mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-16 10:53:43 +00:00
Merge branch 'main' of https://github.com/MicrosoftDocs/windows-docs-pr into copilot-xplat-8348943
This commit is contained in:
Meghan Stewart
@ -19,7 +19,7 @@ The enrollment into Intune is triggered by a group policy created on your local
|
||||
- The Active Directory joined device must be running a [supported version of Windows](/windows/release-health/supported-versions-windows-client).
|
||||
- The enterprise has configured a Mobile Device Management (MDM) service.
|
||||
- The on-premises Active Directory must be [integrated with Microsoft Entra ID (via Microsoft Entra Connect)](/azure/architecture/reference-architectures/identity/azure-ad).
|
||||
- Service connection point (SCP) configuration. For more information see [configuring the SCP using Microsoft Entra Connect](/azure/active-directory/devices/how-to-hybrid-join). For environments not publishing SCP data to AD, see [Microsoft Entra hybrid join targeted deployment](/azure/active-directory/devices/hybrid-join-control#targeted-deployment-of-microsoft-entra-hybrid-join-on-windows-current-devices).
|
||||
- Service connection point (SCP) configuration. For more information, see [configuring the SCP using Microsoft Entra Connect](/azure/active-directory/devices/how-to-hybrid-join). For environments not publishing SCP data to AD, see [Microsoft Entra hybrid join targeted deployment](/azure/active-directory/devices/hybrid-join-control#targeted-deployment-of-microsoft-entra-hybrid-join-on-windows-current-devices).
|
||||
- The device shouldn't already be enrolled in Intune using the classic agents (devices managed using agents fail enrollment with `error 0x80180026`).
|
||||
- The minimum Windows Server version requirement is based on the Microsoft Entra hybrid join requirement. For more information, see [How to plan your Microsoft Entra hybrid join implementation](/azure/active-directory/devices/hybrid-azuread-join-plan).
|
||||
|
||||
@ -36,7 +36,7 @@ The autoenrollment relies on the presence of an MDM service and the Microsoft En
|
||||
> [!NOTE]
|
||||
> In Windows 10, version 1709, the enrollment protocol was updated to check whether the device is domain-joined. For details, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](/openspecs/windows_protocols/ms-mde2/4d7eadd5-3951-4f1c-8159-c39e07cbe692). For examples, see section 4.3.1 RequestSecurityToken of the MS-MDE2 protocol documentation.
|
||||
|
||||
When the autoenrollment Group Policy is enabled, a task is created in the background that initiates the MDM enrollment. The task uses the existing MDM service configuration from the Microsoft Entra information of the user. If multi-factor authentication is required, the user gets prompted to complete the authentication. Once the enrollment is configured, the user can check the status in the Settings page.
|
||||
When the autoenrollment Group Policy is enabled, a task is created in the background that initiates the MDM enrollment. The task uses the existing MDM service configuration from the Microsoft Entra information of the user. If multifactor authentication is required, the user gets prompted to complete the authentication. Once the enrollment is configured, the user can check the status in the Settings page.
|
||||
|
||||
- Starting in Windows 10, version 1709, when the same policy is configured in Group Policy and MDM, Group Policy policy takes precedence over MDM.
|
||||
- Starting in Windows 10, version 1803, a new setting allows you to change precedence to MDM. For more information, see [Windows Group Policy vs. Intune MDM Policy who wins?](/archive/blogs/cbernier/windows-10-group-policy-vs-intune-mdm-policy-who-wins).
|
||||
@ -52,20 +52,13 @@ To configure autoenrollment using a group policy, use the following steps:
|
||||
1. Link the GPO.
|
||||
1. Filter using Security Groups.
|
||||
|
||||
If you don't see the policy, it may be because you don't have the ADMX for Windows 10, version 1803 or later installed. To fix the issue, use the following procedures. The latest MDM.admx is backwards compatible.
|
||||
If you don't see the policy, get the latest ADMX for your Windows version. To fix the issue, use the following procedures. The latest MDM.admx is backwards compatible.
|
||||
|
||||
1. Download the administrative templates for the desired version:
|
||||
|
||||
- [Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880)
|
||||
- [Administrative Templates (.admx) for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576)
|
||||
- [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495)
|
||||
- [Administrative Templates (.admx) for Windows 10 November 2019 Update (1909)](https://www.microsoft.com/download/confirmation.aspx?id=100591)
|
||||
- [Administrative Templates (.admx) for Windows 10 May 2020 Update (2004)](https://www.microsoft.com/download/confirmation.aspx?id=101445)
|
||||
- [Administrative Templates (.admx) for Windows 10 October 2020 Update (20H2)](https://www.microsoft.com/download/details.aspx?id=102157)
|
||||
- [Administrative Templates (.admx) for Windows 10 May 2021 Update (21H1)](https://www.microsoft.com/download/details.aspx?id=103124)
|
||||
- [Administrative Templates (.admx) for Windows 10 November 2021 Update (21H2)-v2.0](https://www.microsoft.com/download/details.aspx?id=104042)
|
||||
- [Administrative Templates (.admx) for Windows 10 October 2022 Update (22H2)](https://www.microsoft.com/download/104677)
|
||||
- [Administrative Templates (.admx) for Windows 11 2022 September Update (22H2)](https://www.microsoft.com/download/details.aspx?id=104593)
|
||||
- [Windows 11, version 23H2](https://www.microsoft.com/download/details.aspx?id=105667)
|
||||
- [Windows 11, version 22H2](https://www.microsoft.com/download/details.aspx?id=104593)
|
||||
- [Windows 10, version 22H2](https://www.microsoft.com/download/details.aspx?id=104677)
|
||||
|
||||
1. Install the package on the Domain Controller.
|
||||
|
||||
@ -96,9 +89,9 @@ This procedure is only for illustration purposes to show how the new autoenrollm
|
||||
>
|
||||
> **Device Credential** is only supported for Microsoft Intune enrollment in scenarios with Co-management or [Azure Virtual Desktop multi-session host pools](/mem/intune/fundamentals/azure-virtual-desktop-multi-session) because the Intune subscription is user centric. User credentials are supported for [Azure Virtual Desktop personal host pools](/mem/intune/fundamentals/azure-virtual-desktop).
|
||||
|
||||
When a group policy refresh occurs on the client, a task is created and scheduled to run every 5 minutes for the duration of one day. The task is called **Schedule created by enrollment client for automatically enrolling in MDM from Microsoft Entra ID**. To see the scheduled task, launch the [Task Scheduler app](#task-scheduler-app).
|
||||
When a group policy refresh occurs on the client, a task is created and scheduled to run every five minutes for one day. The task is called **Schedule created by enrollment client for automatically enrolling in MDM from Microsoft Entra ID**. To see the scheduled task, launch the [Task Scheduler app](#task-scheduler-app).
|
||||
|
||||
If two-factor authentication is required, you are prompted to complete the process. Here's an example screenshot.
|
||||
If two-factor authentication is required, you're prompted to complete the process. Here's an example screenshot.
|
||||
|
||||
:::image type="content" source="images/autoenrollment-2-factor-auth.png" alt-text="Screenshot of Two-factor authentication notification.":::
|
||||
|
||||
@ -124,10 +117,10 @@ In **Task Scheduler Library**, open **Microsoft > Windows** , then select **Ente
|
||||
|
||||
To see the result of the task, move the scroll bar to see the **Last Run Result**. You can see the logs in the **History** tab.
|
||||
|
||||
The message **0x80180026** is a failure message (`MENROLL_E_DEVICE_MANAGEMENT_BLOCKED`). If the device enrollment is blocked, your IT admin might have enabled the **Disable MDM Enrollment** policy.
|
||||
The message **0x80180026** is a failure message (`MENROLL_E_DEVICE_MANAGEMENT_BLOCKED`), which can be caused by enabling the **Disable MDM Enrollment** policy.
|
||||
|
||||
> [!NOTE]
|
||||
> The GPEdit console doesn't reflect the status of policies set by your IT admin on your device. It's only used by the user to set policies.
|
||||
> The GPEdit console doesn't reflect the status of policies set by your organization on your device. It's only used by the user to set policies.
|
||||
|
||||
## Related articles
|
||||
|
||||
|
||||
@ -4,7 +4,7 @@ description: Learn more about the CloudDesktop CSP.
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 10/23/2023
|
||||
ms.date: 10/25/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -26,16 +26,72 @@ ms.topic: reference
|
||||
The following list shows the CloudDesktop configuration service provider nodes:
|
||||
|
||||
- ./Device/Vendor/MSFT/CloudDesktop
|
||||
- [BootToCloudPCEnhanced](#boottocloudpcenhanced)
|
||||
- [EnableBootToCloudSharedPCMode](#enableboottocloudsharedpcmode)
|
||||
<!-- CloudDesktop-Tree-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-Begin -->
|
||||
## BootToCloudPCEnhanced
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-Applicability-Begin -->
|
||||
| Scope | Editions | Applicable OS |
|
||||
|:--|:--|:--|
|
||||
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
||||
<!-- Device-BootToCloudPCEnhanced-Applicability-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-OmaUri-Begin -->
|
||||
```Device
|
||||
./Device/Vendor/MSFT/CloudDesktop/BootToCloudPCEnhanced
|
||||
```
|
||||
<!-- Device-BootToCloudPCEnhanced-OmaUri-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
This node allows to configure different kinds of Boot to Cloud mode. Boot to cloud mode enables users to seamlessly sign-in to a Cloud PC. For using this feature, Cloud Provider application must be installed on the PC and the user must have a Cloud PC provisioned. This node supports the below options: 0. Not Configured. 1. Enable Boot to Cloud Shared PC Mode: Boot to Cloud Shared PC mode allows multiple users to sign-in on the device and use for shared purpose. 2. Enable Boot to Cloud Personal Mode (Cloud only): Personal mode allows user to sign-in on the device using various authentication mechanism configured by their organization (For ex. PIN, Biometrics etc). This mode preserves user personalization, including their profile picture and username in local machine, and facilitates fast account switching.
|
||||
<!-- Device-BootToCloudPCEnhanced-Description-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-Editable-Begin -->
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
> [!IMPORTANT]
|
||||
> If BootToCloudPCEnhanced and EnableBootToCloudSharedPCMode are both configured, BootToCloudPCEnhanced is given priority and overrides EnableBootToCloudSharedPCMode.
|
||||
<!-- Device-BootToCloudPCEnhanced-Editable-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-DFProperties-Begin -->
|
||||
**Description framework properties**:
|
||||
|
||||
| Property name | Property value |
|
||||
|:--|:--|
|
||||
| Format | `int` |
|
||||
| Access Type | Add, Delete, Get, Replace |
|
||||
| Default Value | 0 |
|
||||
<!-- Device-BootToCloudPCEnhanced-DFProperties-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-AllowedValues-Begin -->
|
||||
**Allowed values**:
|
||||
|
||||
| Value | Description |
|
||||
|:--|:--|
|
||||
| 0 (Default) | Not Configured. |
|
||||
| 1 | Enable Boot to Cloud Shared PC Mode. |
|
||||
| 2 | Enable Boot to Cloud Personal Mode (Cloud only). |
|
||||
<!-- Device-BootToCloudPCEnhanced-AllowedValues-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-Examples-Begin -->
|
||||
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||
<!-- Device-BootToCloudPCEnhanced-Examples-End -->
|
||||
|
||||
<!-- Device-BootToCloudPCEnhanced-End -->
|
||||
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-Begin -->
|
||||
## EnableBootToCloudSharedPCMode
|
||||
|
||||
> [!NOTE]
|
||||
> This policy is deprecated and may be removed in a future release.
|
||||
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-Applicability-Begin -->
|
||||
| Scope | Editions | Applicable OS |
|
||||
|:--|:--|:--|
|
||||
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview [10.0.22631.2050] |
|
||||
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ❌ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-Applicability-End -->
|
||||
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-OmaUri-Begin -->
|
||||
@ -51,6 +107,8 @@ Setting this node to "true" configures boot to cloud for Shared PC mode. Boot to
|
||||
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-Editable-Begin -->
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
> [!IMPORTANT]
|
||||
> If BootToCloudPCEnhanced and EnableBootToCloudSharedPCMode are both configured, BootToCloudPCEnhanced is given priority and overrides EnableBootToCloudSharedPCMode.
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-Editable-End -->
|
||||
|
||||
<!-- Device-EnableBootToCloudSharedPCMode-DFProperties-Begin -->
|
||||
@ -80,66 +138,86 @@ Setting this node to "true" configures boot to cloud for Shared PC mode. Boot to
|
||||
|
||||
<!-- CloudDesktop-CspMoreInfo-Begin -->
|
||||
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
|
||||
## EnableBootToCloudSharedPCMode technical reference
|
||||
## BootToCloudPCEnhanced technical reference
|
||||
|
||||
EnableBootToCloudSharedPCMode setting is used to configure **Boot to Cloud** feature for shared user mode. When you enable this setting, multiple policies are applied to achieve the intended behavior.
|
||||
BootToCloudPCEnhanced is the setting used to configure **Boot to Cloud** feature either for shared mode or personal mode. When you enable this setting, multiple policies are applied to achieve the intended behavior. If you wish to customize the **Boot to Cloud** experience, you can utilize the [BootToCloudMode](policy-csp-clouddesktop.md#boottocloudmode) policy, which provides the flexibility to tailor the experience according to your requirements.
|
||||
|
||||
> [!NOTE]
|
||||
> It is recommended not to set any of the policies enforced by this setting to different values, as these policies help provide a smooth UX experience for the **Boot to Cloud** feature for shared user mode.
|
||||
> It is recommended not to set any of the policies enforced by this setting to different values, as these policies help provide a smooth UX experience for the **Boot to Cloud** feature for shared and personal mode.
|
||||
|
||||
### MDM Policies
|
||||
### Boot to Cloud Shared PC Mode
|
||||
|
||||
When this mode is enabled, these MDM policies are applied for the Device scope (all users):
|
||||
When the Shared PC mode is enabled by setting BootToCloudPCEnhanced value to 1:
|
||||
|
||||
| Setting | Value | Value Description |
|
||||
|----------------------------------------------------------------------------------------------------------------------------|---------|-------------------------------------------------------------|
|
||||
| [CloudDesktop/BootToCloudMode](policy-csp-clouddesktop.md#boottocloudmode) | 1 | Enable Boot to Cloud Desktop |
|
||||
| [WindowsLogon/OverrideShellProgram](policy-csp-windowslogon.md#overrideshellprogram) | 1 | Apply Lightweight Shell |
|
||||
| [ADMX_CredentialProviders/DefaultCredentialProvider](policy-csp-admx-credentialproviders.md#defaultcredentialprovider) | Enabled | Configures default credential provider to password provider |
|
||||
| [ADMX_Logon/DisableExplorerRunLegacy_2](policy-csp-admx-logon.md#disableexplorerrunlegacy_2) | Enabled | Don't process the computer legacy run list |
|
||||
| [TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode](policy-csp-textinput.md#enabletouchkeyboardautoinvokeindesktopmode) | 1 | When no keyboard is attached |
|
||||
- Following MDM policies are applied for the Device scope (all users):
|
||||
|
||||
### Group Policies
|
||||
| Setting | Value | Value Description |
|
||||
|----------------------------------------------------------------------------------------------------------------------------|---------|-------------------------------------------------------------|
|
||||
| [CloudDesktop/BootToCloudMode](policy-csp-clouddesktop.md#boottocloudmode) | 1 | Enable Boot to Cloud Desktop |
|
||||
| [WindowsLogon/OverrideShellProgram](policy-csp-windowslogon.md#overrideshellprogram) | 1 | Apply Lightweight Shell |
|
||||
| [ADMX_CredentialProviders/DefaultCredentialProvider](policy-csp-admx-credentialproviders.md#defaultcredentialprovider) | Enabled | Configures default credential provider to password provider |
|
||||
| [ADMX_Logon/DisableExplorerRunLegacy_2](policy-csp-admx-logon.md#disableexplorerrunlegacy_2) | Enabled | Don't process the computer legacy run list |
|
||||
| [TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode](policy-csp-textinput.md#enabletouchkeyboardautoinvokeindesktopmode) | 1 | When no keyboard is attached |
|
||||
|
||||
When this mode is enabled, these local group policies are configured for all users:
|
||||
- Following local group policies are configured for all users:
|
||||
|
||||
| Policy setting | Status |
|
||||
|------------------------------------------------------------------------------------------------------------------------|---------------------------------------|
|
||||
| Security Settings/Local Policies/Security Options/User Account Control: Behavior of elevation prompt for standard user | Automatically deny elevation requests |
|
||||
| Security Settings/Local Policies/Security Options/Interactive logon: Don't display last signed-in | Enabled |
|
||||
| Control Panel/Personalization/Prevent enabling lock screen slide show | Enabled |
|
||||
| System/Logon/Block user from showing account details on sign-in | Enabled |
|
||||
| System/Logon/Enumerate local users on domain-joined computers | Disabled |
|
||||
| System/Logon/Hide entry points for Fast User Switching | Enabled |
|
||||
| System/Logon/Show first sign-in animation | Disabled |
|
||||
| System/Logon/Turn off app notifications on the lock screen | Enabled |
|
||||
| System/Logon/Turn off picture password sign-in | Enabled |
|
||||
| System/Logon/Turn on convenience PIN sign-in | Disabled |
|
||||
| Windows Components/App Package Deployment/Allow a Windows app to share application data between users | Enabled |
|
||||
| Windows Components/Biometrics/Allow the use of biometrics | Disabled |
|
||||
| Windows Components/Biometrics/Allow users to log on using biometrics | Disabled |
|
||||
| Windows Components/Biometrics/Allow domain users to log on using biometrics | Disabled |
|
||||
| Windows Components/File Explorer/Show lock in the user tile menu | Disabled |
|
||||
| Windows Components/File History/Turn off File History | Enabled |
|
||||
| Windows Components/OneDrive/Prevent the usage of OneDrive for file storage | Enabled |
|
||||
| Windows Components/Windows Hello for Business/Use biometrics | Disabled |
|
||||
| Windows Components/Windows Hello for Business/Use Windows Hello for Business | Disabled |
|
||||
| Windows Components/Windows Logon Options/Sign-in and lock last interactive user automatically after a restart | Disabled |
|
||||
| Windows Components/Microsoft Passport for Work | Disabled |
|
||||
| System/Ctrl+Alt+Del Options/Remove Task Manager | Enabled |
|
||||
| System/Ctrl+Alt+Del Options/Remove Change Password | Enabled |
|
||||
| Start Menu and Taskbar/Notifications/Turn off toast notifications | Enabled |
|
||||
| Start Menu and Taskbar/Notifications/Remove Notifications and Action Center | Enabled |
|
||||
| System/Logon/Do not process the legacy run list | Enabled |
|
||||
| Policy setting | Status |
|
||||
|------------------------------------------------------------------------------------------------------------------------|---------------------------------------|
|
||||
| Security Settings/Local Policies/Security Options/User Account Control: Behavior of elevation prompt for standard user | Automatically deny elevation requests |
|
||||
| Security Settings/Local Policies/Security Options/Interactive logon: Don't display last signed-in | Enabled |
|
||||
| Control Panel/Personalization/Prevent enabling lock screen slide show | Enabled |
|
||||
| System/Logon/Block user from showing account details on sign-in | Enabled |
|
||||
| System/Logon/Enumerate local users on domain-joined computers | Disabled |
|
||||
| System/Logon/Hide entry points for Fast User Switching | Enabled |
|
||||
| System/Logon/Show first sign-in animation | Disabled |
|
||||
| System/Logon/Turn off app notifications on the lock screen | Enabled |
|
||||
| System/Logon/Turn off picture password sign-in | Enabled |
|
||||
| System/Logon/Turn on convenience PIN sign-in | Disabled |
|
||||
| Windows Components/App Package Deployment/Allow a Windows app to share application data between users | Enabled |
|
||||
| Windows Components/Biometrics/Allow the use of biometrics | Disabled |
|
||||
| Windows Components/Biometrics/Allow users to log on using biometrics | Disabled |
|
||||
| Windows Components/Biometrics/Allow domain users to log on using biometrics | Disabled |
|
||||
| Windows Components/File Explorer/Show lock in the user tile menu | Disabled |
|
||||
| Windows Components/File History/Turn off File History | Enabled |
|
||||
| Windows Components/OneDrive/Prevent the usage of OneDrive for file storage | Enabled |
|
||||
| Windows Components/Windows Hello for Business/Use biometrics | Disabled |
|
||||
| Windows Components/Windows Hello for Business/Use Windows Hello for Business | Disabled |
|
||||
| Windows Components/Windows Logon Options/Sign-in and lock last interactive user automatically after a restart | Disabled |
|
||||
| Windows Components/Microsoft Passport for Work | Disabled |
|
||||
| System/Ctrl+Alt+Del Options/Remove Task Manager | Enabled |
|
||||
| System/Ctrl+Alt+Del Options/Remove Change Password | Enabled |
|
||||
| Start Menu and Taskbar/Notifications/Turn off toast notifications | Enabled |
|
||||
| Start Menu and Taskbar/Notifications/Remove Notifications and Action Center | Enabled |
|
||||
| System/Logon/Do not process the legacy run list | Enabled |
|
||||
|
||||
### Registry
|
||||
- Following registry changes are performed:
|
||||
|
||||
When this mode is enabled, these registry changes are performed:
|
||||
| Registry setting | Status |
|
||||
|----------------------------------------------------------------------------------------------|--------|
|
||||
| Software\Policies\Microsoft\PassportForWork\Remote\Enabled (Phone sign-in/Use phone sign-in) | 0 |
|
||||
| Software\Policies\Microsoft\PassportForWork\Enabled (Use Microsoft Passport for Work) | 0 |
|
||||
|
||||
| Registry setting | Status |
|
||||
|----------------------------------------------------------------------------------------------|--------|
|
||||
| Software\Policies\Microsoft\PassportForWork\Remote\Enabled (Phone sign-in/Use phone sign-in) | 0 |
|
||||
| Software\Policies\Microsoft\PassportForWork\Enabled (Use Microsoft Passport for Work) | 0 |
|
||||
### Boot to Cloud Personal Mode
|
||||
|
||||
When the Personal mode is enabled by setting BootToCloudPCEnhanced value to 2:
|
||||
|
||||
- Following MDM policies are applied for the Device scope (all users):
|
||||
|
||||
| Setting | Value | Value Description |
|
||||
|----------------------------------------------------------------------------------------------------------------------------|---------|-------------------------------------------------------------|
|
||||
| [CloudDesktop/BootToCloudMode](policy-csp-clouddesktop.md#boottocloudmode) | 1 | Enable Boot to Cloud Desktop |
|
||||
| [WindowsLogon/OverrideShellProgram](policy-csp-windowslogon.md#overrideshellprogram) | 1 | Apply Lightweight Shell |
|
||||
| [ADMX_Logon/DisableExplorerRunLegacy_2](policy-csp-admx-logon.md#disableexplorerrunlegacy_2) | Enabled | Don't process the computer legacy run list |
|
||||
| [TextInput/EnableTouchKeyboardAutoInvokeInDesktopMode](policy-csp-textinput.md#enabletouchkeyboardautoinvokeindesktopmode) | 1 | When no keyboard is attached |
|
||||
|
||||
- Following local group policies are configured for all users:
|
||||
|
||||
| Policy setting | Status |
|
||||
|------------------------------------------------------------------------------------------------------------------------|---------------------------------------|
|
||||
| System/Ctrl+Alt+Del Options/Remove Change Password | Enabled |
|
||||
| Start Menu and Taskbar/Notifications/Turn off toast notifications | Enabled |
|
||||
| Start Menu and Taskbar/Notifications/Remove Notifications and Action Center | Enabled |
|
||||
| System/Logon/Do not process the legacy run list | Enabled |
|
||||
<!-- CloudDesktop-CspMoreInfo-End -->
|
||||
|
||||
<!-- CloudDesktop-End -->
|
||||
|
||||
@ -4,7 +4,7 @@ description: View the XML file containing the device description framework (DDF)
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 08/29/2023
|
||||
ms.date: 10/25/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -45,11 +45,55 @@ The following XML file contains the device description framework (DDF) for the C
|
||||
<MIME />
|
||||
</DFType>
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>22631.2050</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>1.0</MSFT:CspVersion>
|
||||
<MSFT:EditionAllowList>0x4;0x30;0x31;0x7E;0x88;0xA1;0xA2;0xA4;0xA5;0xBC;0xBF;0xCD;</MSFT:EditionAllowList>
|
||||
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>9.9</MSFT:CspVersion>
|
||||
<MSFT:EditionAllowList>0x4;0x30;0x31;0x7E;0x87;0x88;0x88*;0xA1;0xA2;0xA4;0xA5;0xB4;0xBC;0xBD;0xBF;</MSFT:EditionAllowList>
|
||||
</MSFT:Applicability>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
<NodeName>BootToCloudPCEnhanced</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Add />
|
||||
<Delete />
|
||||
<Get />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<DefaultValue>0</DefaultValue>
|
||||
<Description>This node allows to configure different kinds of Boot to Cloud mode. Boot to cloud mode enables users to seamlessly sign-in to a Cloud PC. For using this feature, Cloud Provider application must be installed on the PC and the user must have a Cloud PC provisioned. This node supports the below options: 0. Not Configured. 1. Enable Boot to Cloud Shared PC Mode: Boot to Cloud Shared PC mode allows multiple users to sign-in on the device and use for shared purpose. 2. Enable Boot to Cloud Personal Mode (Cloud only): Personal mode allows user to sign-in on the device using various authentication mechanism configured by their organization (For ex. PIN, Biometrics etc). This mode preserves user personalization, including their profile picture and username in local machine, and facilitates fast account switching.</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<DFTitle>Boot to Cloud PC Enhanced</DFTitle>
|
||||
<DFType>
|
||||
<MIME />
|
||||
</DFType>
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>9.9</MSFT:CspVersion>
|
||||
</MSFT:Applicability>
|
||||
<MSFT:AllowedValues ValueType="ENUM">
|
||||
<MSFT:Enum>
|
||||
<MSFT:Value>0</MSFT:Value>
|
||||
<MSFT:ValueDescription>Not Configured</MSFT:ValueDescription>
|
||||
</MSFT:Enum>
|
||||
<MSFT:Enum>
|
||||
<MSFT:Value>1</MSFT:Value>
|
||||
<MSFT:ValueDescription>Enable Boot to Cloud Shared PC Mode</MSFT:ValueDescription>
|
||||
</MSFT:Enum>
|
||||
<MSFT:Enum>
|
||||
<MSFT:Value>2</MSFT:Value>
|
||||
<MSFT:ValueDescription>Enable Boot to Cloud Personal Mode (Cloud only)</MSFT:ValueDescription>
|
||||
</MSFT:Enum>
|
||||
</MSFT:AllowedValues>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>EnableBootToCloudSharedPCMode</NodeName>
|
||||
<DFProperties>
|
||||
@ -74,6 +118,9 @@ The following XML file contains the device description framework (DDF) for the C
|
||||
<DFType>
|
||||
<MIME />
|
||||
</DFType>
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>88.8.88888</MSFT:OsBuildVersion>
|
||||
</MSFT:Applicability>
|
||||
<MSFT:AllowedValues ValueType="ENUM">
|
||||
<MSFT:Enum>
|
||||
<MSFT:Value>false</MSFT:Value>
|
||||
@ -84,6 +131,7 @@ The following XML file contains the device description framework (DDF) for the C
|
||||
<MSFT:ValueDescription>Boot to cloud shared pc mode enabled</MSFT:ValueDescription>
|
||||
</MSFT:Enum>
|
||||
</MSFT:AllowedValues>
|
||||
<MSFT:Deprecated />
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
|
||||
@ -1,11 +1,11 @@
|
||||
### YamlMime:Landing
|
||||
|
||||
title: Configuration Service Provider # < 60 chars
|
||||
summary: Learn more about the configuration service provider (CSP) policies available on Windows 10 and Windows 11. # < 160 chars
|
||||
summary: Learn more about the configuration service provider (CSP) policies available on Windows devices. # < 160 chars
|
||||
|
||||
metadata:
|
||||
title: Configuration Service Provider # Required; page title displayed in search results. Include the brand. < 60 chars.
|
||||
description: Learn more about the configuration service provider (CSP) policies available on Windows 10 and Windows 11. # Required; article description that is displayed in search results. < 160 chars.
|
||||
description: Learn more about the configuration service provider (CSP) policies available on Windows devices. # Required; article description that is displayed in search results. < 160 chars.
|
||||
ms.topic: landing-page
|
||||
ms.technology: itpro-manage
|
||||
ms.prod: windows-client
|
||||
@ -15,7 +15,7 @@ metadata:
|
||||
author: vinaypamnani-msft
|
||||
ms.author: vinpa
|
||||
manager: aaroncz
|
||||
ms.date: 08/04/2022
|
||||
ms.date: 10/25/2023
|
||||
localization_priority: medium
|
||||
|
||||
# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
|
||||
@ -35,8 +35,8 @@ landingContent:
|
||||
url: configuration-service-provider-ddf.md
|
||||
- text: BitLocker CSP
|
||||
url: bitlocker-csp.md
|
||||
- text: DynamicManagement CSP
|
||||
url: dynamicmanagement-csp.md
|
||||
- text: Declared Configuration protocol
|
||||
url: ../declared-configuration.md
|
||||
|
||||
|
||||
# Card (optional)
|
||||
|
||||
@ -4,7 +4,7 @@ description: Learn more about the Personalization CSP.
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 08/10/2023
|
||||
ms.date: 10/26/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -16,24 +16,147 @@ ms.topic: reference
|
||||
<!-- Personalization-Begin -->
|
||||
# Personalization CSP
|
||||
|
||||
[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
|
||||
|
||||
<!-- Personalization-Editable-Begin -->
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
The Personalization CSP can set the lock screen and desktop background images. Setting these policies also prevents the user from changing the image. You can also use the Personalization settings in a provisioning package.
|
||||
The Personalization CSP can set the lock screen, desktop background images and company branding on sign-in screen ([BootToCloud mode](policy-csp-clouddesktop.md#boottocloudmode) only). Setting these policies also prevents the user from changing the image. You can also use the Personalization settings in a provisioning package.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> Personalization CSP is supported in Windows Enterprise and Education SKUs. It works in Windows Professional only when SetEduPolicies in [SharedPC CSP](sharedpc-csp.md) is set.
|
||||
> Personalization CSP is supported in Windows Enterprise and Education SKUs. It works in Windows Professional only when SetEduPolicies in [SharedPC CSP](sharedpc-csp.md) is set, or when the device is configured in [Shared PC mode with BootToCloudPCEnhanced policy](clouddesktop-csp.md#boottocloudpcenhanced).
|
||||
<!-- Personalization-Editable-End -->
|
||||
|
||||
<!-- Personalization-Tree-Begin -->
|
||||
The following list shows the Personalization configuration service provider nodes:
|
||||
|
||||
- ./Vendor/MSFT/Personalization
|
||||
- [CompanyLogoStatus](#companylogostatus)
|
||||
- [CompanyLogoUrl](#companylogourl)
|
||||
- [CompanyName](#companyname)
|
||||
- [DesktopImageStatus](#desktopimagestatus)
|
||||
- [DesktopImageUrl](#desktopimageurl)
|
||||
- [LockScreenImageStatus](#lockscreenimagestatus)
|
||||
- [LockScreenImageUrl](#lockscreenimageurl)
|
||||
<!-- Personalization-Tree-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-Begin -->
|
||||
## CompanyLogoStatus
|
||||
|
||||
<!-- Device-CompanyLogoStatus-Applicability-Begin -->
|
||||
| Scope | Editions | Applicable OS |
|
||||
|:--|:--|:--|
|
||||
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
||||
<!-- Device-CompanyLogoStatus-Applicability-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-OmaUri-Begin -->
|
||||
```Device
|
||||
./Vendor/MSFT/Personalization/CompanyLogoStatus
|
||||
```
|
||||
<!-- Device-CompanyLogoStatus-OmaUri-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
This represents the status of the Company Logo. 1 - Successfully downloaded or copied. 2 - Download/Copy in progress. 3 - Download/Copy failed. 4 - Unknown file type. 5 - Unsupported Url scheme. 6 - Max retry failed. This setting is currently available for boot to cloud shared pc mode only.
|
||||
<!-- Device-CompanyLogoStatus-Description-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-Editable-Begin -->
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
<!-- Device-CompanyLogoStatus-Editable-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-DFProperties-Begin -->
|
||||
**Description framework properties**:
|
||||
|
||||
| Property name | Property value |
|
||||
|:--|:--|
|
||||
| Format | `int` |
|
||||
| Access Type | Get |
|
||||
<!-- Device-CompanyLogoStatus-DFProperties-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-Examples-Begin -->
|
||||
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||
<!-- Device-CompanyLogoStatus-Examples-End -->
|
||||
|
||||
<!-- Device-CompanyLogoStatus-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-Begin -->
|
||||
## CompanyLogoUrl
|
||||
|
||||
<!-- Device-CompanyLogoUrl-Applicability-Begin -->
|
||||
| Scope | Editions | Applicable OS |
|
||||
|:--|:--|:--|
|
||||
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
||||
<!-- Device-CompanyLogoUrl-Applicability-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-OmaUri-Begin -->
|
||||
```Device
|
||||
./Vendor/MSFT/Personalization/CompanyLogoUrl
|
||||
```
|
||||
<!-- Device-CompanyLogoUrl-OmaUri-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
An http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Company Logo or a file Url to a local image on the file system that needs to be used as the Company Logo. This setting is currently available for boot to cloud shared pc mode only.
|
||||
<!-- Device-CompanyLogoUrl-Description-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-Editable-Begin -->
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
<!-- Device-CompanyLogoUrl-Editable-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-DFProperties-Begin -->
|
||||
**Description framework properties**:
|
||||
|
||||
| Property name | Property value |
|
||||
|:--|:--|
|
||||
| Format | `chr` (string) |
|
||||
| Access Type | Add, Delete, Get, Replace |
|
||||
<!-- Device-CompanyLogoUrl-DFProperties-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-Examples-Begin -->
|
||||
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||
<!-- Device-CompanyLogoUrl-Examples-End -->
|
||||
|
||||
<!-- Device-CompanyLogoUrl-End -->
|
||||
|
||||
<!-- Device-CompanyName-Begin -->
|
||||
## CompanyName
|
||||
|
||||
<!-- Device-CompanyName-Applicability-Begin -->
|
||||
| Scope | Editions | Applicable OS |
|
||||
|:--|:--|:--|
|
||||
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
||||
<!-- Device-CompanyName-Applicability-End -->
|
||||
|
||||
<!-- Device-CompanyName-OmaUri-Begin -->
|
||||
```Device
|
||||
./Vendor/MSFT/Personalization/CompanyName
|
||||
```
|
||||
<!-- Device-CompanyName-OmaUri-End -->
|
||||
|
||||
<!-- Device-CompanyName-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
The name of the company to be displayed on the sign-in screen. This setting is currently available for boot to cloud shared pc mode only.
|
||||
<!-- Device-CompanyName-Description-End -->
|
||||
|
||||
<!-- Device-CompanyName-Editable-Begin -->
|
||||
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||
<!-- Device-CompanyName-Editable-End -->
|
||||
|
||||
<!-- Device-CompanyName-DFProperties-Begin -->
|
||||
**Description framework properties**:
|
||||
|
||||
| Property name | Property value |
|
||||
|:--|:--|
|
||||
| Format | `chr` (string) |
|
||||
| Access Type | Add, Delete, Get, Replace |
|
||||
| Allowed Values | Regular Expression: `^.{1,30}$` |
|
||||
<!-- Device-CompanyName-DFProperties-End -->
|
||||
|
||||
<!-- Device-CompanyName-Examples-Begin -->
|
||||
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||
<!-- Device-CompanyName-Examples-End -->
|
||||
|
||||
<!-- Device-CompanyName-End -->
|
||||
|
||||
<!-- Device-DesktopImageStatus-Begin -->
|
||||
## DesktopImageStatus
|
||||
|
||||
@ -90,7 +213,7 @@ This represents the status of the DesktopImage. 1 - Successfully downloaded or c
|
||||
|
||||
<!-- Device-DesktopImageUrl-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to be used as the Desktop Image.
|
||||
An http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to be used as the Desktop Image.
|
||||
<!-- Device-DesktopImageUrl-Description-End -->
|
||||
|
||||
<!-- Device-DesktopImageUrl-Editable-Begin -->
|
||||
@ -168,7 +291,7 @@ This represents the status of the LockScreenImage. 1 - Successfully downloaded o
|
||||
|
||||
<!-- Device-LockScreenImageUrl-Description-Begin -->
|
||||
<!-- Description-Source-DDF -->
|
||||
A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image.
|
||||
An http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image.
|
||||
<!-- Device-LockScreenImageUrl-Description-End -->
|
||||
|
||||
<!-- Device-LockScreenImageUrl-Editable-Begin -->
|
||||
|
||||
@ -4,7 +4,7 @@ description: View the XML file containing the device description framework (DDF)
|
||||
author: vinaypamnani-msft
|
||||
manager: aaroncz
|
||||
ms.author: vinpa
|
||||
ms.date: 06/02/2023
|
||||
ms.date: 10/25/2023
|
||||
ms.localizationpriority: medium
|
||||
ms.prod: windows-client
|
||||
ms.technology: itpro-manage
|
||||
@ -49,7 +49,7 @@ The following XML file contains the device description framework (DDF) for the P
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>10.0.16299</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>1.0</MSFT:CspVersion>
|
||||
<MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;</MSFT:EditionAllowList>
|
||||
<MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB;</MSFT:EditionAllowList>
|
||||
</MSFT:Applicability>
|
||||
</DFProperties>
|
||||
<Node>
|
||||
@ -146,6 +146,92 @@ The following XML file contains the device description framework (DDF) for the P
|
||||
</DFType>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>CompanyLogoUrl</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Add />
|
||||
<Delete />
|
||||
<Get />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Company Logo or a file Url to a local image on the file system that needs to be used as the Company Logo. This setting is currently available for boot to cloud shared pc mode only.</Description>
|
||||
<DFFormat>
|
||||
<chr />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<DFType>
|
||||
<MIME />
|
||||
</DFType>
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>2.0</MSFT:CspVersion>
|
||||
</MSFT:Applicability>
|
||||
<MSFT:AllowedValues ValueType="None">
|
||||
</MSFT:AllowedValues>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>CompanyLogoStatus</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Get />
|
||||
</AccessType>
|
||||
<Description>This represents the status of the Company Logo. 1 - Successfully downloaded or copied. 2 - Download/Copy in progress. 3 - Download/Copy failed. 4 - Unknown file type. 5 - Unsupported Url scheme. 6 - Max retry failed. This setting is currently available for boot to cloud shared pc mode only.</Description>
|
||||
<DFFormat>
|
||||
<int />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<DFType>
|
||||
<MIME />
|
||||
</DFType>
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>2.0</MSFT:CspVersion>
|
||||
</MSFT:Applicability>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
<Node>
|
||||
<NodeName>CompanyName</NodeName>
|
||||
<DFProperties>
|
||||
<AccessType>
|
||||
<Add />
|
||||
<Delete />
|
||||
<Get />
|
||||
<Replace />
|
||||
</AccessType>
|
||||
<Description>The name of the company to be displayed on the sign-in screen. This setting is currently available for boot to cloud shared pc mode only.</Description>
|
||||
<DFFormat>
|
||||
<chr />
|
||||
</DFFormat>
|
||||
<Occurrence>
|
||||
<One />
|
||||
</Occurrence>
|
||||
<Scope>
|
||||
<Dynamic />
|
||||
</Scope>
|
||||
<DFType>
|
||||
<MIME />
|
||||
</DFType>
|
||||
<MSFT:Applicability>
|
||||
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
|
||||
<MSFT:CspVersion>2.0</MSFT:CspVersion>
|
||||
</MSFT:Applicability>
|
||||
<MSFT:AllowedValues ValueType="RegEx">
|
||||
<MSFT:Value>^.{1,30}$</MSFT:Value>
|
||||
</MSFT:AllowedValues>
|
||||
</DFProperties>
|
||||
</Node>
|
||||
</Node>
|
||||
</MgmtTree>
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user