image** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](../configure/windows-spotlight.md) | -| **Start layout** | User Configuration\Administrative Templates\Start Menu and Taskbar | For more info, see [Manage Windows 10 Start layout options and policies](windows-10-start-layout-options-and-policies.md) | +| **Configure Spotlight on lock screen** | User Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight). Note that an additional **Cloud Content** policy, **Do not suggest third-party content in Windows spotlight**, does apply to Windows 10 Pro. | +| **Turn off all Windows Spotlight features** | User Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight) | +| **Turn off Microsoft consumer features** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight) | +| **Do not display the lock screen** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight) | +| **Do not require CTRL+ALT+DEL**
combined with
**Turn off app notifications on the lock screen** | Computer Configuration > Administrative Templates > System > Logon
and
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Interactive logon | When both of these policy settings are enabled, the combination will also disable lock screen apps ([assigned access](/windows/configuration/set-up-a-device-for-anyone-to-use)) on Windows 10 Enterprise and Windows 10 Education only. These policy settings can be applied to Windows 10 Pro, but lock screen apps will not be disabled on Windows 10 Pro.

**Important:** The description for **Interactive logon: Do not require CTRL+ALT+DEL** in the Group Policy Editor incorrectly states that it only applies to Windows 10 Enterprise and Education. The description will be corrected in a future release.| +| **Do not show Windows Tips** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight | +| **Force a specific default lock screen image** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](/windows/configuration/windows-spotlight) | +| **Start layout** | User Configuration\Administrative Templates\Start Menu and Taskbar | For more info, see [Manage Windows 10 Start layout options and policies](/windows/configuration/windows-10-start-layout-options-and-policies) | | **Turn off the Store application** | Computer Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application

User Configuration > Administrative Templates > Windows Components > Store > Turn off the Store application | For more info, see [Knowledge Base article# 3135657](https://support.microsoft.com/kb/3135657). | -| **Only display the private store within the Windows Store app** | Computer Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app

User Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app | For more info, see [Manage access to private store](manage-access-to-private-store.md) | -| **Don't search the web or display web results** | Computer Configuration\Administrative Templates\Windows Components\Search\Don't search the web or display web results | For more info, see [Cortana integration in your enterprise](../configure/cortana-at-work-overview.md) | +| **Only display the private store within the Windows Store app** | Computer Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app

User Configuration > Administrative Templates > Windows Components > Store > Only display the private store within the Windows Store app | For more info, see [Manage access to private store](/microsoft-store/manage-access-to-private-store) | +| **Don't search the web or display web results** | Computer Configuration\Administrative Templates\Windows Components\Search\Don't search the web or display web results | For more info, see [Cortana integration in your enterprise](/windows/configuration/cortana-at-work/cortana-at-work-overview) | - + \ No newline at end of file diff --git a/windows/configure/images/aadj1.jpg b/windows/client-management/images/aadj1.jpg similarity index 100% rename from windows/configure/images/aadj1.jpg rename to windows/client-management/images/aadj1.jpg diff --git a/windows/configure/images/aadj2.jpg b/windows/client-management/images/aadj2.jpg similarity index 100% rename from windows/configure/images/aadj2.jpg rename to windows/client-management/images/aadj2.jpg diff --git a/windows/configure/images/aadj3.jpg b/windows/client-management/images/aadj3.jpg similarity index 100% rename from windows/configure/images/aadj3.jpg rename to windows/client-management/images/aadj3.jpg diff --git a/windows/configure/images/aadj4.jpg b/windows/client-management/images/aadj4.jpg similarity index 100% rename from windows/configure/images/aadj4.jpg rename to windows/client-management/images/aadj4.jpg diff --git a/windows/configure/images/aadjbrowser.jpg b/windows/client-management/images/aadjbrowser.jpg similarity index 100% rename from windows/configure/images/aadjbrowser.jpg rename to windows/client-management/images/aadjbrowser.jpg diff --git a/windows/configure/images/aadjcal.jpg b/windows/client-management/images/aadjcal.jpg similarity index 100% rename from windows/configure/images/aadjcal.jpg rename to windows/client-management/images/aadjcal.jpg diff --git a/windows/configure/images/aadjcalmail.jpg b/windows/client-management/images/aadjcalmail.jpg similarity index 100% rename from windows/configure/images/aadjcalmail.jpg rename to windows/client-management/images/aadjcalmail.jpg diff --git a/windows/configure/images/aadjmail1.jpg b/windows/client-management/images/aadjmail1.jpg similarity index 100% rename from windows/configure/images/aadjmail1.jpg rename to windows/client-management/images/aadjmail1.jpg diff --git a/windows/configure/images/aadjmail2.jpg b/windows/client-management/images/aadjmail2.jpg similarity index 100% rename from windows/configure/images/aadjmail2.jpg rename to windows/client-management/images/aadjmail2.jpg diff --git a/windows/configure/images/aadjmail3.jpg b/windows/client-management/images/aadjmail3.jpg similarity index 100% rename from windows/configure/images/aadjmail3.jpg rename to windows/client-management/images/aadjmail3.jpg diff --git a/windows/configure/images/aadjonedrive.jpg b/windows/client-management/images/aadjonedrive.jpg similarity index 100% rename from windows/configure/images/aadjonedrive.jpg rename to windows/client-management/images/aadjonedrive.jpg diff --git a/windows/configure/images/aadjonenote.jpg b/windows/client-management/images/aadjonenote.jpg similarity index 100% rename from windows/configure/images/aadjonenote.jpg rename to windows/client-management/images/aadjonenote.jpg diff --git a/windows/configure/images/aadjonenote2.jpg b/windows/client-management/images/aadjonenote2.jpg similarity index 100% rename from windows/configure/images/aadjonenote2.jpg rename to windows/client-management/images/aadjonenote2.jpg diff --git a/windows/configure/images/aadjonenote3.jpg b/windows/client-management/images/aadjonenote3.jpg similarity index 100% rename from windows/configure/images/aadjonenote3.jpg rename to windows/client-management/images/aadjonenote3.jpg diff --git a/windows/configure/images/aadjpin.jpg b/windows/client-management/images/aadjpin.jpg similarity index 100% rename from windows/configure/images/aadjpin.jpg rename to windows/client-management/images/aadjpin.jpg diff --git a/windows/configure/images/aadjppt.jpg b/windows/client-management/images/aadjppt.jpg similarity index 100% rename from windows/configure/images/aadjppt.jpg rename to windows/client-management/images/aadjppt.jpg diff --git a/windows/configure/images/aadjverify.jpg b/windows/client-management/images/aadjverify.jpg similarity index 100% rename from windows/configure/images/aadjverify.jpg rename to windows/client-management/images/aadjverify.jpg diff --git a/windows/configure/images/aadjword.jpg b/windows/client-management/images/aadjword.jpg similarity index 100% rename from windows/configure/images/aadjword.jpg rename to windows/client-management/images/aadjword.jpg diff --git a/windows/configure/images/aadjwsfb.jpg b/windows/client-management/images/aadjwsfb.jpg similarity index 100% rename from windows/configure/images/aadjwsfb.jpg rename to windows/client-management/images/aadjwsfb.jpg diff --git a/windows/configure/images/admin-tools-folder.png b/windows/client-management/images/admin-tools-folder.png similarity index 100% rename from windows/configure/images/admin-tools-folder.png rename to windows/client-management/images/admin-tools-folder.png diff --git a/windows/configure/images/admin-tools.png b/windows/client-management/images/admin-tools.png similarity index 100% rename from windows/configure/images/admin-tools.png rename to windows/client-management/images/admin-tools.png diff --git a/windows/configure/images/allow-rdp.png b/windows/client-management/images/allow-rdp.png similarity index 100% rename from windows/configure/images/allow-rdp.png rename to windows/client-management/images/allow-rdp.png diff --git a/windows/configure/images/checkmark.png b/windows/client-management/images/checkmark.png similarity index 100% rename from windows/configure/images/checkmark.png rename to windows/client-management/images/checkmark.png diff --git a/windows/configure/images/copy-to-change.png b/windows/client-management/images/copy-to-change.png similarity index 100% rename from windows/configure/images/copy-to-change.png rename to windows/client-management/images/copy-to-change.png diff --git a/windows/configure/images/copy-to-path.png b/windows/client-management/images/copy-to-path.png similarity index 100% rename from windows/configure/images/copy-to-path.png rename to windows/client-management/images/copy-to-path.png diff --git a/windows/configure/images/copy-to.PNG b/windows/client-management/images/copy-to.PNG similarity index 100% rename from windows/configure/images/copy-to.PNG rename to windows/client-management/images/copy-to.PNG diff --git a/windows/configure/images/crossmark.png b/windows/client-management/images/crossmark.png similarity index 100% rename from windows/configure/images/crossmark.png rename to windows/client-management/images/crossmark.png diff --git a/windows/configure/images/rdp.png b/windows/client-management/images/rdp.png similarity index 100% rename from windows/configure/images/rdp.png rename to windows/client-management/images/rdp.png diff --git a/windows/manage/images/settings-page-visibility-gp.png b/windows/client-management/images/settings-page-visibility-gp.png similarity index 100% rename from windows/manage/images/settings-page-visibility-gp.png rename to windows/client-management/images/settings-page-visibility-gp.png diff --git a/windows/configure/images/sysprep-error.png b/windows/client-management/images/sysprep-error.png similarity index 100% rename from windows/configure/images/sysprep-error.png rename to windows/client-management/images/sysprep-error.png diff --git a/windows/configure/images/windows-10-management-cyod-byod-flow.png b/windows/client-management/images/windows-10-management-cyod-byod-flow.png similarity index 100% rename from windows/configure/images/windows-10-management-cyod-byod-flow.png rename to windows/client-management/images/windows-10-management-cyod-byod-flow.png diff --git a/windows/configure/images/windows-10-management-gp-intune-flow.png b/windows/client-management/images/windows-10-management-gp-intune-flow.png similarity index 100% rename from windows/configure/images/windows-10-management-gp-intune-flow.png rename to windows/client-management/images/windows-10-management-gp-intune-flow.png diff --git a/windows/configure/images/windows-10-management-range-of-options.png b/windows/client-management/images/windows-10-management-range-of-options.png similarity index 100% rename from windows/configure/images/windows-10-management-range-of-options.png rename to windows/client-management/images/windows-10-management-range-of-options.png diff --git a/windows/client-management/index.md b/windows/client-management/index.md new file mode 100644 index 0000000000..9360321453 --- /dev/null +++ b/windows/client-management/index.md @@ -0,0 +1,30 @@ +--- +title: Client management (Windows 10) +description: Windows 10 client management +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +author: jdeckerMS +localizationpriority: medium +--- + +# Client Management + +**Applies to** +- Windows 10 + +Learn about the administrative tools, tasks and best practices for managing Windows 10 and Windows 10 Mobile clients across your enterprise. + +| Topic | Description | +|---|---| +|[Administrative tools in Windows 10](administrative-tools-in-windows-10.md)| Listing of administrative tools useful for ITPros and advanced users in managing Windows client.| +|[Connect to remote AADJ PCs](connect-to-remote-aadj-pc.md)| Instructions for connecting to a remote PC joined to Azure Active Directory (Azure AD)| +|[Group policies for enterprise and education editions](group-policies-for-enterprise-and-education-editions.md)| Listing of all group policy settings that apply specifically to Windows 10 Enterprise and Education editions| +|[Join Windows 10 Mobile to AAD](join-windows-10-mobile-to-azure-active-directory.md)| Describes the considerations and options for using Windows 10 Mobile with Azure AD in your organization.| +|[Manage corporate devices](manage-corporate-devices.md)| Listing of resources to manage all your corporate devices running Windows 10 : desktops, laptops, tablets, and phones | +|[Transitioning to modern ITPro management](manage-windows-10-in-your-organization-modern-management.md)| Describes modern Windows 10 ITPro management scenarios across traditional, hybrid and cloud-based enterprise needs| +|[Mandatory user profiles](mandatory-user-profile.md)| Instructions for managing settings commonly defined in a mandatory profiles, including (but are not limited to): icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more.| +|[New policies for Windows 10](new-policies-for-windows-10.md)| Listing of new group policy settings available in Windows 10| +|[Reset a Windows 10 Mobile device](reset-a-windows-10-mobile-device.md)| Instructions for resetting a Windows 10 Mobile device using either *factory* or *'wipe and persist'* reset options| +|[Deploy Windows 10 Mobile](windows-10-mobile-and-mdm.md)| Considerations and instructions for deploying Windows 10 Mobile| +|[Windows libraries](windows-libraries.md)| Considerations and instructions for managing Windows 10 libraries such as My Documents, My Pictures, and My Music.| diff --git a/windows/manage/join-windows-10-mobile-to-azure-active-directory.md b/windows/client-management/join-windows-10-mobile-to-azure-active-directory.md similarity index 97% rename from windows/manage/join-windows-10-mobile-to-azure-active-directory.md rename to windows/client-management/join-windows-10-mobile-to-azure-active-directory.md index 61e6b65929..1b2593fec1 100644 --- a/windows/manage/join-windows-10-mobile-to-azure-active-directory.md +++ b/windows/client-management/join-windows-10-mobile-to-azure-active-directory.md @@ -122,7 +122,7 @@ An added work account provides the same SSO experience in browser apps like Offi ![set up a pin](images/aadjpin.jpg) - **Note**  To learn more about the PIN requirement, see [Why a PIN is better than a password](../keep-secure/why-a-pin-is-better-than-a-password.md). + **Note**  To learn more about the PIN requirement, see [Why a PIN is better than a password](/windows/access-protection/hello-for-business/hello-why-pin-is-better-than-password).   @@ -191,7 +191,7 @@ To see the Notebooks that your Azure AD account has access to, tap **More Notebo ## Use Windows Store for Business -[Windows Store for Business](windows-store-for-business.md) allows you to specify applications to be available to your users in the Windows Store application. These applications show up on a tab titled for your company. Applications approved in the Windows Store for Business portal can be installed by users. +[Windows Store for Business](/microsoft-store/index) allows you to specify applications to be available to your users in the Windows Store application. These applications show up on a tab titled for your company. Applications approved in the Windows Store for Business portal can be installed by users. ![company tab on store](images/aadjwsfb.jpg) diff --git a/windows/manage/manage-corporate-devices.md b/windows/client-management/manage-corporate-devices.md similarity index 82% rename from windows/manage/manage-corporate-devices.md rename to windows/client-management/manage-corporate-devices.md index c282a281cf..a966ef1982 100644 --- a/windows/manage/manage-corporate-devices.md +++ b/windows/client-management/manage-corporate-devices.md @@ -27,12 +27,12 @@ You can use the same management tools to manage all device types running Windows | --- | --- | | [Manage Windows 10 in your organization - transitioning to modern management](manage-windows-10-in-your-organization-modern-management.md) | Strategies for deploying and managing Windows 10, including deploying Windows 10 in a mixed environment | | [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) | How to use Remote Desktop Connection to connect to an Azure AD-joined PC | -| [Manage Windows 10 and Windows Store tips, tricks, and suggestions](manage-tips-and-suggestions.md) | Options to manage user experiences to provide a consistent and predictable experience for employees | +| [Manage Windows 10 and Windows Store tips, tricks, and suggestions](/windows/configuration/manage-tips-and-suggestions) | Options to manage user experiences to provide a consistent and predictable experience for employees | | [New policies for Windows 10](new-policies-for-windows-10.md) | New Group Policy settings added in Windows 10 | | [Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education](group-policies-for-enterprise-and-education-editions.md) | Group Policy settings that apply only to Windows 10 Enterprise and Windows 10 Education | -| [Changes to Group Policy settings for Start in Windows 10](changes-to-start-policies-in-windows-10.md) | Changes to the Group Policy settings that you use to manage Start | +| [Changes to Group Policy settings for Start in Windows 10](/windows/configuration/changes-to-start-policies-in-windows-10) | Changes to the Group Policy settings that you use to manage Start | | [Windows 10 Mobile and MDM](windows-10-mobile-and-mdm.md) | How to plan for and deploy Windows 10 Mobile devices | -| [Introduction to configuration service providers (CSPs) for IT pros](how-it-pros-can-use-configuration-service-providers.md) | How IT pros and system administrators can take advantage of many settings available through CSPs to configure devices running Windows 10 and Windows 10 Mobile in their organizations | +| [Introduction to configuration service providers (CSPs) for IT pros](/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers) | How IT pros and system administrators can take advantage of many settings available through CSPs to configure devices running Windows 10 and Windows 10 Mobile in their organizations | ## Learn more diff --git a/windows/manage/manage-settings-app-with-group-policy.md b/windows/client-management/manage-settings-app-with-group-policy.md similarity index 100% rename from windows/manage/manage-settings-app-with-group-policy.md rename to windows/client-management/manage-settings-app-with-group-policy.md diff --git a/windows/manage/manage-windows-10-in-your-organization-modern-management.md b/windows/client-management/manage-windows-10-in-your-organization-modern-management.md similarity index 100% rename from windows/manage/manage-windows-10-in-your-organization-modern-management.md rename to windows/client-management/manage-windows-10-in-your-organization-modern-management.md diff --git a/windows/manage/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md similarity index 96% rename from windows/manage/mandatory-user-profile.md rename to windows/client-management/mandatory-user-profile.md index 3ced9aa8fd..f3344f6f15 100644 --- a/windows/manage/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -162,10 +162,9 @@ When a user is configured with a mandatory profile, Windows 10 starts as though ## Related topics -- [Manage Windows 10 Start layout and taskbar options](windows-10-start-layout-options-and-policies.md) -- [Lock down Windows 10 to specific apps](lock-down-windows-10-to-specific-apps.md) -- [Windows Spotlight on the lock screen](../configure/windows-spotlight.md) -- [Configure devices without MDM](configure-devices-without-mdm.md) - +- [Manage Windows 10 Start layout and taskbar options](/windows/configuration/windows-10-start-layout-options-and-policies) +- [Lock down Windows 10 to specific apps](/windows/configuration/lock-down-windows-10-to-specific-apps) +- [Windows Spotlight on the lock screen](/windows/configuration/windows-spotlight) +- [Configure devices without MDM](/windows/configuration/configure-devices-without-mdm) diff --git a/windows/manage/new-policies-for-windows-10.md b/windows/client-management/new-policies-for-windows-10.md similarity index 90% rename from windows/manage/new-policies-for-windows-10.md rename to windows/client-management/new-policies-for-windows-10.md index 311f3f125f..bdb9f28644 100644 --- a/windows/manage/new-policies-for-windows-10.md +++ b/windows/client-management/new-policies-for-windows-10.md @@ -35,7 +35,7 @@ There are some new policy settings in Group Policy for devices running Windows  - Allow applications to share app data between users -- [Start screen and Start menu layout](customize-windows-10-start-screens-by-using-group-policy.md) +- [Start screen and Start menu layout](/windows/configuration/customize-windows-10-start-screens-by-using-group-policy) - Windows Tips @@ -62,7 +62,7 @@ Mobile device management (MDM) for Windows 10 Pro, Windows 10 Enterprise, Wind - Hardware-based device health attestation -- [Kiosk mode](set-up-a-device-for-anyone-to-use.md), start screen, start menu layout +- [Kiosk mode](/windows/configuration/set-up-a-device-for-anyone-to-use), start screen, start menu layout - Security @@ -85,7 +85,7 @@ No new [Exchange ActiveSync policies](https://go.microsoft.com/fwlink/p/?LinkId= [Manage corporate devices](manage-corporate-devices.md) -[Changes to Group Policy settings for Start in Windows 10](changes-to-start-policies-in-windows-10.md) +[Changes to Group Policy settings for Start in Windows 10](/windows/configuration/changes-to-start-policies-in-windows-10) [Windows 10 Mobile and MDM](windows-10-mobile-and-mdm.md) diff --git a/windows/manage/reset-a-windows-10-mobile-device.md b/windows/client-management/reset-a-windows-10-mobile-device.md similarity index 100% rename from windows/manage/reset-a-windows-10-mobile-device.md rename to windows/client-management/reset-a-windows-10-mobile-device.md diff --git a/windows/manage/windows-10-mobile-and-mdm.md b/windows/client-management/windows-10-mobile-and-mdm.md similarity index 99% rename from windows/manage/windows-10-mobile-and-mdm.md rename to windows/client-management/windows-10-mobile-and-mdm.md index cc517ce971..0d6a833f58 100644 --- a/windows/manage/windows-10-mobile-and-mdm.md +++ b/windows/client-management/windows-10-mobile-and-mdm.md @@ -195,7 +195,7 @@ The Windows Push Notification Services enable software developers to send toast, However, push notifications can affect battery life so the battery saver in Windows 10 Mobile limits background activity on the devices to extend battery life. Users can configure battery saver to turn on automatically when the battery drops below a set threshold. Windows 10 Mobile disables the receipt of push notifications to save energy when battery saver is on. However, there is an exception to this behavior. In Windows 10 Mobile, the Always allowed battery saver setting (found in the Settings app) allows apps to receive push notifications even when battery saver is on. Users can manually configure this list, or IT can use the MDM system to configure the battery saver settings URI scheme in Windows 10 Mobile (ms-settings:batterysaver-settings). -For more information about health attestation in Windows 10 Mobile, see the [Windows 10 Mobile security guide](../keep-secure/windows-10-mobile-security-guide.md). +For more information about health attestation in Windows 10 Mobile, see the [Windows 10 Mobile security guide](/windows/device-security/windows-10-mobile-security-guide). **Windows Update for Business** Microsoft designed Windows Update for Business to provide IT administrators with additional Windows Update-centric management capabilities, such as the ability to deploy updates to groups of devices and to define maintenance windows for installing updates. @@ -301,7 +301,7 @@ Certificates help improve security by providing account authentication, Wi Fi au To install certificates manually, you can post them on Microsoft Edge website or send them directly via email, which is ideal for testing purposes. Using SCEP and MDM systems, certificate management is completely transparent and requires no user intervention, helping improve user productivity, and reduce support calls. Your MDM system can automatically deploy these certificates to the devices’ certificate stores after you enroll the device (as long as the MDM system supports the Simple Certificate Enrollment Protocol (SCEP) or Personal Information Exchange (PFX)). The MDM server can also query and delete SCEP enrolled client certificate (including user installed certificates), or trigger a new enrollment request before the current certificate is expired. In addition to SCEP certificate management, Windows 10 Mobile supports deployment of PFX certificates. The table below lists the Windows 10 Mobile PFX certificate deployment settings. -Get more detailed information about MDM certificate management in the [Client Certificate Install CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn920023(v=vs.85).aspx) and [Install digital certificates on Windows 10 Mobile](../keep-secure/installing-digital-certificates-on-windows-10-mobile.md). +Get more detailed information about MDM certificate management in the [Client Certificate Install CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/dn920023(v=vs.85).aspx) and [Install digital certificates on Windows 10 Mobile](/windows/access-protection/installing-digital-certificates-on-windows-10-mobile). Use the Allow Manual Root Certificate Installation setting to prevent users from manually installing root and intermediate CA certificates intentionally or accidently. >**Note:** To diagnose certificate-related issues on Windows 10 Mobile devices, use the free Certificates app in Windows Store. This Windows 10 Mobile app can help you: @@ -520,7 +520,7 @@ To install acquired Windows Store or LOB apps offline on a Windows 10 Mobile dev Windows Store apps or LOB apps that have been uploaded to the Windows Store for Business are automatically trusted on all Windows devices, as they are cryptographically signed with Windows Store certificates. LOB apps that are uploaded to the Windows Store for Business are private to your organization and are never visible to other companies or consumers. If you do not want to upload your LOB apps, you have to establish trust for the app on your devices. To establish this trust, you’ll need to generate a signing certificate with your Public Key Infrastructure and add your chain of trust to the trusted certificates on the device (see the certificates section). You can install up to 20 self-signed LOB apps per device with Windows 10 Mobile. To install more than 20 apps on a device, you can purchase a signing certificate from a trusted public Certificate Authority, or upgrade your devices to Windows 10 Mobile Enterprise edition. -Learn more about the [Windows Store for Business](windows-store-for-business.md). +Learn more about the [Windows Store for Business](/microsoft-store/index). ### Managing apps @@ -590,7 +590,7 @@ The following table lists the settings that can be configured for Windows Inform >**Note:** * Are mandatory Windows Information Protection policies. To make Windows Information Protection functional, AppLocker and network isolation settings - specifically Enterprise IP Range and Enterprise Network Domain Names – must be configured. This defines the source of all corporate data that needs protection and also ensures data written to these locations won’t be encrypted by the user’s encryption key (so that others in the company can access it. -For more information on Windows Information Protection, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt697634(v=vs.85).aspx) and the following in-depth article series [Protect your enterprise data using Windows Information Protection](../keep-secure/protect-enterprise-data-using-wip.md). +For more information on Windows Information Protection, see the [EnterpriseDataProtection CSP](https://msdn.microsoft.com/en-us/library/windows/hardware/mt697634(v=vs.85).aspx) and the following in-depth article series [Protect your enterprise data using Windows Information Protection](/windows/threat-protection/windows-information-protection/protect-enterprise-data-using-wip). ### Managing user activities @@ -796,7 +796,7 @@ Upgrading to Windows 10 Mobile Enterprise edition provides additional device and - **Deploy an unlimited number of self-signed LOB apps to a single device:** To use an MDM system to deploy LOB apps directly to devices, you must cryptographically sign the software packages with a code signing certificate that your organization’s certificate authority (CA) generates. You can deploy a maximum of 20 self-signed LOB apps to a Windows 10 Mobile device. To deploy more than 20 self-signed LOB apps, Windows 10 Mobile Enterprise is required. - **Set the telemetry level:** Microsoft collects telemetry data to help keep Windows devices secure and to help Microsoft improve the quality of Windows and Microsoft services. An upgrade to Windows 10 Mobile Enterprise edition is required to set the telemetry level so that only telemetry information required to keep devices secured is gathered. -To learn more about telemetry, visit [Configure Windows telemetry in your organization](configure-windows-telemetry-in-your-organization.md). +To learn more about telemetry, visit [Configure Windows telemetry in your organization](/windows/configuration/configure-windows-telemetry-in-your-organization). To activate Windows 10 Mobile Enterprise, use your MDM system or a provisioning package to inject the Windows 10 Enterprise license on a Windows 10 Mobile device. Licenses can be obtained from the Volume Licensing portal. For testing purposes, you can obtain a licensing file from the MSDN download center. A valid MSDN subscription is required. @@ -897,7 +897,7 @@ In addition, in version 1607, you can configure when the update is applied to th Although Windows 10 Enterprise enables IT administrators to defer installation of new updates from Windows Update, enterprises may also want additional control over update processes. With this in mind, Microsoft created Windows Update for Business. Microsoft designed Windows Update for Business to provide IT administrators with additional Windows Update-centric management capabilities, such as the ability to deploy updates to groups of devices and to define maintenance windows for installing updates. If you are using a MDM system, the use of Windows Update for Business is not a requirement, as you can manage these features from your MDM system. -Learn more about [Windows Update for Business](../plan/windows-update-for-business.md). +Learn more about [Windows Update for Business](/windows/deployment/update/waas-manage-updates-wufb). IT administrators can specify where the device gets updates from with AllowUpdateService. This could be Microsoft Update, Windows Update for Business, or Windows Server Update Services (WSUS. @@ -950,7 +950,7 @@ DHA-enabled device management solutions help IT managers create a unified securi >**Note:** Windows Device Health Attestation Service can be used for conditional access scenarios which may be enabled by Mobile Device Management solutions (e.g.: Microsoft Intune) and other types of management systems (e.g.: SCCM) purchased separately. -For more information about health attestation in Windows 10 Mobile, see the [Windows 10 Mobile security guide](../keep-secure/windows-10-mobile-security-guide.md). +For more information about health attestation in Windows 10 Mobile, see the [Windows 10 Mobile security guide](/windows/device-security/windows-10-mobile-security-guide). Thisis a lists of attributes that are supported by DHA and can trigger the corrective actions mentioned above. - **Attestation Identity Key (AIK) present** Indicates that an AIK is present (i.e., the device can be trusted more than a device without an AIK). @@ -1014,7 +1014,7 @@ Microsoft uses telemetry (diagnostics, performance, and usage data) from Windows You can control the level of data that telemetry systems collect. To configure devices, specify one of these levels in the Allow Telemetry setting with your MDM system. -For more information, see [Configure Windows telemetry in Your organization](configure-windows-telemetry-in-your-organization.md). +For more information, see [Configure Windows telemetry in Your organization](/windows/configuration/configure-windows-telemetry-in-your-organization). >**Note:** Telemetry can only be managed when the device is upgraded to Windows 10 Mobile Enterprise edition. @@ -1072,4 +1072,3 @@ A better option than wiping the entire device is to use Windows Information Prot - November 2015 Updated for Windows 10 Mobile (version 1511) - August 2016 Updated for Windows 10 Mobile Anniversary Update (version 1607) - diff --git a/windows/manage/windows-libraries.md b/windows/client-management/windows-libraries.md similarity index 99% rename from windows/manage/windows-libraries.md rename to windows/client-management/windows-libraries.md index f8937e7a43..0b4746f88d 100644 --- a/windows/manage/windows-libraries.md +++ b/windows/client-management/windows-libraries.md @@ -7,10 +7,9 @@ ms.manager: dongill ms.technology: storage ms.topic: article author: jasongerend -ms.date: 2/6/2017 description: All about Windows Libraries, which are containers for users' content, such as Documents and Pictures. --- -# Windows Libraries +# Windows libraries > Applies to: Windows 10, Windows 8.1, Windows 7, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md new file mode 100644 index 0000000000..962281e962 --- /dev/null +++ b/windows/configuration/TOC.md @@ -0,0 +1,92 @@ +# [Configure Windows 10](index.md) +## [Configure Windows telemetry in your organization](configure-windows-telemetry-in-your-organization.md) +## [Basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) +## [Windows 10, version 1703 diagnostic data](windows-diagnostic-data.md) +## [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) +## [Manage Wi-Fi Sense in your company](manage-wifi-sense-in-enterprise.md) +## [Configure kiosk and shared devices running Windows 10 desktop editions](kiosk-shared-pc.md) +### [Set up a shared or guest PC with Windows 10](set-up-shared-or-guest-pc.md) +### [Set up a kiosk on Windows 10 Pro, Enterprise, or Education](set-up-a-kiosk-for-windows-10-for-desktop-editions.md) +### [Guidelines for choosing an app for assigned access (kiosk mode)](guidelines-for-assigned-access-app.md) +### [Lock down Windows 10 to specific apps (AppLocker)](lock-down-windows-10-to-specific-apps.md) +## [Configure Windows 10 Mobile devices](mobile-devices/configure-mobile.md) +### [Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise](mobile-devices/set-up-a-kiosk-for-windows-10-for-mobile-edition.md) +### [Use Windows Configuration Designer to configure Windows 10 Mobile devices](mobile-devices/provisioning-configure-mobile.md) +#### [NFC-based device provisioning](mobile-devices/provisioning-nfc.md) +#### [Barcode provisioning and the package splitter tool](mobile-devices/provisioning-package-splitter.md) +### [Use the Lockdown Designer app to create a Lockdown XML file](mobile-devices/mobile-lockdown-designer.md) +### [Configure Windows 10 Mobile using Lockdown XML](mobile-devices/lockdown-xml.md) +### [Settings and quick actions that can be locked down in Windows 10 Mobile](mobile-devices/settings-that-can-be-locked-down.md) +### [Product IDs in Windows 10 Mobile](mobile-devices/product-ids-in-windows-10-mobile.md) +### [Start layout XML for mobile editions of Windows 10 (reference)](mobile-devices/start-layout-xml-mobile.md) +## [Configure Start, taskbar, and lock screen](start-taskbar-lockscreen.md) +### [Configure Windows Spotlight on the lock screen](windows-spotlight.md) +### [Manage Windows 10 and Windows Store tips, tricks, and suggestions](manage-tips-and-suggestions.md) +### [Manage Windows 10 Start and taskbar layout](windows-10-start-layout-options-and-policies.md) +#### [Configure Windows 10 taskbar](configure-windows-10-taskbar.md) +#### [Customize and export Start layout](customize-and-export-start-layout.md) +#### [Add image for secondary tiles](start-secondary-tiles.md) +#### [Start layout XML for desktop editions of Windows 10 (reference)](start-layout-xml-desktop.md) +#### [Customize Windows 10 Start and taskbar with Group Policy](customize-windows-10-start-screens-by-using-group-policy.md) +#### [Customize Windows 10 Start and taskbar with provisioning packages](customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md) +#### [Customize Windows 10 Start and tasbkar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md) +#### [Changes to Start policies in Windows 10](changes-to-start-policies-in-windows-10.md) +## [Cortana integration in your business or enterprise](cortana-at-work/cortana-at-work-overview.md) +### [Testing scenarios using Cortana in your business or organization](cortana-at-work/cortana-at-work-testing-scenarios.md) +#### [Test scenario 1 - Sign-in to Azure AD and use Cortana to manage the notebook](cortana-at-work/cortana-at-work-scenario-1.md) +#### [Test scenario 2 - Test scenario 2 - Perform a quick search with Cortana at work](cortana-at-work/cortana-at-work-scenario-2.md) +#### [Test scenario 3 - Set a reminder for a specific location using Cortana at work](cortana-at-work/cortana-at-work-scenario-3.md) +#### [Test scenario 4 - Use Cortana at work to find your upcoming meetings](cortana-at-work/cortana-at-work-scenario-4.md) +#### [Test scenario 5 - Use Cortana to send email to a co-worker](cortana-at-work/cortana-at-work-scenario-5.md) +#### [Test scenario 6 - Review a reminder suggested by Cortana based on what you’ve promised in email](cortana-at-work/cortana-at-work-scenario-6.md) +#### [Test scenario 7 - Use Cortana and Windows Information Protection (WIP) to help protect your organization’s data on a device](cortana-at-work/cortana-at-work-scenario-7.md) +### [Set up and test Cortana with Office 365 in your organization](cortana-at-work/cortana-at-work-o365.md) +### [Set up and test Cortana with Microsoft Dynamics CRM (Preview feature) in your organization](cortana-at-work/cortana-at-work-crm.md) +### [Set up and test Cortana for Power BI in your organization](cortana-at-work/cortana-at-work-powerbi.md) +### [Set up and test custom voice commands in Cortana for your organization](cortana-at-work/cortana-at-work-voice-commands.md) +### [Use Group Policy and mobile device management (MDM) settings to configure Cortana in your organization](cortana-at-work/cortana-at-work-policy-settings.md) +### [Send feedback about Cortana at work back to Microsoft](cortana-at-work/cortana-at-work-feedback.md) +## [Configure access to Windows Store](stop-employees-from-using-the-windows-store.md) +## [Provisioning packages for Windows 10](provisioning-packages/provisioning-packages.md) +### [How provisioning works in Windows 10](provisioning-packages/provisioning-how-it-works.md) +### [Introduction to configuration service providers (CSPs)](provisioning-packages/how-it-pros-can-use-configuration-service-providers.md) +### [Install Windows Configuration Designer](provisioning-packages/provisioning-install-icd.md) +### [Create a provisioning package](provisioning-packages/provisioning-create-package.md) +### [Apply a provisioning package](provisioning-packages/provisioning-apply-package.md) +### [Settings changed when you uninstall a provisioning package](provisioning-packages/provisioning-uninstall-package.md) +### [Provision PCs with common settings for initial deployment (desktop wizard)](provisioning-packages/provision-pcs-for-initial-deployment.md) +### [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md) +### [Use a script to install a desktop app in provisioning packages](provisioning-packages/provisioning-script-to-install-app.md) +### [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-packages/provisioning-powershell.md) +### [Windows ICD command-line interface (reference)](provisioning-packages/provisioning-command-line.md) +### [Create a provisioning package with multivariant settings](provisioning-packages/provisioning-multivariant.md) +## [Lockdown features from Windows Embedded 8.1 Industry](lockdown-features-windows-10.md) +## [User Experience Virtualization (UE-V) for Windows](ue-v/uev-for-windows.md) +### [Get Started with UE-V](ue-v/uev-getting-started.md) +#### [What's New in UE-V for Windows 10, version 1607](ue-v/uev-whats-new-in-uev-for-windows.md) +#### [User Experience Virtualization Release Notes](ue-v/uev-release-notes-1607.md) +#### [Upgrade to UE-V for Windows 10](ue-v/uev-upgrade-uev-from-previous-releases.md) +### [Prepare a UE-V Deployment](ue-v/uev-prepare-for-deployment.md) +#### [Deploy Required UE-V Features](ue-v/uev-deploy-required-features.md) +#### [Deploy UE-V for use with Custom Applications](ue-v/uev-deploy-uev-for-custom-applications.md) +### [Administering UE-V](ue-v/uev-administering-uev.md) +#### [Manage Configurations for UE-V](ue-v/uev-manage-configurations.md) +##### [Configuring UE-V with Group Policy Objects](ue-v/uev-configuring-uev-with-group-policy-objects.md) +##### [Configuring UE-V with System Center Configuration Manager](ue-v/uev-configuring-uev-with-system-center-configuration-manager.md) +##### [Administering UE-V with Windows PowerShell and WMI](ue-v/uev-administering-uev-with-windows-powershell-and-wmi.md) +###### [Managing the UE-V Service and Packages with Windows PowerShell and WMI](ue-v/uev-managing-uev-agent-and-packages-with-windows-powershell-and-wmi.md) +###### [Managing UE-V Settings Location Templates Using Windows PowerShell and WMI](ue-v/uev-managing-settings-location-templates-using-windows-powershell-and-wmi.md) +#### [Working with Custom UE-V Templates and the UE-V Template Generator](ue-v/uev-working-with-custom-templates-and-the-uev-generator.md) +#### [Manage Administrative Backup and Restore in UE-V](ue-v/uev-manage-administrative-backup-and-restore.md) +#### [Changing the Frequency of UE-V Scheduled Tasks](ue-v/uev-changing-the-frequency-of-scheduled-tasks.md) +#### [Migrating UE-V Settings Packages](ue-v/uev-migrating-settings-packages.md) +#### [Using UE-V with Application Virtualization Applications](ue-v/uev-using-uev-with-application-virtualization-applications.md) +### [Troubleshooting UE-V](ue-v/uev-troubleshooting.md) +### [Technical Reference for UE-V](ue-v/uev-technical-reference.md) +#### [Sync Methods for UE-V](ue-v/uev-sync-methods.md) +#### [Sync Trigger Events for UE-V](ue-v/uev-sync-trigger-events.md) +#### [Synchronizing Microsoft Office with UE-V](ue-v/uev-synchronizing-microsoft-office-with-uev.md) +#### [Application Template Schema Reference for UE-V](ue-v/uev-application-template-schema-reference.md) +#### [Security Considerations for UE-V](ue-v/uev-security-considerations.md) + +## [Change history for Configure Windows 10](change-history-for-configure-windows-10.md) diff --git a/windows/configure/basic-level-windows-diagnostic-events-and-fields.md b/windows/configuration/basic-level-windows-diagnostic-events-and-fields.md similarity index 100% rename from windows/configure/basic-level-windows-diagnostic-events-and-fields.md rename to windows/configuration/basic-level-windows-diagnostic-events-and-fields.md diff --git a/windows/configure/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md similarity index 66% rename from windows/configure/change-history-for-configure-windows-10.md rename to windows/configuration/change-history-for-configure-windows-10.md index 7f36bcbec3..8398eff1df 100644 --- a/windows/configure/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -12,15 +12,15 @@ author: jdeckerMS # Change history for Configure Windows 10 -This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md). +This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. ## RELEASE: Windows 10, version 1703 -The topics in this library have been updated for Windows 10, version 1703 (also known as the Creators Update). These topics were previously published in the [Deploy Windows 10](../deploy/index.md) or [Manage and update Windows 10](../manage/index.md) sections. The following new topics have been added: +The topics in this library have been updated for Windows 10, version 1703 (also known as the Creators Update). The following new topics have been added: -- [Use the Lockdown Designer app to create a Lockdown XML file](mobile-lockdown-designer.md) +- [Use the Lockdown Designer app to create a Lockdown XML file](mobile-devices/mobile-lockdown-designer.md) - [Add image for secondary tiles](start-secondary-tiles.md) -- [Provision PCs with apps](provision-pcs-with-apps.md) +- [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md) - [Windows 10, version 1703 basic level Windows diagnostic events and fields](basic-level-windows-diagnostic-events-and-fields.md) - [Windows 10, version 1703 Diagnostic Data](windows-diagnostic-data.md) \ No newline at end of file diff --git a/windows/configure/changes-to-start-policies-in-windows-10.md b/windows/configuration/changes-to-start-policies-in-windows-10.md similarity index 100% rename from windows/configure/changes-to-start-policies-in-windows-10.md rename to windows/configuration/changes-to-start-policies-in-windows-10.md diff --git a/windows/configure/configure-devices-without-mdm.md b/windows/configuration/configure-devices-without-mdm.md similarity index 100% rename from windows/configure/configure-devices-without-mdm.md rename to windows/configuration/configure-devices-without-mdm.md diff --git a/windows/configure/configure-windows-10-taskbar.md b/windows/configuration/configure-windows-10-taskbar.md similarity index 100% rename from windows/configure/configure-windows-10-taskbar.md rename to windows/configuration/configure-windows-10-taskbar.md diff --git a/windows/configure/configure-windows-telemetry-in-your-organization.md b/windows/configuration/configure-windows-telemetry-in-your-organization.md similarity index 99% rename from windows/configure/configure-windows-telemetry-in-your-organization.md rename to windows/configuration/configure-windows-telemetry-in-your-organization.md index d8710b1bb2..657bb0863c 100644 --- a/windows/configure/configure-windows-telemetry-in-your-organization.md +++ b/windows/configuration/configure-windows-telemetry-in-your-organization.md @@ -98,7 +98,7 @@ Windows telemetry also helps Microsoft better understand how customers use (or d ### Insights into your own organization -Sharing information with Microsoft helps make Windows and other products better, but it can also help make your internal processes and user experiences better, as well. Microsoft is in the process of developing a set of analytics customized for your internal use. The first of these, called [Upgrade Readiness](../deploy/manage-windows-upgrades-with-upgrade-readiness.md). +Sharing information with Microsoft helps make Windows and other products better, but it can also help make your internal processes and user experiences better, as well. Microsoft is in the process of developing a set of analytics customized for your internal use. The first of these, called [Upgrade Readiness](../deployment/upgrade/manage-windows-upgrades-with-upgrade-readiness.md). #### Upgrade Readiness diff --git a/windows/configure/cortana-at-work-crm.md b/windows/configuration/cortana-at-work/cortana-at-work-crm.md similarity index 96% rename from windows/configure/cortana-at-work-crm.md rename to windows/configuration/cortana-at-work/cortana-at-work-crm.md index 4bfca8e08c..a1011e2397 100644 --- a/windows/configure/cortana-at-work-crm.md +++ b/windows/configuration/cortana-at-work/cortana-at-work-crm.md @@ -19,7 +19,7 @@ Cortana integration is a Preview feature that's available for your test or dev e >[!NOTE] >For more info about Dynamics CRM integration, how to turn on Cortana, and how to provide feedback, see [Preview feature: Set up Cortana integration](http://go.microsoft.com/fwlink/p/?LinkId=746819). -![Cortana at work, showing the sales data pulled from Dynamics CRM](images/cortana-crm-screen.png) +![Cortana at work, showing the sales data pulled from Dynamics CRM](../images/cortana-crm-screen.png) ## Turn on Cortana with Dynamics CRM in your organization You must be a CRM administrator to turn on and use Preview features. For more info about what Preview features are and how to use them, see [What are Preview features and how do I enable them](http://go.microsoft.com/fwlink/p/?LinkId=746817)? @@ -43,7 +43,7 @@ You must tell your employees to turn on Cortana, before they’ll be able to use 2. Click on **Connected Services**, click **Dynamics CRM**, and then click **Connect**. - ![Cotana at work, showing how to turn on the connected services for Dynamics CRM](images/cortana-connect-crm.png) + ![Cotana at work, showing how to turn on the connected services for Dynamics CRM](../images/cortana-connect-crm.png) The employee can also disconnect by clicking **Disconnect** from the **Dynamics CRM** screen. diff --git a/windows/configure/cortana-at-work-feedback.md b/windows/configuration/cortana-at-work/cortana-at-work-feedback.md similarity index 96% rename from windows/configure/cortana-at-work-feedback.md rename to windows/configuration/cortana-at-work/cortana-at-work-feedback.md index d27d30e1cf..fc46c6b7ee 100644 --- a/windows/configure/cortana-at-work-feedback.md +++ b/windows/configuration/cortana-at-work/cortana-at-work-feedback.md @@ -16,7 +16,7 @@ localizationpriority: high We ask that you report bugs and issues. To provide feedback, you can click the **Feedback** icon in the Cortana window. When you send this form to Microsoft it also includes troubleshooting info, in case you run into problems. -![Cortana at work, showing how to provide feedback to Microsoft](images/cortana-feedback.png) +![Cortana at work, showing how to provide feedback to Microsoft](../images/cortana-feedback.png) If you don't want to use the feedback tool in Cortana, you can add feedback through the general Windows Insider Program feedback app. For info about the feedback app, see [How to use Windows Insider Preview – Updates and feedback](http://windows.microsoft.com/en-us/windows/preview-updates-feedback-pc). diff --git a/windows/configure/cortana-at-work-o365.md b/windows/configuration/cortana-at-work/cortana-at-work-o365.md similarity index 97% rename from windows/configure/cortana-at-work-o365.md rename to windows/configuration/cortana-at-work/cortana-at-work-o365.md index be3a27e0f3..b9b9f1f63c 100644 --- a/windows/configure/cortana-at-work-o365.md +++ b/windows/configuration/cortana-at-work/cortana-at-work-o365.md @@ -18,7 +18,7 @@ Cortana in Windows 10 is already great at letting your employees quickly see wha But Cortana works even harder when she connects to Office 365, helping employees to be notified about unusual events, such as meetings over lunch or during a typical commute time, and about early meetings, even setting an alarm so the employee isn’t late. -![Cortana at work, showing the day's schedule pulled from Office 365](images/cortana-o365-screen.png) +![Cortana at work, showing the day's schedule pulled from Office 365](../images/cortana-o365-screen.png) We’re continuing to add more and more capabilities to Cortana so she can become even more helpful with your productivity-related tasks, such as emailing, scheduling, and other tasks that are important to help you be successful. @@ -45,7 +45,7 @@ You must tell your employees to turn on Cortana before they’ll be able to use 2. Click on **Connected Services**, click **Office 365**, and then click **Connect**. - ![Cotana at work, showing how to turn on the connected services for Office 365](images/cortana-connect-o365.png) + ![Cotana at work, showing how to turn on the connected services for Office 365](../images/cortana-connect-o365.png) The employee can also disconnect by clicking **Disconnect** from the **Office 365** screen. diff --git a/windows/configure/cortana-at-work-overview.md b/windows/configuration/cortana-at-work/cortana-at-work-overview.md similarity index 92% rename from windows/configure/cortana-at-work-overview.md rename to windows/configuration/cortana-at-work/cortana-at-work-overview.md index 9202776ada..c6a9a191ca 100644 --- a/windows/configure/cortana-at-work-overview.md +++ b/windows/configuration/cortana-at-work/cortana-at-work-overview.md @@ -20,7 +20,7 @@ Cortana has powerful configuration options, specifically optimized for your busi Using Azure AD also means that you can remove an employee’s profile (for example, when an employee leaves your organization) while respecting Windows Information Protection (WIP) policies and ignoring enterprise content, such as emails, calendar items, and people lists that are marked as enterprise data. -![Cortana at work, showing the About me screen](images/cortana-about-me.png) +![Cortana at work, showing the About me screen](../images/cortana-about-me.png) ## Where is Cortana available for use in my organization? You can use Cortana at work in all countries/regions where Cortana is supported for consumers. This includes the United States, United Kingdom, Canada, France, Italy, Germany, Spain, China, Japan, India, and Australia. As Cortana comes to more countries, she will also become available to enterprise customers. @@ -42,7 +42,7 @@ Cortana requires the following hardware and software to successfully run the inc |Client operating system |