Merge pull request #1478 from MicrosoftDocs/FromPrivateRepo

From private repo

devices/hololens/hololens-kiosk.md

@@ -7,7 +7,7 @@ author: jdeckerms
 ms.author: jdecker
 ms.topic: article
 ms.localizationpriority: medium
-ms.date: 05/22/2018
+ms.date: 08/14/2018
 ---
 
 # Set up HoloLens in kiosk mode
@@ -145,8 +145,7 @@ Use the following snippet in your kiosk configuration XML to enable the **Guest*
 
   ![Screenshot of the MultiAppAssignedAccessSettings field in Windows Configuration Designer](images/multiappassignedaccesssettings.png)
 
-8. (**Optional**: If you want to apply the provisioning package after device initial setup and there is an admin user already available on the kiosk device, skip this step.) Create an admin user account in **Runtime settings** > **Accounts** > **Users**. Provide a **UserName** and **Password**, and select **UserGroup** as **Administrators**. With this account, you can view the provisioning status and logs if needed.   
-8. (**Optional**: If you already have a non-admin account on the kiosk device, skip this step.) Create a local standard user account in **Runtime settings** > **Accounts** > **Users**. Make sure the **UserName** is the same as the account that you specify in the configuration XML. Select **UserGroup** as **Standard Users**.
+
 8.  On the **File** menu, select **Save.**
 9.  On the **Export** menu, select **Provisioning package**.
 10. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.**

devices/surface-hub/hybrid-deployment-surface-hub-device-accounts.md

@@ -282,7 +282,7 @@ Use this procedure if you use Exchange online.
 
 5.  Add email address for your on-premises domain account.
 
-    For this procedure, you'll be using AD admin tools to add an email address for your on-preises domain account.
+    For this procedure, you'll be using AD admin tools to add an email address for your on-premises domain account.
     
     - In **Active Directory Users and Computers** AD tool, right-click on the folder or Organizational Unit that your Surface Hub accounts will be created in, click **New**, and **User**.
     - Type the display name from the previous cmdlet into the **Full name** box, and the alias into the **User logon name** box. Click **Next**.

windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md

@@ -1394,7 +1394,6 @@ For details about Microsoft mobile device management protocols for Windows 10 s
 <li>Browser/ConfigureKioskResetAfterIdleTimeout</li>
 <li>Browser/ConfigureOpenMicrosoftEdgeWith</li>
 <li>Browser/ConfigureTelemetryForMicrosoft365Analytics</li>
-<li>Browser/ForceEnabledExtensions</li>
 <li>Browser/PreventCertErrorOverrides</li>
 <li>Browser/SetHomeButtonURL</li>
 <li>Browser/SetNewTabPageURL</li>
@@ -1412,7 +1411,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
 <li>DeviceInstallation/PreventInstallationOfDevicesNotDescribedByOtherPolicySettings</li>
 <li>DmaGuard/DeviceEnumerationPolicy</li>
 <li>Experience/AllowClipboardHistory</li>
-<li>Experience/DoNotSyncBrowserSetting</li>
+<li>Experience/DoNotSyncBrowserSettings</li>
 <li>Experience/PreventUsersFromTurningOnBrowserSyncing</li>
 <li>Privacy/AllowCrossDeviceClipboard</li>
 <li>Privacy/UploadUserActivities</li>
@@ -1786,12 +1785,11 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware
 <li>Browser/ConfigureKioskResetAfterIdleTimeout</li>
 <li>Browser/ConfigureOpenMicrosoftEdgeWith</li>
 <li>Browser/ConfigureTelemetryForMicrosoft365Analytics</li>
-<li>Browser/ForceEnabledExtensions</li>
 <li>Browser/PreventCertErrorOverrides</li>
 <li>Browser/SetHomeButtonURL</li>
 <li>Browser/SetNewTabPageURL</li>
 <li>Browser/UnlockHomeButton</li>
-<li>Experience/DoNotSyncBrowserSetting</li>
+<li>Experience/DoNotSyncBrowserSettings</li>
 <li>Experience/PreventUsersFromTurningOnBrowserSyncing</li>
 <li>Privacy/AllowCrossDeviceClipboard</li>
 <li>Privacy/UploadUserActivities</li>

windows/client-management/mdm/policy-configuration-service-provider.md

@@ -561,9 +561,6 @@ The following diagram shows the Policy configuration service provider in tree fo
   <dd>
     <a href="./policy-csp-browser.md#browser-firstrunurl" id="browser-firstrunurl">Browser/FirstRunURL</a>
   </dd>
-  <dd>
-    <a href="./policy-csp-browser.md#browser-forceenabledextensions" id="browser-forceenabledextensions">Browser/ForceEnabledExtensions</a>
-  </dd>
   <dd>
     <a href="./policy-csp-browser.md#browser-homepages" id="browser-homepages">Browser/HomePages</a>
   </dd>
@@ -2470,6 +2467,9 @@ The following diagram shows the Policy configuration service provider in tree fo
   <dd>
     <a href="./policy-csp-privacy.md#privacy-disableadvertisingid" id="privacy-disableadvertisingid">Privacy/DisableAdvertisingId</a>
   </dd>
+  <dd>
+    <a href="./policy-csp-privacy.md#privacy-disableprivacyexperience" id="privacy-disableprivacyexperience">Privacy/DisablePrivacyExperience</a>
+  </dd>
   <dd>
     <a href="./policy-csp-privacy.md#privacy-enableactivityfeed" id="privacy-enableactivityfeed">Privacy/EnableActivityFeed</a>
   </dd>
@@ -4206,7 +4206,6 @@ The following diagram shows the Policy configuration service provider in tree fo
 -   [Browser/DisableLockdownOfStartPages](./policy-csp-browser.md#browser-disablelockdownofstartpages)
 -   [Browser/EnableExtendedBooksTelemetry](./policy-csp-browser.md#browser-enableextendedbookstelemetry)
 -   [Browser/EnterpriseModeSiteList](./policy-csp-browser.md#browser-enterprisemodesitelist)
--   [Browser/ForceEnabledExtensions](./policy-csp-browser.md#browser-forceenabledextensions)
 -   [Browser/HomePages](./policy-csp-browser.md#browser-homepages)
 -   [Browser/LockdownFavorites](./policy-csp-browser.md#browser-lockdownfavorites)
 -   [Browser/PreventAccessToAboutFlagsInMicrosoftEdge](./policy-csp-browser.md#browser-preventaccesstoaboutflagsinmicrosoftedge)
@@ -4703,6 +4702,7 @@ The following diagram shows the Policy configuration service provider in tree fo
 -   [Privacy/AllowCrossDeviceClipboard](./policy-csp-privacy.md#privacy-allowcrossdeviceclipboard)
 -   [Privacy/AllowInputPersonalization](./policy-csp-privacy.md#privacy-allowinputpersonalization)
 -   [Privacy/DisableAdvertisingId](./policy-csp-privacy.md#privacy-disableadvertisingid)
+-   [Privacy/DisablePrivacyExperience](./policy-csp-privacy.md#privacy-disableprivacyexperience)
 -   [Privacy/EnableActivityFeed](./policy-csp-privacy.md#privacy-enableactivityfeed)
 -   [Privacy/LetAppsAccessAccountInfo](./policy-csp-privacy.md#privacy-letappsaccessaccountinfo)
 -   [Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps](./policy-csp-privacy.md#privacy-letappsaccessaccountinfo-forceallowtheseapps)

windows/client-management/mdm/policy-csp-browser.md

@@ -135,9 +135,6 @@ ms.date: 08/08/2018
   <dd>
     <a href="#browser-firstrunurl">Browser/FirstRunURL</a>
   </dd>
-  <dd>
-    <a href="#browser-forceenabledextensions">Browser/ForceEnabledExtensions</a>
-  </dd>
   <dd>
     <a href="#browser-homepages">Browser/HomePages</a>
   </dd>
@@ -2717,66 +2714,6 @@ Data type = String
 
 <hr/>
 
-<!--Policy-->
-<a href="" id="browser-forceenabledextensions"></a>**Browser/ForceEnabledExtensions**  
-
-<!--SupportedSKUs-->
-<table>
-<tr>
-	<th>Home</th>
-	<th>Pro</th>
-	<th>Business</th>
-	<th>Enterprise</th>
-	<th>Education</th>
-	<th>Mobile</th>
-	<th>Mobile Enterprise</th>
-</tr>
-<tr>
-	<td><img src="images/crossmark.png" alt="cross mark" /></td>
-	<td><img src="images/checkmark.png" alt="check mark" /><sup>5</sup></td>
-	<td><img src="images/checkmark.png" alt="check mark" /><sup>5</sup></td>
-	<td><img src="images/checkmark.png" alt="check mark" /><sup>5</sup></td>
-	<td><img src="images/checkmark.png" alt="check mark" /><sup>5</sup></td>
-	<td></td>
-	<td></td>
-</tr>
-</table>
-
-<!--/SupportedSKUs-->
-<!--Scope-->
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * User
-> * Device
-
-<hr/>
-
-<!--/Scope-->
-<!--Description-->
-This setting lets you decide which extensions should be always enabled.
-
-<!--/Description-->
-<!--ADMXMapped-->
-ADMX Info:  
--   GP name: *ForceEnabledExtensions*
--   GP element: *ForceEnabledExtensions_List*
--   GP ADMX file name: *MicrosoftEdge.admx*
-
-<!--/ADMXMapped-->
-<!--SupportedValues-->
-
-<!--/SupportedValues-->
-<!--Example-->
-
-<!--/Example-->
-<!--Validation-->
-
-<!--/Validation-->
-<!--/Policy-->
-
-<hr/>
-
 <!--Policy-->
 <a href="" id="browser-homepages"></a>**Browser/HomePages**  
 

windows/client-management/mdm/windowslicensing-csp.md

@@ -7,7 +7,7 @@ ms.topic: article
 ms.prod: w10
 ms.technology: windows
 author: MariciaAlforque
-ms.date: 07/25/2018
+ms.date: 08/15/2018
 ---
 
 # WindowsLicensing CSP
@@ -182,6 +182,13 @@ Added in Windows 10, next major version. Returns the status of the latest Switch
 
 Value type is integer. Supported operation is Get.
 
+Values:  
+-  Request fails with error code 404 - no SwitchFromSMode request has been made.
+-  0 - The device successfully switched out of S mode
+-  1 - The device is processing the request to switch out of S mode
+-  3 - The device was already switched out of S mode
+-  4 - The device failed to switch out of S mode
+
 ## SyncML examples
 
 

windows/configuration/guidelines-for-assigned-access-app.md

@@ -9,7 +9,7 @@ author: jdeckerms
 ms.localizationpriority: medium
 ms.author: jdecker
 ms.topic: article
-ms.date: 08/03/2018
+ms.date: 08/15/2018
 ---
 
 # Guidelines for choosing an app for assigned access (kiosk mode)
@@ -45,6 +45,9 @@ Avoid selecting Windows apps that are designed to launch other apps as part of t
 
 In Windows 10, version 1803, you can install the **Kiosk Browser** app from Microsoft to use as your kiosk app. For digital signage scenarios, you can configure **Kiosk Browser** to navigate to a URL and show only that content -- no navigation buttons, no address bar, etc. For kiosk scenarios, you can configure additional settings, such as allowed and blocked URLs, navigation buttons, and end session buttons. For example, you could configure your kiosk to show the online catalog for your store, where customers can navigate between departments and items, but aren’t allowed to go to a competitor's website. 
 
+>[!NOTE]
+>Kiosk Browser supports a single tab. If a website has links that open a new tab, those links will not work with Kiosk Browser.
+
 
 **Kiosk Browser** must be downloaded for offline licensing using Microsoft Store For Business. You can deploy **Kiosk Browser** to devices running Windows 10, version 1803 (Pro, Business, Enterprise, and Education).
 

windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection.md

@@ -10,7 +10,7 @@ ms.pagetype: security
 ms.author: macapara
 author: mjcaparas
 ms.localizationpriority: medium
-ms.date: 06/13/2018
+ms.date: 08/15/2018
 ---
 
 # Query data using Advanced hunting in Windows Defender ATP
@@ -51,7 +51,8 @@ First, we define a time filter to review only records from the previous seven da
 
 We then add a filter on the _FileName_  to contain only instances of _powershell.exe_.
 
-Afterwards, we add a filter on the _ProcessCommandLine_
+Afterwards, we add a filter on the _ProcessCommandLine_. 
+
 Finally, we  project only the columns we're interested in exploring and limit the results to 100 and click **Run query**.
 
 You have the option of expanding the screen view so you can focus on your hunting query and related results.