mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 13:27:23 +00:00
Fix issues
This commit is contained in:
Vinay Pamnani
parent
0e79901e8c
commit
df59568106
@ -20532,7 +20532,7 @@
|
||||
},
|
||||
{
|
||||
"source_path": "windows/client-management/mdm/enterprisedesktopappmanagement2-xsd.md",
|
||||
"redirect_url": "/windows/client-management/mdm/windows/enterprisedesktopappmanagement-csp#downloadinstall-xsd-schema",
|
||||
"redirect_url": "/windows/client-management/mdm/enterprisedesktopappmanagement-csp#downloadinstall-xsd-schema",
|
||||
"redirect_document_id": true
|
||||
},
|
||||
{
|
||||
|
||||
@ -324,8 +324,7 @@ This node accepts a ShellLauncherConfiguration xml as input.
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
In **Windows 10, version 1903**, Shell Launcher V2 was introduced to support both UWP and Win32 apps as the custom shell.
|
||||
|
||||
- For more information on the schema, see [ShellLauncherConfiguration XSD](#shelllauncherconfiguration-xsd).
|
||||
- For more information, see [Shell Launcher](/windows/configuration/kiosk-shelllauncher).
|
||||
For more information, see [Shell Launcher](/windows/configuration/kiosk-shelllauncher).
|
||||
|
||||
> [!IMPORTANT]
|
||||
> You can't set both ShellLauncher and KioskModeApp at the same time on the device.
|
||||
|
||||
@ -4,7 +4,7 @@ description: Learn more about the Defender CSP.
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 02/17/2023
|
||||
ms.date: 02/28/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -21,92 +21,90 @@ ms.topic: reference
|
||||
<!-- Defender-Editable-End -->
|
||||
|
||||
<!-- Defender-Tree-Begin -->
|
||||
The following example shows the Defender configuration service provider in tree format.
|
||||
The following list shows the Defender configuration service provider nodes:
|
||||
|
||||
```text
|
||||
./Device/Vendor/MSFT/Defender
|
||||
--- Configuration
|
||||
------ AllowDatagramProcessingOnWinServer
|
||||
------ AllowNetworkProtectionDownLevel
|
||||
------ AllowNetworkProtectionOnWinServer
|
||||
------ ASROnlyPerRuleExclusions
|
||||
------ DataDuplicationDirectory
|
||||
------ DataDuplicationLocalRetentionPeriod
|
||||
------ DataDuplicationRemoteLocation
|
||||
------ DefaultEnforcement
|
||||
------ DeviceControl
|
||||
--------- PolicyGroups
|
||||
------------ {GroupId}
|
||||
--------------- GroupData
|
||||
--------- PolicyRules
|
||||
------------ {RuleId}
|
||||
--------------- RuleData
|
||||
------ DeviceControlEnabled
|
||||
------ DisableCpuThrottleOnIdleScans
|
||||
------ DisableDnsOverTcpParsing
|
||||
------ DisableDnsParsing
|
||||
------ DisableFtpParsing
|
||||
------ DisableGradualRelease
|
||||
------ DisableHttpParsing
|
||||
------ DisableInboundConnectionFiltering
|
||||
------ DisableLocalAdminMerge
|
||||
------ DisableNetworkProtectionPerfTelemetry
|
||||
------ DisableRdpParsing
|
||||
------ DisableSmtpParsing
|
||||
------ DisableSshParsing
|
||||
------ DisableTlsParsing
|
||||
------ EnableDnsSinkhole
|
||||
------ EnableFileHashComputation
|
||||
------ EngineUpdatesChannel
|
||||
------ HideExclusionsFromLocalAdmins
|
||||
------ IntelTDTEnabled
|
||||
------ MeteredConnectionUpdates
|
||||
------ PassiveRemediation
|
||||
------ PlatformUpdatesChannel
|
||||
------ RandomizeScheduleTaskTimes
|
||||
------ ScanOnlyIfIdleEnabled
|
||||
------ SchedulerRandomizationTime
|
||||
------ SecurityIntelligenceUpdatesChannel
|
||||
------ SupportLogLocation
|
||||
------ TamperProtection
|
||||
------ ThrottleForScheduledScanOnly
|
||||
--- Detections
|
||||
------ {ThreatId}
|
||||
--------- Category
|
||||
--------- CurrentStatus
|
||||
--------- ExecutionStatus
|
||||
--------- InitialDetectionTime
|
||||
--------- LastThreatStatusChangeTime
|
||||
--------- Name
|
||||
--------- NumberOfDetections
|
||||
--------- Severity
|
||||
--------- URL
|
||||
--- Health
|
||||
------ ComputerState
|
||||
------ DefenderEnabled
|
||||
------ DefenderVersion
|
||||
------ EngineVersion
|
||||
------ FullScanOverdue
|
||||
------ FullScanRequired
|
||||
------ FullScanSigVersion
|
||||
------ FullScanTime
|
||||
------ IsVirtualMachine
|
||||
------ NisEnabled
|
||||
------ ProductStatus
|
||||
------ QuickScanOverdue
|
||||
------ QuickScanSigVersion
|
||||
------ QuickScanTime
|
||||
------ RebootRequired
|
||||
------ RtpEnabled
|
||||
------ SignatureOutOfDate
|
||||
------ SignatureVersion
|
||||
------ TamperProtectionEnabled
|
||||
--- OfflineScan
|
||||
--- RollbackEngine
|
||||
--- RollbackPlatform
|
||||
--- Scan
|
||||
--- UpdateSignature
|
||||
```
|
||||
- ./Device/Vendor/MSFT/Defender
|
||||
- [Configuration](#configuration)
|
||||
- [AllowDatagramProcessingOnWinServer](#configurationallowdatagramprocessingonwinserver)
|
||||
- [AllowNetworkProtectionDownLevel](#configurationallownetworkprotectiondownlevel)
|
||||
- [AllowNetworkProtectionOnWinServer](#configurationallownetworkprotectiononwinserver)
|
||||
- [ASROnlyPerRuleExclusions](#configurationasronlyperruleexclusions)
|
||||
- [DataDuplicationDirectory](#configurationdataduplicationdirectory)
|
||||
- [DataDuplicationLocalRetentionPeriod](#configurationdataduplicationlocalretentionperiod)
|
||||
- [DataDuplicationRemoteLocation](#configurationdataduplicationremotelocation)
|
||||
- [DefaultEnforcement](#configurationdefaultenforcement)
|
||||
- [DeviceControl](#configurationdevicecontrol)
|
||||
- [PolicyGroups](#configurationdevicecontrolpolicygroups)
|
||||
- [{GroupId}](#configurationdevicecontrolpolicygroupsgroupid)
|
||||
- [GroupData](#configurationdevicecontrolpolicygroupsgroupidgroupdata)
|
||||
- [PolicyRules](#configurationdevicecontrolpolicyrules)
|
||||
- [{RuleId}](#configurationdevicecontrolpolicyrulesruleid)
|
||||
- [RuleData](#configurationdevicecontrolpolicyrulesruleidruledata)
|
||||
- [DeviceControlEnabled](#configurationdevicecontrolenabled)
|
||||
- [DisableCpuThrottleOnIdleScans](#configurationdisablecputhrottleonidlescans)
|
||||
- [DisableDnsOverTcpParsing](#configurationdisablednsovertcpparsing)
|
||||
- [DisableDnsParsing](#configurationdisablednsparsing)
|
||||
- [DisableFtpParsing](#configurationdisableftpparsing)
|
||||
- [DisableGradualRelease](#configurationdisablegradualrelease)
|
||||
- [DisableHttpParsing](#configurationdisablehttpparsing)
|
||||
- [DisableInboundConnectionFiltering](#configurationdisableinboundconnectionfiltering)
|
||||
- [DisableLocalAdminMerge](#configurationdisablelocaladminmerge)
|
||||
- [DisableNetworkProtectionPerfTelemetry](#configurationdisablenetworkprotectionperftelemetry)
|
||||
- [DisableRdpParsing](#configurationdisablerdpparsing)
|
||||
- [DisableSmtpParsing](#configurationdisablesmtpparsing)
|
||||
- [DisableSshParsing](#configurationdisablesshparsing)
|
||||
- [DisableTlsParsing](#configurationdisabletlsparsing)
|
||||
- [EnableDnsSinkhole](#configurationenablednssinkhole)
|
||||
- [EnableFileHashComputation](#configurationenablefilehashcomputation)
|
||||
- [EngineUpdatesChannel](#configurationengineupdateschannel)
|
||||
- [HideExclusionsFromLocalAdmins](#configurationhideexclusionsfromlocaladmins)
|
||||
- [IntelTDTEnabled](#configurationinteltdtenabled)
|
||||
- [MeteredConnectionUpdates](#configurationmeteredconnectionupdates)
|
||||
- [PassiveRemediation](#configurationpassiveremediation)
|
||||
- [PlatformUpdatesChannel](#configurationplatformupdateschannel)
|
||||
- [RandomizeScheduleTaskTimes](#configurationrandomizescheduletasktimes)
|
||||
- [ScanOnlyIfIdleEnabled](#configurationscanonlyifidleenabled)
|
||||
- [SchedulerRandomizationTime](#configurationschedulerrandomizationtime)
|
||||
- [SecurityIntelligenceUpdatesChannel](#configurationsecurityintelligenceupdateschannel)
|
||||
- [SupportLogLocation](#configurationsupportloglocation)
|
||||
- [TamperProtection](#configurationtamperprotection)
|
||||
- [ThrottleForScheduledScanOnly](#configurationthrottleforscheduledscanonly)
|
||||
- [Detections](#detections)
|
||||
- [{ThreatId}](#detectionsthreatid)
|
||||
- [Category](#detectionsthreatidcategory)
|
||||
- [CurrentStatus](#detectionsthreatidcurrentstatus)
|
||||
- [ExecutionStatus](#detectionsthreatidexecutionstatus)
|
||||
- [InitialDetectionTime](#detectionsthreatidinitialdetectiontime)
|
||||
- [LastThreatStatusChangeTime](#detectionsthreatidlastthreatstatuschangetime)
|
||||
- [Name](#detectionsthreatidname)
|
||||
- [NumberOfDetections](#detectionsthreatidnumberofdetections)
|
||||
- [Severity](#detectionsthreatidseverity)
|
||||
- [URL](#detectionsthreatidurl)
|
||||
- [Health](#health)
|
||||
- [ComputerState](#healthcomputerstate)
|
||||
- [DefenderEnabled](#healthdefenderenabled)
|
||||
- [DefenderVersion](#healthdefenderversion)
|
||||
- [EngineVersion](#healthengineversion)
|
||||
- [FullScanOverdue](#healthfullscanoverdue)
|
||||
- [FullScanRequired](#healthfullscanrequired)
|
||||
- [FullScanSigVersion](#healthfullscansigversion)
|
||||
- [FullScanTime](#healthfullscantime)
|
||||
- [IsVirtualMachine](#healthisvirtualmachine)
|
||||
- [NisEnabled](#healthnisenabled)
|
||||
- [ProductStatus](#healthproductstatus)
|
||||
- [QuickScanOverdue](#healthquickscanoverdue)
|
||||
- [QuickScanSigVersion](#healthquickscansigversion)
|
||||
- [QuickScanTime](#healthquickscantime)
|
||||
- [RebootRequired](#healthrebootrequired)
|
||||
- [RtpEnabled](#healthrtpenabled)
|
||||
- [SignatureOutOfDate](#healthsignatureoutofdate)
|
||||
- [SignatureVersion](#healthsignatureversion)
|
||||
- [TamperProtectionEnabled](#healthtamperprotectionenabled)
|
||||
- [OfflineScan](#offlinescan)
|
||||
- [RollbackEngine](#rollbackengine)
|
||||
- [RollbackPlatform](#rollbackplatform)
|
||||
- [Scan](#scan)
|
||||
- [UpdateSignature](#updatesignature)
|
||||
<!-- Defender-Tree-End -->
|
||||
|
||||
<!-- Device-Configuration-Begin -->
|
||||
@ -633,7 +631,7 @@ Control Device Control default enforcement. This is the enforcement applied if t
|
||||
|
||||
<!-- Device-Configuration-DeviceControl-PolicyGroups-{GroupId}-GroupData-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
Follow the instructions provided here: <https://learn.microsoft.com/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control>
|
||||
For more information, see [Microsoft Defender for Endpoint Device Control Removable Storage Access Control](/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control).
|
||||
<!-- Device-Configuration-DeviceControl-PolicyGroups-{GroupId}-GroupData-Description-End -->
|
||||
|
||||
<!-- Device-Configuration-DeviceControl-PolicyGroups-{GroupId}-GroupData-Editable-Begin -->
|
||||
@ -748,7 +746,7 @@ Follow the instructions provided here: <https://learn.microsoft.com/microsoft-36
|
||||
|
||||
<!-- Device-Configuration-DeviceControl-PolicyRules-{RuleId}-RuleData-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
Follow the instructions provided here: <https://learn.microsoft.com/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control>
|
||||
For more information, see [Microsoft Defender for Endpoint Device Control Removable Storage Access Control](/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control).
|
||||
<!-- Device-Configuration-DeviceControl-PolicyRules-{RuleId}-RuleData-Description-End -->
|
||||
|
||||
<!-- Device-Configuration-DeviceControl-PolicyRules-{RuleId}-RuleData-Editable-Begin -->
|
||||
@ -1795,9 +1793,9 @@ Setting to control automatic remediation for Sense scans.
|
||||
|
||||
| Flag | Description |
|
||||
|:--|:--|
|
||||
| 0x1 | |
|
||||
| 0x2 | |
|
||||
| 0x4 | |
|
||||
| 0x1 | PASSIVE_REMEDIATION_FLAG_SENSE_AUTO_REMEDIATION: Passive Remediation Sense AutoRemediation. |
|
||||
| 0x2 | PASSIVE_REMEDIATION_FLAG_RTP_AUDIT: Passive Remediation Realtime Protection Audit. |
|
||||
| 0x4 | PASSIVE_REMEDIATION_FLAG_RTP_REMEDIATION: Passive Remediation Realtime Protection Remediation. |
|
||||
<!-- Device-Configuration-PassiveRemediation-AllowedValues-End -->
|
||||
|
||||
<!-- Device-Configuration-PassiveRemediation-Examples-Begin -->
|
||||
|
||||
@ -4,7 +4,7 @@ description: Learn more about the DiagnosticLog CSP.
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 02/21/2023
|
||||
ms.date: 02/28/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -21,49 +21,47 @@ ms.topic: reference
|
||||
<!-- DiagnosticLog-Editable-End -->
|
||||
|
||||
<!-- DiagnosticLog-Tree-Begin -->
|
||||
The following example shows the DiagnosticLog configuration service provider in tree format.
|
||||
The following list shows the DiagnosticLog configuration service provider nodes:
|
||||
|
||||
```text
|
||||
./Vendor/MSFT/DiagnosticLog
|
||||
--- DeviceStateData
|
||||
------ MdmConfiguration
|
||||
--- DiagnosticArchive
|
||||
------ ArchiveDefinition
|
||||
------ ArchiveResults
|
||||
--- EtwLog
|
||||
------ Channels
|
||||
--------- {ChannelName}
|
||||
------------ Export
|
||||
------------ Filter
|
||||
------------ State
|
||||
------ Collectors
|
||||
--------- {CollectorName}
|
||||
------------ LogFileSizeLimitMB
|
||||
------------ Providers
|
||||
--------------- {ProviderGuid}
|
||||
------------------ Keywords
|
||||
------------------ State
|
||||
------------------ TraceLevel
|
||||
------------ TraceControl
|
||||
------------ TraceLogFileMode
|
||||
------------ TraceStatus
|
||||
--- FileDownload
|
||||
------ DMChannel
|
||||
--------- {FileContext}
|
||||
------------ BlockCount
|
||||
------------ BlockData
|
||||
------------ BlockIndexToRead
|
||||
------------ BlockSizeKB
|
||||
------------ DataBlocks
|
||||
--------------- {BlockNumber}
|
||||
--- Policy
|
||||
------ Channels
|
||||
--------- {ChannelName}
|
||||
------------ ActionWhenFull
|
||||
------------ Enabled
|
||||
------------ MaximumFileSize
|
||||
------------ SDDL
|
||||
```
|
||||
- ./Vendor/MSFT/DiagnosticLog
|
||||
- [DeviceStateData](#devicestatedata)
|
||||
- [MdmConfiguration](#devicestatedatamdmconfiguration)
|
||||
- [DiagnosticArchive](#diagnosticarchive)
|
||||
- [ArchiveDefinition](#diagnosticarchivearchivedefinition)
|
||||
- [ArchiveResults](#diagnosticarchivearchiveresults)
|
||||
- [EtwLog](#etwlog)
|
||||
- [Channels](#etwlogchannels)
|
||||
- [{ChannelName}](#etwlogchannelschannelname)
|
||||
- [Export](#etwlogchannelschannelnameexport)
|
||||
- [Filter](#etwlogchannelschannelnamefilter)
|
||||
- [State](#etwlogchannelschannelnamestate)
|
||||
- [Collectors](#etwlogcollectors)
|
||||
- [{CollectorName}](#etwlogcollectorscollectorname)
|
||||
- [LogFileSizeLimitMB](#etwlogcollectorscollectornamelogfilesizelimitmb)
|
||||
- [Providers](#etwlogcollectorscollectornameproviders)
|
||||
- [{ProviderGuid}](#etwlogcollectorscollectornameprovidersproviderguid)
|
||||
- [Keywords](#etwlogcollectorscollectornameprovidersproviderguidkeywords)
|
||||
- [State](#etwlogcollectorscollectornameprovidersproviderguidstate)
|
||||
- [TraceLevel](#etwlogcollectorscollectornameprovidersproviderguidtracelevel)
|
||||
- [TraceControl](#etwlogcollectorscollectornametracecontrol)
|
||||
- [TraceLogFileMode](#etwlogcollectorscollectornametracelogfilemode)
|
||||
- [TraceStatus](#etwlogcollectorscollectornametracestatus)
|
||||
- [FileDownload](#filedownload)
|
||||
- [DMChannel](#filedownloaddmchannel)
|
||||
- [{FileContext}](#filedownloaddmchannelfilecontext)
|
||||
- [BlockCount](#filedownloaddmchannelfilecontextblockcount)
|
||||
- [BlockData](#filedownloaddmchannelfilecontextblockdata)
|
||||
- [BlockIndexToRead](#filedownloaddmchannelfilecontextblockindextoread)
|
||||
- [BlockSizeKB](#filedownloaddmchannelfilecontextblocksizekb)
|
||||
- [DataBlocks](#filedownloaddmchannelfilecontextdatablocks)
|
||||
- [{BlockNumber}](#filedownloaddmchannelfilecontextdatablocksblocknumber)
|
||||
- [Policy](#policy)
|
||||
- [Channels](#policychannels)
|
||||
- [{ChannelName}](#policychannelschannelname)
|
||||
- [ActionWhenFull](#policychannelschannelnameactionwhenfull)
|
||||
- [Enabled](#policychannelschannelnameenabled)
|
||||
- [MaximumFileSize](#policychannelschannelnamemaximumfilesize)
|
||||
- [SDDL](#policychannelschannelnamesddl)
|
||||
<!-- DiagnosticLog-Tree-End -->
|
||||
|
||||
<!-- Device-DeviceStateData-Begin -->
|
||||
@ -2659,7 +2657,7 @@ Maximum size of the channel log file in MB.
|
||||
|
||||
<!-- Device-Policy-Channels-{ChannelName}-SDDL-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
SDDL String controlling access to the channel. Default: <https://docs.microsoft.com/windows/desktop/WES/eventmanifestschema-channeltype-complextype>
|
||||
SDDL String controlling access to the channel. For more information, see [ChannelType Complex Type](/windows/win32/wes/eventmanifestschema-channeltype-complextype).
|
||||
<!-- Device-Policy-Channels-{ChannelName}-SDDL-Description-End -->
|
||||
|
||||
<!-- Device-Policy-Channels-{ChannelName}-SDDL-Editable-Begin -->
|
||||
|
||||
@ -57,7 +57,7 @@ To get the EAP configuration from your desktop using the rasphone tool that is s
|
||||
Get-VpnConnection -Name Test
|
||||
```
|
||||
|
||||
<a href="" id="pow"></a>Here's an example output.
|
||||
Here's an example output.
|
||||
|
||||
``` syntax
|
||||
Name : Test
|
||||
@ -88,27 +88,47 @@ To get the EAP configuration from your desktop using the rasphone tool that is s
|
||||
Here's an example output.
|
||||
|
||||
```xml
|
||||
<EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><EapMethod><Type xmlns="http://www.microsoft.co
|
||||
m/provisioning/EapCommon">13</Type><VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId><VendorTy
|
||||
pe xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType><AuthorId xmlns="http://www.microsoft.com/provisi
|
||||
oning/EapCommon">0</AuthorId></EapMethod><Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><Eap xmlns="h
|
||||
ttp://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"><Type>13</Type><EapType xmlns="http://www.microsoft.co
|
||||
m/provisioning/EapTlsConnectionPropertiesV1"><CredentialsSource><CertificateStore><SimpleCertSelection>true</SimpleCertSel
|
||||
ection></CertificateStore></CredentialsSource><ServerValidation><DisableUserPromptForServerValidation>false</DisableUserPr
|
||||
omptForServerValidation><ServerNames></ServerNames></ServerValidation><DifferentUsername>false</DifferentUsername><Perform
|
||||
ServerValidation xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</PerformServerValidation>
|
||||
<AcceptServerName xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</AcceptServerName><TLSEx
|
||||
tensions xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2"><FilteringInfo xmlns="http://www.micro
|
||||
soft.com/provisioning/EapTlsConnectionPropertiesV3"><ClientAuthEKUList Enabled="true" /><AnyPurposeEKUList Enabled="true"
|
||||
/></FilteringInfo></TLSExtensions></EapType></Eap></Config></EapHostConfig>
|
||||
<EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig">
|
||||
<EapMethod>
|
||||
<Type xmlns="http://www.microsoft.com/provisioning/EapCommon">13</Type>
|
||||
<VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId>
|
||||
<VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType>
|
||||
<AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId>
|
||||
</EapMethod>
|
||||
<Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig">
|
||||
<Eap xmlns="http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1">
|
||||
<Type>13</Type>
|
||||
<EapType xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV1">
|
||||
<CredentialsSource>
|
||||
<CertificateStore>
|
||||
<SimpleCertSelection>true</SimpleCertSelection>
|
||||
</CertificateStore>
|
||||
</CredentialsSource>
|
||||
<ServerValidation>
|
||||
<DisableUserPromptForServerValidation>false</DisableUserPromptForServerValidation>
|
||||
<ServerNames />
|
||||
</ServerValidation>
|
||||
<DifferentUsername>false</DifferentUsername>
|
||||
<PerformServerValidation xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</PerformServerValidation>
|
||||
<AcceptServerName xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</AcceptServerName>
|
||||
<TLSExtensions xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">
|
||||
<FilteringInfo xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV3">
|
||||
<ClientAuthEKUList Enabled="true" />
|
||||
<AnyPurposeEKUList Enabled="true" />
|
||||
</FilteringInfo>
|
||||
</TLSExtensions>
|
||||
</EapType>
|
||||
</Eap>
|
||||
</Config>
|
||||
</EapHostConfig>
|
||||
```
|
||||
|
||||
> [!NOTE]
|
||||
> You should check with Mobile Device Management (MDM) vendor, if you need to pass this XML in escaped format. The XSDs for all EAP methods are shipped in the box and can be found at the following locations:
|
||||
>
|
||||
> - C:\\Windows\\schemas\\EAPHost
|
||||
> - C:\\Windows\\schemas\\EAPMethods
|
||||
|
||||
|
||||
## EAP certificate filtering
|
||||
|
||||
In your deployment, if you have multiple certificates provisioned on the device and the Wi-Fi profile provisioned doesn't have a strict filtering criteria, you might see connection failures when connecting to Wi-Fi. The solution is to ensure that the Wi-Fi profile provisioned has strict filtering criteria so that it matches only one certificate.
|
||||
@ -151,7 +171,6 @@ The following XML sample explains the properties for the EAP TLS XML, including
|
||||
> [!NOTE]
|
||||
> For PEAP or TTLS profiles, the EAP TLS XML is embedded within some PEAP-specific or TTLS-specific elements.
|
||||
|
||||
|
||||
```xml
|
||||
<EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig">
|
||||
<EapMethod>
|
||||
@ -254,7 +273,6 @@ The following XML sample explains the properties for the EAP TLS XML, including
|
||||
> [!NOTE]
|
||||
> The EAP TLS XSD is located at %systemdrive%\\Windows\\schemas\\EAPMethods\\eaptlsconnectionpropertiesv3.xsd.
|
||||
|
||||
|
||||
Alternatively, you can use the following procedure to create an EAP configuration XML:
|
||||
|
||||
1. Follow steps 1 through 7 in the EAP configuration article.
|
||||
@ -265,8 +283,6 @@ Alternatively, you can use the following procedure to create an EAP configuratio
|
||||
> [!NOTE]
|
||||
> For PEAP or TTLS, select the appropriate method and continue following this procedure.
|
||||
|
||||
|
||||
|
||||
1. Select the **Properties** button underneath the drop-down menu.
|
||||
1. On the **Smart Card or other Certificate Properties** menu, select the **Advanced** button.
|
||||
|
||||
@ -283,7 +299,6 @@ Alternatively, you can use the following procedure to create an EAP configuratio
|
||||
> [!NOTE]
|
||||
> You can also set all the other applicable EAP Properties through this UI as well. A guide for what these properties mean can be found in the [Extensible Authentication Protocol (EAP) Settings for Network Access](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh945104(v=ws.11)) article.
|
||||
|
||||
|
||||
## Related topics
|
||||
|
||||
[Configuration service provider reference](index.yml)
|
||||
|
||||
@ -4,7 +4,7 @@ description: Learn more about the SurfaceHub CSP.
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 02/24/2023
|
||||
ms.date: 02/28/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -25,74 +25,72 @@ The SurfaceHub configuration service provider (CSP) is used to configure Microso
|
||||
<!-- SurfaceHub-Editable-End -->
|
||||
|
||||
<!-- SurfaceHub-Tree-Begin -->
|
||||
The following example shows the SurfaceHub configuration service provider in tree format.
|
||||
The following list shows the SurfaceHub configuration service provider nodes:
|
||||
|
||||
```text
|
||||
./Vendor/MSFT/SurfaceHub
|
||||
--- AutopilotSelfdeploy
|
||||
------ FriendlyName
|
||||
------ Password
|
||||
------ UserPrincipalName
|
||||
--- DeviceAccount
|
||||
------ CalendarSyncEnabled
|
||||
------ DomainName
|
||||
------ Email
|
||||
------ ErrorContext
|
||||
------ ExchangeModernAuthEnabled
|
||||
------ ExchangeServer
|
||||
------ Password
|
||||
------ PasswordRotationPeriod
|
||||
------ SipAddress
|
||||
------ UserName
|
||||
------ UserPrincipalName
|
||||
------ ValidateAndCommit
|
||||
--- Dot3
|
||||
------ EapUserData
|
||||
------ LanProfile
|
||||
--- InBoxApps
|
||||
------ Connect
|
||||
--------- AutoLaunch
|
||||
------ SkypeForBusiness
|
||||
--------- DomainName
|
||||
------ Teams
|
||||
--------- Configurations
|
||||
------ Welcome
|
||||
--------- AutoWakeScreen
|
||||
--------- CurrentBackgroundPath
|
||||
--------- MeetingInfoOption
|
||||
------ Whiteboard
|
||||
--------- SharingDisabled
|
||||
--------- SignInDisabled
|
||||
--------- TelemetryDisabled
|
||||
------ WirelessProjection
|
||||
--------- Channel
|
||||
--------- Enabled
|
||||
--------- PINRequired
|
||||
--- MaintenanceHoursSimple
|
||||
------ Hours
|
||||
--------- Duration
|
||||
--------- StartTime
|
||||
--- Management
|
||||
------ GroupName
|
||||
------ GroupSid
|
||||
--- MOMAgent
|
||||
------ WorkspaceID
|
||||
------ WorkspaceKey
|
||||
--- Properties
|
||||
------ AllowAutoProxyAuth
|
||||
------ AllowSessionResume
|
||||
------ DefaultVolume
|
||||
------ DisableSigninSuggestions
|
||||
------ DoNotShowMyMeetingsAndFiles
|
||||
------ FriendlyName
|
||||
------ ProxyServers
|
||||
------ ScreenTimeout
|
||||
------ SessionTimeout
|
||||
------ SleepMode
|
||||
------ SleepTimeout
|
||||
------ SurfaceHubMeetingMode
|
||||
------ VtcAppPackageId
|
||||
```
|
||||
- ./Vendor/MSFT/SurfaceHub
|
||||
- [AutopilotSelfdeploy](#autopilotselfdeploy)
|
||||
- [FriendlyName](#autopilotselfdeployfriendlyname)
|
||||
- [Password](#autopilotselfdeploypassword)
|
||||
- [UserPrincipalName](#autopilotselfdeployuserprincipalname)
|
||||
- [DeviceAccount](#deviceaccount)
|
||||
- [CalendarSyncEnabled](#deviceaccountcalendarsyncenabled)
|
||||
- [DomainName](#deviceaccountdomainname)
|
||||
- [Email](#deviceaccountemail)
|
||||
- [ErrorContext](#deviceaccounterrorcontext)
|
||||
- [ExchangeModernAuthEnabled](#deviceaccountexchangemodernauthenabled)
|
||||
- [ExchangeServer](#deviceaccountexchangeserver)
|
||||
- [Password](#deviceaccountpassword)
|
||||
- [PasswordRotationPeriod](#deviceaccountpasswordrotationperiod)
|
||||
- [SipAddress](#deviceaccountsipaddress)
|
||||
- [UserName](#deviceaccountusername)
|
||||
- [UserPrincipalName](#deviceaccountuserprincipalname)
|
||||
- [ValidateAndCommit](#deviceaccountvalidateandcommit)
|
||||
- [Dot3](#dot3)
|
||||
- [EapUserData](#dot3eapuserdata)
|
||||
- [LanProfile](#dot3lanprofile)
|
||||
- [InBoxApps](#inboxapps)
|
||||
- [Connect](#inboxappsconnect)
|
||||
- [AutoLaunch](#inboxappsconnectautolaunch)
|
||||
- [SkypeForBusiness](#inboxappsskypeforbusiness)
|
||||
- [DomainName](#inboxappsskypeforbusinessdomainname)
|
||||
- [Teams](#inboxappsteams)
|
||||
- [Configurations](#inboxappsteamsconfigurations)
|
||||
- [Welcome](#inboxappswelcome)
|
||||
- [AutoWakeScreen](#inboxappswelcomeautowakescreen)
|
||||
- [CurrentBackgroundPath](#inboxappswelcomecurrentbackgroundpath)
|
||||
- [MeetingInfoOption](#inboxappswelcomemeetinginfooption)
|
||||
- [Whiteboard](#inboxappswhiteboard)
|
||||
- [SharingDisabled](#inboxappswhiteboardsharingdisabled)
|
||||
- [SignInDisabled](#inboxappswhiteboardsignindisabled)
|
||||
- [TelemetryDisabled](#inboxappswhiteboardtelemetrydisabled)
|
||||
- [WirelessProjection](#inboxappswirelessprojection)
|
||||
- [Channel](#inboxappswirelessprojectionchannel)
|
||||
- [Enabled](#inboxappswirelessprojectionenabled)
|
||||
- [PINRequired](#inboxappswirelessprojectionpinrequired)
|
||||
- [MaintenanceHoursSimple](#maintenancehourssimple)
|
||||
- [Hours](#maintenancehourssimplehours)
|
||||
- [Duration](#maintenancehourssimplehoursduration)
|
||||
- [StartTime](#maintenancehourssimplehoursstarttime)
|
||||
- [Management](#management)
|
||||
- [GroupName](#managementgroupname)
|
||||
- [GroupSid](#managementgroupsid)
|
||||
- [MOMAgent](#momagent)
|
||||
- [WorkspaceID](#momagentworkspaceid)
|
||||
- [WorkspaceKey](#momagentworkspacekey)
|
||||
- [Properties](#properties)
|
||||
- [AllowAutoProxyAuth](#propertiesallowautoproxyauth)
|
||||
- [AllowSessionResume](#propertiesallowsessionresume)
|
||||
- [DefaultVolume](#propertiesdefaultvolume)
|
||||
- [DisableSigninSuggestions](#propertiesdisablesigninsuggestions)
|
||||
- [DoNotShowMyMeetingsAndFiles](#propertiesdonotshowmymeetingsandfiles)
|
||||
- [FriendlyName](#propertiesfriendlyname)
|
||||
- [ProxyServers](#propertiesproxyservers)
|
||||
- [ScreenTimeout](#propertiesscreentimeout)
|
||||
- [SessionTimeout](#propertiessessiontimeout)
|
||||
- [SleepMode](#propertiessleepmode)
|
||||
- [SleepTimeout](#propertiessleeptimeout)
|
||||
- [SurfaceHubMeetingMode](#propertiessurfacehubmeetingmode)
|
||||
- [VtcAppPackageId](#propertiesvtcapppackageid)
|
||||
<!-- SurfaceHub-Tree-End -->
|
||||
|
||||
<!-- Device-AutopilotSelfdeploy-Begin -->
|
||||
@ -1148,7 +1146,7 @@ Node for the Skype for Business settings.
|
||||
|
||||
<!-- Device-InBoxApps-SkypeForBusiness-DomainName-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
Specifies the domain of the Skype for Business account when you are using Active Directory. For more information, see <https://docs.microsoft.com/SkypeForBusiness/set-up-skype-for-business-online/set-up-skype-for-business-online?redirectSourcePath=%252fen-us%252farticle%252fSet-up-Skype-for-Business-Online-40296968-e779-4259-980b-c2de1c044c6e#bkmk_users>
|
||||
Specifies the domain of the Skype for Business account when you are using Active Directory. For more information, see [Set up your domain and users](/skypeforbusiness/set-up-skype-for-business-online/set-up-skype-for-business-online#3-set-up-your-domain-and-users).
|
||||
<!-- Device-InBoxApps-SkypeForBusiness-DomainName-Description-End -->
|
||||
|
||||
<!-- Device-InBoxApps-SkypeForBusiness-DomainName-Editable-Begin -->
|
||||
|
||||
@ -4,7 +4,7 @@ description: Learn more about the VPNv2 CSP.
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 02/27/2023
|
||||
ms.date: 02/28/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -36,214 +36,212 @@ The XSDs for all EAP methods are shipped in the box and can be found at the foll
|
||||
<!-- VPNv2-Editable-End -->
|
||||
|
||||
<!-- VPNv2-Tree-Begin -->
|
||||
The following example shows the VPNv2 configuration service provider in tree format.
|
||||
The following list shows the VPNv2 configuration service provider nodes:
|
||||
|
||||
```text
|
||||
./Device/Vendor/MSFT/VPNv2
|
||||
--- {ProfileName}
|
||||
------ AlwaysOn
|
||||
------ AlwaysOnActive
|
||||
------ APNBinding
|
||||
--------- AccessPointName
|
||||
--------- AuthenticationType
|
||||
--------- IsCompressionEnabled
|
||||
--------- Password
|
||||
--------- ProviderId
|
||||
--------- UserName
|
||||
------ AppTriggerList
|
||||
--------- {appTriggerRowId}
|
||||
------------ App
|
||||
--------------- Id
|
||||
--------------- Type
|
||||
------ ByPassForLocal
|
||||
------ DataEncryption
|
||||
------ DeviceCompliance
|
||||
--------- Enabled
|
||||
--------- Sso
|
||||
------------ Eku
|
||||
------------ Enabled
|
||||
------------ IssuerHash
|
||||
------ DeviceTunnel
|
||||
------ DisableAdvancedOptionsEditButton
|
||||
------ DisableDisconnectButton
|
||||
------ DisableIKEv2Fragmentation
|
||||
------ DnsSuffix
|
||||
------ DomainNameInformationList
|
||||
--------- {dniRowId}
|
||||
------------ AutoTrigger
|
||||
------------ DnsServers
|
||||
------------ DomainName
|
||||
------------ DomainNameType
|
||||
------------ Persistent
|
||||
------------ WebProxyServers
|
||||
------ EdpModeId
|
||||
------ IPv4InterfaceMetric
|
||||
------ IPv6InterfaceMetric
|
||||
------ NativeProfile
|
||||
--------- Authentication
|
||||
------------ Certificate
|
||||
--------------- Eku
|
||||
--------------- Issuer
|
||||
------------ Eap
|
||||
--------------- Configuration
|
||||
--------------- Type
|
||||
------------ MachineMethod
|
||||
------------ UserMethod
|
||||
--------- CryptographySuite
|
||||
------------ AuthenticationTransformConstants
|
||||
------------ CipherTransformConstants
|
||||
------------ DHGroup
|
||||
------------ EncryptionMethod
|
||||
------------ IntegrityCheckMethod
|
||||
------------ PfsGroup
|
||||
--------- DisableClassBasedDefaultRoute
|
||||
--------- L2tpPsk
|
||||
--------- NativeProtocolType
|
||||
--------- PlumbIKEv2TSAsRoutes
|
||||
--------- ProtocolList
|
||||
------------ NativeProtocolList
|
||||
--------------- {NativeProtocolRowId}
|
||||
------------------ Type
|
||||
------------ RetryTimeInHours
|
||||
--------- RoutingPolicyType
|
||||
--------- Servers
|
||||
------ NetworkOutageTime
|
||||
------ PluginProfile
|
||||
--------- CustomConfiguration
|
||||
--------- PluginPackageFamilyName
|
||||
--------- ServerUrlList
|
||||
------ PrivateNetwork
|
||||
------ ProfileXML
|
||||
------ Proxy
|
||||
--------- AutoConfigUrl
|
||||
--------- Manual
|
||||
------------ Server
|
||||
------ RegisterDNS
|
||||
------ RememberCredentials
|
||||
------ RouteList
|
||||
--------- {routeRowId}
|
||||
------------ Address
|
||||
------------ ExclusionRoute
|
||||
------------ Metric
|
||||
------------ PrefixSize
|
||||
------ TrafficFilterList
|
||||
--------- {trafficFilterId}
|
||||
------------ App
|
||||
--------------- Id
|
||||
--------------- Type
|
||||
------------ Claims
|
||||
------------ Direction
|
||||
------------ LocalAddressRanges
|
||||
------------ LocalPortRanges
|
||||
------------ Protocol
|
||||
------------ RemoteAddressRanges
|
||||
------------ RemotePortRanges
|
||||
------------ RoutingPolicyType
|
||||
------ TrustedNetworkDetection
|
||||
------ UseRasCredentials
|
||||
./User/Vendor/MSFT/VPNv2
|
||||
--- {ProfileName}
|
||||
------ AlwaysOn
|
||||
------ AlwaysOnActive
|
||||
------ APNBinding
|
||||
--------- AccessPointName
|
||||
--------- AuthenticationType
|
||||
--------- IsCompressionEnabled
|
||||
--------- Password
|
||||
--------- ProviderId
|
||||
--------- UserName
|
||||
------ AppTriggerList
|
||||
--------- {appTriggerRowId}
|
||||
------------ App
|
||||
--------------- Id
|
||||
--------------- Type
|
||||
------ ByPassForLocal
|
||||
------ DataEncryption
|
||||
------ DeviceCompliance
|
||||
--------- Enabled
|
||||
--------- Sso
|
||||
------------ Eku
|
||||
------------ Enabled
|
||||
------------ IssuerHash
|
||||
------ DisableAdvancedOptionsEditButton
|
||||
------ DisableDisconnectButton
|
||||
------ DisableIKEv2Fragmentation
|
||||
------ DnsSuffix
|
||||
------ DomainNameInformationList
|
||||
--------- {dniRowId}
|
||||
------------ AutoTrigger
|
||||
------------ DnsServers
|
||||
------------ DomainName
|
||||
------------ DomainNameType
|
||||
------------ Persistent
|
||||
------------ WebProxyServers
|
||||
------ EdpModeId
|
||||
------ IPv4InterfaceMetric
|
||||
------ IPv6InterfaceMetric
|
||||
------ NativeProfile
|
||||
--------- Authentication
|
||||
------------ Certificate
|
||||
--------------- Eku
|
||||
--------------- Issuer
|
||||
------------ Eap
|
||||
--------------- Configuration
|
||||
--------------- Type
|
||||
------------ MachineMethod
|
||||
------------ UserMethod
|
||||
--------- CryptographySuite
|
||||
------------ AuthenticationTransformConstants
|
||||
------------ CipherTransformConstants
|
||||
------------ DHGroup
|
||||
------------ EncryptionMethod
|
||||
------------ IntegrityCheckMethod
|
||||
------------ PfsGroup
|
||||
--------- DisableClassBasedDefaultRoute
|
||||
--------- L2tpPsk
|
||||
--------- NativeProtocolType
|
||||
--------- PlumbIKEv2TSAsRoutes
|
||||
--------- ProtocolList
|
||||
------------ NativeProtocolList
|
||||
--------------- {NativeProtocolRowId}
|
||||
------------------ Type
|
||||
------------ RetryTimeInHours
|
||||
--------- RoutingPolicyType
|
||||
--------- Servers
|
||||
------ NetworkOutageTime
|
||||
------ PluginProfile
|
||||
--------- CustomConfiguration
|
||||
--------- PluginPackageFamilyName
|
||||
--------- ServerUrlList
|
||||
------ PrivateNetwork
|
||||
------ ProfileXML
|
||||
------ Proxy
|
||||
--------- AutoConfigUrl
|
||||
--------- Manual
|
||||
------------ Server
|
||||
------ RegisterDNS
|
||||
------ RememberCredentials
|
||||
------ RequireVpnClientAppUI
|
||||
------ RouteList
|
||||
--------- {routeRowId}
|
||||
------------ Address
|
||||
------------ ExclusionRoute
|
||||
------------ Metric
|
||||
------------ PrefixSize
|
||||
------ TrafficFilterList
|
||||
--------- {trafficFilterId}
|
||||
------------ App
|
||||
--------------- Id
|
||||
--------------- Type
|
||||
------------ Claims
|
||||
------------ Direction
|
||||
------------ LocalAddressRanges
|
||||
------------ LocalPortRanges
|
||||
------------ Protocol
|
||||
------------ RemoteAddressRanges
|
||||
------------ RemotePortRanges
|
||||
------------ RoutingPolicyType
|
||||
------ TrustedNetworkDetection
|
||||
------ UseRasCredentials
|
||||
```
|
||||
- ./Device/Vendor/MSFT/VPNv2
|
||||
- [{ProfileName}](#deviceprofilename)
|
||||
- [AlwaysOn](#deviceprofilenamealwayson)
|
||||
- [AlwaysOnActive](#deviceprofilenamealwaysonactive)
|
||||
- [APNBinding](#deviceprofilenameapnbinding)
|
||||
- [AccessPointName](#deviceprofilenameapnbindingaccesspointname)
|
||||
- [AuthenticationType](#deviceprofilenameapnbindingauthenticationtype)
|
||||
- [IsCompressionEnabled](#deviceprofilenameapnbindingiscompressionenabled)
|
||||
- [Password](#deviceprofilenameapnbindingpassword)
|
||||
- [ProviderId](#deviceprofilenameapnbindingproviderid)
|
||||
- [UserName](#deviceprofilenameapnbindingusername)
|
||||
- [AppTriggerList](#deviceprofilenameapptriggerlist)
|
||||
- [{appTriggerRowId}](#deviceprofilenameapptriggerlistapptriggerrowid)
|
||||
- [App](#deviceprofilenameapptriggerlistapptriggerrowidapp)
|
||||
- [Id](#deviceprofilenameapptriggerlistapptriggerrowidappid)
|
||||
- [Type](#deviceprofilenameapptriggerlistapptriggerrowidapptype)
|
||||
- [ByPassForLocal](#deviceprofilenamebypassforlocal)
|
||||
- [DataEncryption](#deviceprofilenamedataencryption)
|
||||
- [DeviceCompliance](#deviceprofilenamedevicecompliance)
|
||||
- [Enabled](#deviceprofilenamedevicecomplianceenabled)
|
||||
- [Sso](#deviceprofilenamedevicecompliancesso)
|
||||
- [Eku](#deviceprofilenamedevicecompliancessoeku)
|
||||
- [Enabled](#deviceprofilenamedevicecompliancessoenabled)
|
||||
- [IssuerHash](#deviceprofilenamedevicecompliancessoissuerhash)
|
||||
- [DeviceTunnel](#deviceprofilenamedevicetunnel)
|
||||
- [DisableAdvancedOptionsEditButton](#deviceprofilenamedisableadvancedoptionseditbutton)
|
||||
- [DisableDisconnectButton](#deviceprofilenamedisabledisconnectbutton)
|
||||
- [DisableIKEv2Fragmentation](#deviceprofilenamedisableikev2fragmentation)
|
||||
- [DnsSuffix](#deviceprofilenamednssuffix)
|
||||
- [DomainNameInformationList](#deviceprofilenamedomainnameinformationlist)
|
||||
- [{dniRowId}](#deviceprofilenamedomainnameinformationlistdnirowid)
|
||||
- [AutoTrigger](#deviceprofilenamedomainnameinformationlistdnirowidautotrigger)
|
||||
- [DnsServers](#deviceprofilenamedomainnameinformationlistdnirowiddnsservers)
|
||||
- [DomainName](#deviceprofilenamedomainnameinformationlistdnirowiddomainname)
|
||||
- [DomainNameType](#deviceprofilenamedomainnameinformationlistdnirowiddomainnametype)
|
||||
- [Persistent](#deviceprofilenamedomainnameinformationlistdnirowidpersistent)
|
||||
- [WebProxyServers](#deviceprofilenamedomainnameinformationlistdnirowidwebproxyservers)
|
||||
- [EdpModeId](#deviceprofilenameedpmodeid)
|
||||
- [IPv4InterfaceMetric](#deviceprofilenameipv4interfacemetric)
|
||||
- [IPv6InterfaceMetric](#deviceprofilenameipv6interfacemetric)
|
||||
- [NativeProfile](#deviceprofilenamenativeprofile)
|
||||
- [Authentication](#deviceprofilenamenativeprofileauthentication)
|
||||
- [Certificate](#deviceprofilenamenativeprofileauthenticationcertificate)
|
||||
- [Eku](#deviceprofilenamenativeprofileauthenticationcertificateeku)
|
||||
- [Issuer](#deviceprofilenamenativeprofileauthenticationcertificateissuer)
|
||||
- [Eap](#deviceprofilenamenativeprofileauthenticationeap)
|
||||
- [Configuration](#deviceprofilenamenativeprofileauthenticationeapconfiguration)
|
||||
- [Type](#deviceprofilenamenativeprofileauthenticationeaptype)
|
||||
- [MachineMethod](#deviceprofilenamenativeprofileauthenticationmachinemethod)
|
||||
- [UserMethod](#deviceprofilenamenativeprofileauthenticationusermethod)
|
||||
- [CryptographySuite](#deviceprofilenamenativeprofilecryptographysuite)
|
||||
- [AuthenticationTransformConstants](#deviceprofilenamenativeprofilecryptographysuiteauthenticationtransformconstants)
|
||||
- [CipherTransformConstants](#deviceprofilenamenativeprofilecryptographysuiteciphertransformconstants)
|
||||
- [DHGroup](#deviceprofilenamenativeprofilecryptographysuitedhgroup)
|
||||
- [EncryptionMethod](#deviceprofilenamenativeprofilecryptographysuiteencryptionmethod)
|
||||
- [IntegrityCheckMethod](#deviceprofilenamenativeprofilecryptographysuiteintegritycheckmethod)
|
||||
- [PfsGroup](#deviceprofilenamenativeprofilecryptographysuitepfsgroup)
|
||||
- [DisableClassBasedDefaultRoute](#deviceprofilenamenativeprofiledisableclassbaseddefaultroute)
|
||||
- [L2tpPsk](#deviceprofilenamenativeprofilel2tppsk)
|
||||
- [NativeProtocolType](#deviceprofilenamenativeprofilenativeprotocoltype)
|
||||
- [PlumbIKEv2TSAsRoutes](#deviceprofilenamenativeprofileplumbikev2tsasroutes)
|
||||
- [ProtocolList](#deviceprofilenamenativeprofileprotocollist)
|
||||
- [NativeProtocolList](#deviceprofilenamenativeprofileprotocollistnativeprotocollist)
|
||||
- [{NativeProtocolRowId}](#deviceprofilenamenativeprofileprotocollistnativeprotocollistnativeprotocolrowid)
|
||||
- [Type](#deviceprofilenamenativeprofileprotocollistnativeprotocollistnativeprotocolrowidtype)
|
||||
- [RetryTimeInHours](#deviceprofilenamenativeprofileprotocollistretrytimeinhours)
|
||||
- [RoutingPolicyType](#deviceprofilenamenativeprofileroutingpolicytype)
|
||||
- [Servers](#deviceprofilenamenativeprofileservers)
|
||||
- [NetworkOutageTime](#deviceprofilenamenetworkoutagetime)
|
||||
- [PluginProfile](#deviceprofilenamepluginprofile)
|
||||
- [CustomConfiguration](#deviceprofilenamepluginprofilecustomconfiguration)
|
||||
- [PluginPackageFamilyName](#deviceprofilenamepluginprofilepluginpackagefamilyname)
|
||||
- [ServerUrlList](#deviceprofilenamepluginprofileserverurllist)
|
||||
- [PrivateNetwork](#deviceprofilenameprivatenetwork)
|
||||
- [ProfileXML](#deviceprofilenameprofilexml)
|
||||
- [Proxy](#deviceprofilenameproxy)
|
||||
- [AutoConfigUrl](#deviceprofilenameproxyautoconfigurl)
|
||||
- [Manual](#deviceprofilenameproxymanual)
|
||||
- [Server](#deviceprofilenameproxymanualserver)
|
||||
- [RegisterDNS](#deviceprofilenameregisterdns)
|
||||
- [RememberCredentials](#deviceprofilenameremembercredentials)
|
||||
- [RouteList](#deviceprofilenameroutelist)
|
||||
- [{routeRowId}](#deviceprofilenameroutelistrouterowid)
|
||||
- [Address](#deviceprofilenameroutelistrouterowidaddress)
|
||||
- [ExclusionRoute](#deviceprofilenameroutelistrouterowidexclusionroute)
|
||||
- [Metric](#deviceprofilenameroutelistrouterowidmetric)
|
||||
- [PrefixSize](#deviceprofilenameroutelistrouterowidprefixsize)
|
||||
- [TrafficFilterList](#deviceprofilenametrafficfilterlist)
|
||||
- [{trafficFilterId}](#deviceprofilenametrafficfilterlisttrafficfilterid)
|
||||
- [App](#deviceprofilenametrafficfilterlisttrafficfilteridapp)
|
||||
- [Id](#deviceprofilenametrafficfilterlisttrafficfilteridappid)
|
||||
- [Type](#deviceprofilenametrafficfilterlisttrafficfilteridapptype)
|
||||
- [Claims](#deviceprofilenametrafficfilterlisttrafficfilteridclaims)
|
||||
- [Direction](#deviceprofilenametrafficfilterlisttrafficfilteriddirection)
|
||||
- [LocalAddressRanges](#deviceprofilenametrafficfilterlisttrafficfilteridlocaladdressranges)
|
||||
- [LocalPortRanges](#deviceprofilenametrafficfilterlisttrafficfilteridlocalportranges)
|
||||
- [Protocol](#deviceprofilenametrafficfilterlisttrafficfilteridprotocol)
|
||||
- [RemoteAddressRanges](#deviceprofilenametrafficfilterlisttrafficfilteridremoteaddressranges)
|
||||
- [RemotePortRanges](#deviceprofilenametrafficfilterlisttrafficfilteridremoteportranges)
|
||||
- [RoutingPolicyType](#deviceprofilenametrafficfilterlisttrafficfilteridroutingpolicytype)
|
||||
- [TrustedNetworkDetection](#deviceprofilenametrustednetworkdetection)
|
||||
- [UseRasCredentials](#deviceprofilenameuserascredentials)
|
||||
- ./User/Vendor/MSFT/VPNv2
|
||||
- [{ProfileName}](#userprofilename)
|
||||
- [AlwaysOn](#userprofilenamealwayson)
|
||||
- [AlwaysOnActive](#userprofilenamealwaysonactive)
|
||||
- [APNBinding](#userprofilenameapnbinding)
|
||||
- [AccessPointName](#userprofilenameapnbindingaccesspointname)
|
||||
- [AuthenticationType](#userprofilenameapnbindingauthenticationtype)
|
||||
- [IsCompressionEnabled](#userprofilenameapnbindingiscompressionenabled)
|
||||
- [Password](#userprofilenameapnbindingpassword)
|
||||
- [ProviderId](#userprofilenameapnbindingproviderid)
|
||||
- [UserName](#userprofilenameapnbindingusername)
|
||||
- [AppTriggerList](#userprofilenameapptriggerlist)
|
||||
- [{appTriggerRowId}](#userprofilenameapptriggerlistapptriggerrowid)
|
||||
- [App](#userprofilenameapptriggerlistapptriggerrowidapp)
|
||||
- [Id](#userprofilenameapptriggerlistapptriggerrowidappid)
|
||||
- [Type](#userprofilenameapptriggerlistapptriggerrowidapptype)
|
||||
- [ByPassForLocal](#userprofilenamebypassforlocal)
|
||||
- [DataEncryption](#userprofilenamedataencryption)
|
||||
- [DeviceCompliance](#userprofilenamedevicecompliance)
|
||||
- [Enabled](#userprofilenamedevicecomplianceenabled)
|
||||
- [Sso](#userprofilenamedevicecompliancesso)
|
||||
- [Eku](#userprofilenamedevicecompliancessoeku)
|
||||
- [Enabled](#userprofilenamedevicecompliancessoenabled)
|
||||
- [IssuerHash](#userprofilenamedevicecompliancessoissuerhash)
|
||||
- [DisableAdvancedOptionsEditButton](#userprofilenamedisableadvancedoptionseditbutton)
|
||||
- [DisableDisconnectButton](#userprofilenamedisabledisconnectbutton)
|
||||
- [DisableIKEv2Fragmentation](#userprofilenamedisableikev2fragmentation)
|
||||
- [DnsSuffix](#userprofilenamednssuffix)
|
||||
- [DomainNameInformationList](#userprofilenamedomainnameinformationlist)
|
||||
- [{dniRowId}](#userprofilenamedomainnameinformationlistdnirowid)
|
||||
- [AutoTrigger](#userprofilenamedomainnameinformationlistdnirowidautotrigger)
|
||||
- [DnsServers](#userprofilenamedomainnameinformationlistdnirowiddnsservers)
|
||||
- [DomainName](#userprofilenamedomainnameinformationlistdnirowiddomainname)
|
||||
- [DomainNameType](#userprofilenamedomainnameinformationlistdnirowiddomainnametype)
|
||||
- [Persistent](#userprofilenamedomainnameinformationlistdnirowidpersistent)
|
||||
- [WebProxyServers](#userprofilenamedomainnameinformationlistdnirowidwebproxyservers)
|
||||
- [EdpModeId](#userprofilenameedpmodeid)
|
||||
- [IPv4InterfaceMetric](#userprofilenameipv4interfacemetric)
|
||||
- [IPv6InterfaceMetric](#userprofilenameipv6interfacemetric)
|
||||
- [NativeProfile](#userprofilenamenativeprofile)
|
||||
- [Authentication](#userprofilenamenativeprofileauthentication)
|
||||
- [Certificate](#userprofilenamenativeprofileauthenticationcertificate)
|
||||
- [Eku](#userprofilenamenativeprofileauthenticationcertificateeku)
|
||||
- [Issuer](#userprofilenamenativeprofileauthenticationcertificateissuer)
|
||||
- [Eap](#userprofilenamenativeprofileauthenticationeap)
|
||||
- [Configuration](#userprofilenamenativeprofileauthenticationeapconfiguration)
|
||||
- [Type](#userprofilenamenativeprofileauthenticationeaptype)
|
||||
- [MachineMethod](#userprofilenamenativeprofileauthenticationmachinemethod)
|
||||
- [UserMethod](#userprofilenamenativeprofileauthenticationusermethod)
|
||||
- [CryptographySuite](#userprofilenamenativeprofilecryptographysuite)
|
||||
- [AuthenticationTransformConstants](#userprofilenamenativeprofilecryptographysuiteauthenticationtransformconstants)
|
||||
- [CipherTransformConstants](#userprofilenamenativeprofilecryptographysuiteciphertransformconstants)
|
||||
- [DHGroup](#userprofilenamenativeprofilecryptographysuitedhgroup)
|
||||
- [EncryptionMethod](#userprofilenamenativeprofilecryptographysuiteencryptionmethod)
|
||||
- [IntegrityCheckMethod](#userprofilenamenativeprofilecryptographysuiteintegritycheckmethod)
|
||||
- [PfsGroup](#userprofilenamenativeprofilecryptographysuitepfsgroup)
|
||||
- [DisableClassBasedDefaultRoute](#userprofilenamenativeprofiledisableclassbaseddefaultroute)
|
||||
- [L2tpPsk](#userprofilenamenativeprofilel2tppsk)
|
||||
- [NativeProtocolType](#userprofilenamenativeprofilenativeprotocoltype)
|
||||
- [PlumbIKEv2TSAsRoutes](#userprofilenamenativeprofileplumbikev2tsasroutes)
|
||||
- [ProtocolList](#userprofilenamenativeprofileprotocollist)
|
||||
- [NativeProtocolList](#userprofilenamenativeprofileprotocollistnativeprotocollist)
|
||||
- [{NativeProtocolRowId}](#userprofilenamenativeprofileprotocollistnativeprotocollistnativeprotocolrowid)
|
||||
- [Type](#userprofilenamenativeprofileprotocollistnativeprotocollistnativeprotocolrowidtype)
|
||||
- [RetryTimeInHours](#userprofilenamenativeprofileprotocollistretrytimeinhours)
|
||||
- [RoutingPolicyType](#userprofilenamenativeprofileroutingpolicytype)
|
||||
- [Servers](#userprofilenamenativeprofileservers)
|
||||
- [NetworkOutageTime](#userprofilenamenetworkoutagetime)
|
||||
- [PluginProfile](#userprofilenamepluginprofile)
|
||||
- [CustomConfiguration](#userprofilenamepluginprofilecustomconfiguration)
|
||||
- [PluginPackageFamilyName](#userprofilenamepluginprofilepluginpackagefamilyname)
|
||||
- [ServerUrlList](#userprofilenamepluginprofileserverurllist)
|
||||
- [PrivateNetwork](#userprofilenameprivatenetwork)
|
||||
- [ProfileXML](#userprofilenameprofilexml)
|
||||
- [Proxy](#userprofilenameproxy)
|
||||
- [AutoConfigUrl](#userprofilenameproxyautoconfigurl)
|
||||
- [Manual](#userprofilenameproxymanual)
|
||||
- [Server](#userprofilenameproxymanualserver)
|
||||
- [RegisterDNS](#userprofilenameregisterdns)
|
||||
- [RememberCredentials](#userprofilenameremembercredentials)
|
||||
- [RequireVpnClientAppUI](#userprofilenamerequirevpnclientappui)
|
||||
- [RouteList](#userprofilenameroutelist)
|
||||
- [{routeRowId}](#userprofilenameroutelistrouterowid)
|
||||
- [Address](#userprofilenameroutelistrouterowidaddress)
|
||||
- [ExclusionRoute](#userprofilenameroutelistrouterowidexclusionroute)
|
||||
- [Metric](#userprofilenameroutelistrouterowidmetric)
|
||||
- [PrefixSize](#userprofilenameroutelistrouterowidprefixsize)
|
||||
- [TrafficFilterList](#userprofilenametrafficfilterlist)
|
||||
- [{trafficFilterId}](#userprofilenametrafficfilterlisttrafficfilterid)
|
||||
- [App](#userprofilenametrafficfilterlisttrafficfilteridapp)
|
||||
- [Id](#userprofilenametrafficfilterlisttrafficfilteridappid)
|
||||
- [Type](#userprofilenametrafficfilterlisttrafficfilteridapptype)
|
||||
- [Claims](#userprofilenametrafficfilterlisttrafficfilteridclaims)
|
||||
- [Direction](#userprofilenametrafficfilterlisttrafficfilteriddirection)
|
||||
- [LocalAddressRanges](#userprofilenametrafficfilterlisttrafficfilteridlocaladdressranges)
|
||||
- [LocalPortRanges](#userprofilenametrafficfilterlisttrafficfilteridlocalportranges)
|
||||
- [Protocol](#userprofilenametrafficfilterlisttrafficfilteridprotocol)
|
||||
- [RemoteAddressRanges](#userprofilenametrafficfilterlisttrafficfilteridremoteaddressranges)
|
||||
- [RemotePortRanges](#userprofilenametrafficfilterlisttrafficfilteridremoteportranges)
|
||||
- [RoutingPolicyType](#userprofilenametrafficfilterlisttrafficfilteridroutingpolicytype)
|
||||
- [TrustedNetworkDetection](#userprofilenametrustednetworkdetection)
|
||||
- [UseRasCredentials](#userprofilenameuserascredentials)
|
||||
<!-- VPNv2-Tree-End -->
|
||||
|
||||
<!-- Device-{ProfileName}-Begin -->
|
||||
@ -2142,7 +2140,7 @@ Required when the native profile specifies EAP authentication. EAP configuration
|
||||
|
||||
<!-- Device-{ProfileName}-NativeProfile-Authentication-Eap-Configuration-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
HTML encoded XML of the EAP configuration. For more information about EAP configuration XML, see <https://docs.microsoft.com/windows/client-management/mdm/eap-configuration>.
|
||||
HTML encoded XML of the EAP configuration. For more information,see [EAP configuration](eap-configuration.md).
|
||||
<!-- Device-{ProfileName}-NativeProfile-Authentication-Eap-Configuration-Description-End -->
|
||||
|
||||
<!-- Device-{ProfileName}-NativeProfile-Authentication-Eap-Configuration-Editable-Begin -->
|
||||
@ -6367,7 +6365,7 @@ Required when the native profile specifies EAP authentication. EAP configuration
|
||||
|
||||
<!-- User-{ProfileName}-NativeProfile-Authentication-Eap-Configuration-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
HTML encoded XML of the EAP configuration. For more information about EAP configuration XML, see <https://docs.microsoft.com/windows/client-management/mdm/eap-configuration>.
|
||||
HTML encoded XML of the EAP configuration. For more information,see [EAP configuration](eap-configuration.md).
|
||||
<!-- User-{ProfileName}-NativeProfile-Authentication-Eap-Configuration-Description-End -->
|
||||
|
||||
<!-- User-{ProfileName}-NativeProfile-Authentication-Eap-Configuration-Editable-Begin -->
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user