diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 5300ed797d..f5000c123a 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -391,6 +391,11 @@ "redirect_document_id": true }, { +"source_path": "windows/configuration/stop-employees-from-using-the-windows-store.md", +"redirect_url": "/windows/configuration/stop-employees-from-using-microsoft-store", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/configure-devices-without-mdm.md", "redirect_url": "/windows/configuration/provisioning-packages/provisioning-packages", "redirect_document_id": false @@ -636,6 +641,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/app-inventory-management-windows-store-for-business.md", +"redirect_url": "/microsoft-store/app-inventory-management-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/application-development-for-windows-as-a-service.md", "redirect_url": "https://msdn.microsoft.com/windows/uwp/get-started/application-development-for-windows-as-a-service", "redirect_document_id": true @@ -696,6 +706,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/app-inventory-managemement-windows-store-for-business.md", +"redirect_url": "/microsoft-store/app-inventory-managemement-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/uev-accessibility.md", "redirect_url": "/windows/configuration/ue-v/uev-for-windows", "redirect_document_id": true @@ -1171,6 +1186,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/windows-store-for-business-overview.md", +"redirect_url": "/microsoft-store/microsoft-store-for-business-overview", +"redirect_document_id": true +}, +{ "source_path": "windows/whats-new/windows-update-for-business.md", "redirect_url": "/windows/whats-new/whats-new-windows-10-version-1507-and-1511", "redirect_document_id": false @@ -7071,6 +7091,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/acquire-apps-windows-store-for-business.md", +"redirect_url": "/microsoft-store/acquire-apps-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/add-unsigned-app-to-code-integrity-policy.md", "redirect_url": "/microsoft-store/add-unsigned-app-to-code-integrity-policy", "redirect_document_id": true @@ -7091,6 +7116,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/apps-in-windows-store-for-business.md", +"redirect_url": "/microsoft-store/apps-in-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/appv-about-appv.md", "redirect_url": "/windows/application-management/app-v/appv-about-appv", "redirect_document_id": true @@ -7601,6 +7631,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/configure-mdm-provider-windows-store-for-business.md", +"redirect_url": "/microsoft-store/configure-mdm-provider-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/connect-to-remote-aadj-pc.md", "redirect_url": "/windows/client-management/connect-to-remote-aadj-pc", "redirect_document_id": true @@ -7621,6 +7656,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md", +"redirect_url": "/microsoft-store/distribute-apps-to-your-employees-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/distribute-apps-with-management-tool.md", "redirect_url": "/microsoft-store/distribute-apps-with-management-tool", "redirect_document_id": true @@ -7656,6 +7696,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/manage-apps-windows-store-for-business-overview.md", +"redirect_url": "/microsoft-store/manage-apps-microsoft-store-for-business-overview", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/manage-corporate-devices.md", "redirect_url": "/windows/client-management/index", "redirect_document_id": true @@ -7666,6 +7711,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/manage-orders-windows-store-for-business.md", +"redirect_url": "/microsoft-store/manage-orders-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/manage-private-store-settings.md", "redirect_url": "/microsoft-store/manage-private-store-settings", "redirect_document_id": true @@ -7676,11 +7726,21 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/manage-settings-windows-store-for-business.md", +"redirect_url": "/microsoft-store/manage-settings-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/manage-users-and-groups-windows-store-for-business.md", "redirect_url": "/microsoft-store/manage-users-and-groups-windows-store-for-business", "redirect_document_id": true }, { +"source_path": "store-for-business/manage-users-and-groups-windows-store-for-business.md", +"redirect_url": "/microsoft-store/manage-users-and-groups-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/manage-windows-10-in-your-organization-modern-management.md", "redirect_url": "/windows/client-management/manage-windows-10-in-your-organization-modern-management", "redirect_document_id": true @@ -7701,6 +7761,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/prerequisites-windows-store-for-business.md", +"redirect_url": "/microsoft-store/prerequisites-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/reset-a-windows-10-mobile-device.md", "redirect_url": "/windows/client-management/reset-a-windows-10-mobile-device", "redirect_document_id": true @@ -7711,11 +7776,21 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/roles-and-permissions-windows-store-for-business.md", +"redirect_url": "/microsoft-store/roles-and-permissions-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/settings-reference-windows-store-for-business.md", "redirect_url": "/microsoft-store/settings-reference-windows-store-for-business", "redirect_document_id": true }, { +"source_path": "store-for-business/settings-reference-windows-store-for-business.md", +"redirect_url": "/microsoft-store/settings-reference-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/sign-code-integrity-policy-with-device-guard-signing.md", "redirect_url": "/microsoft-store/sign-code-integrity-policy-with-device-guard-signing", "redirect_document_id": true @@ -7726,16 +7801,31 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/sign-up-windows-store-for-business-overview.md", +"redirect_url": "/microsoft-store/sign-up-microsoft-store-for-business-overview", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/sign-up-windows-store-for-business.md", "redirect_url": "/microsoft-store/sign-up-windows-store-for-business", "redirect_document_id": true }, { +"source_path": "store-for-business/sign-up-windows-store-for-business.md", +"redirect_url": "/microsoft-store/sign-up-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/troubleshoot-windows-store-for-business.md", "redirect_url": "/microsoft-store/troubleshoot-windows-store-for-business", "redirect_document_id": true }, { +"source_path": "store-for-business/troubleshoot-windows-store-for-business.md", +"redirect_url": "/microsoft-store/troubleshoot-microsoft-store-for-business", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/uev-administering-uev-with-windows-powershell-and-wmi.md", "redirect_url": "/windows/configuration/ue-v/uev-administering-uev-with-windows-powershell-and-wmi", "redirect_document_id": true @@ -7876,6 +7966,11 @@ "redirect_document_id": true }, { +"source_path": "store-for-business/update-windows-store-for-business-account-settings.md", +"redirect_url": "/microsoft-store/update-microsoft-store-for-business-account-settings", +"redirect_document_id": true +}, +{ "source_path": "windows/manage/windows-10-mobile-and-mdm.md", "redirect_url": "/windows/client-management/windows-10-mobile-and-mdm", "redirect_document_id": true diff --git a/store-for-business/TOC.md b/store-for-business/TOC.md index e92eeae78c..ed89a40966 100644 --- a/store-for-business/TOC.md +++ b/store-for-business/TOC.md @@ -1,35 +1,35 @@ # [Microsoft Store for Business](index.md) ## [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) -## [Sign up and get started](sign-up-windows-store-for-business-overview.md) -###[Microsoft Store for Business and Microsoft Store for Education overview](windows-store-for-business-overview.md) -### [Prerequisites for Microsoft Store for Business and Education](prerequisites-windows-store-for-business.md) -### [Sign up for Microsoft Store for Business or Microsoft Store for Education](sign-up-windows-store-for-business.md) -### [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-windows-store-for-business.md) -### [Settings reference: Microsoft Store for Business and Education](settings-reference-windows-store-for-business.md) +## [Sign up and get started](sign-up-microsoft-store-for-business-overview.md) +###[Microsoft Store for Business and Microsoft Store for Education overview](microsoft-store-for-business-overview.md) +### [Prerequisites for Microsoft Store for Business and Education](prerequisites-microsoft-store-for-business.md) +### [Sign up for Microsoft Store for Business or Microsoft Store for Education](sign-up-microsoft-store-for-business.md) +### [Roles and permissions in the Microsoft Store for Business and Education](roles-and-permissions-microsoft-store-for-business.md) +### [Settings reference: Microsoft Store for Business and Education](settings-reference-microsoft-store-for-business.md) ## [Find and acquire apps](find-and-acquire-apps-overview.md) -### [Apps in the Microsoft Store for Business and Education](apps-in-windows-store-for-business.md) -### [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-windows-store-for-business.md) +### [Apps in the Microsoft Store for Business and Education](apps-in-microsoft-store-for-business.md) +### [Acquire apps in the Microsoft Store for Business and Education](acquire-apps-microsoft-store-for-business.md) ### [Working with line-of-business apps](working-with-line-of-business-apps.md) -## [Distribute apps to your employees from the Microsoft Store for Business and Education](distribute-apps-to-your-employees-windows-store-for-business.md) +## [Distribute apps to your employees from the Microsoft Store for Business and Education](distribute-apps-to-your-employees-microsoft-store-for-business.md) ### [Distribute apps using your private store](distribute-apps-from-your-private-store.md) ### [Assign apps to employees](assign-apps-to-employees.md) ### [Distribute apps with a management tool](distribute-apps-with-management-tool.md) ### [Distribute offline apps](distribute-offline-apps.md) -## [Manage apps and devices](manage-apps-windows-store-for-business-overview.md) -### [App inventory managemement for Microsoft Store for Business and Education](app-inventory-management-windows-store-for-business.md) -### [Manage app orders in Microsoft Store for Business and Education](manage-orders-windows-store-for-business.md) +## [Manage apps and devices](manage-apps-microsoft-store-for-business-overview.md) +### [App inventory managemement for Microsoft Store for Business and Education](app-inventory-management-microsoft-store-for-business.md) +### [Manage app orders in Microsoft Store for Business and Education](manage-orders-microsoft-store-for-business.md) ### [Manage access to private store](manage-access-to-private-store.md) ### [Manage private store settings](manage-private-store-settings.md) -### [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) +### [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md) ### [Manage Windows device deployment with Windows AutoPilot Deployment](add-profile-to-devices.md) ### [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) ## [Device Guard signing portal](device-guard-signing-portal.md) ### [Add unsigned app to code integrity policy](add-unsigned-app-to-code-integrity-policy.md) ### [Sign code integrity policy with Device Guard signing](sign-code-integrity-policy-with-device-guard-signing.md) -## [Manage settings in the Microsoft Store for Business and Education](manage-settings-windows-store-for-business.md) -### [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-windows-store-for-business-account-settings.md) -### [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-windows-store-for-business.md) -## [Troubleshoot Microsoft Store for Business](troubleshoot-windows-store-for-business.md) +## [Manage settings in the Microsoft Store for Business and Education](manage-settings-microsoft-store-for-business.md) +### [Update Microsoft Store for Business and Microsoft Store for Education account settings](update-microsoft-store-for-business-account-settings.md) +### [Manage user accounts in Microsoft Store for Business and Education](manage-users-and-groups-microsoft-store-for-business.md) +## [Troubleshoot Microsoft Store for Business](troubleshoot-microsoft-store-for-business.md) ## [Notifications in Microsoft Store for Business and Education](notifications-microsoft-store-business.md) ## [Change history for Microsoft Store for Business and Education](sfb-change-history.md) diff --git a/store-for-business/acquire-apps-windows-store-for-business.md b/store-for-business/acquire-apps-microsoft-store-for-business.md similarity index 100% rename from store-for-business/acquire-apps-windows-store-for-business.md rename to store-for-business/acquire-apps-microsoft-store-for-business.md diff --git a/store-for-business/app-inventory-management-windows-store-for-business.md b/store-for-business/app-inventory-management-microsoft-store-for-business.md similarity index 96% rename from store-for-business/app-inventory-management-windows-store-for-business.md rename to store-for-business/app-inventory-management-microsoft-store-for-business.md index 9eebbb170e..7344eb0a34 100644 --- a/store-for-business/app-inventory-management-windows-store-for-business.md +++ b/store-for-business/app-inventory-management-microsoft-store-for-business.md @@ -79,7 +79,7 @@ Once an app is in your private store, people in your org can install the app on **To make an app in Apps & software available in your private store** -1. Sign in to the [Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com). +1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://businessstore.microsoft.com). 2. Click **Manage**, and then choose **Apps & software**. 3. Use **Refine results** to search for online-licensed apps under **License type**. 4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**. @@ -89,7 +89,7 @@ Employees can claim apps that admins added to the private store by doing the fol **To claim an app from the private store** -1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Windows Store app. +1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Microsoft Store app. 2. Click the private store tab. 3. Click the app you want to install, and then click **Install**. @@ -112,7 +112,7 @@ The app will still be in your inventory, but your employees will not have access 3. Find an app, click the ellipses under **Action**, and then choose **Assign to people**. 4. Type the email address for the employee that you're assigning the app to, and click **Confirm**. -Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**. +Employees will receive an email with a link that will install the app on their device. Click the link to start the Microsoft Store app, and then click **Install**. Also, in the Microsoft Store app, they can find the app under **My Library**. ## Manage app licenses diff --git a/store-for-business/apps-in-windows-store-for-business.md b/store-for-business/apps-in-microsoft-store-for-business.md similarity index 83% rename from store-for-business/apps-in-windows-store-for-business.md rename to store-for-business/apps-in-microsoft-store-for-business.md index 116d6a33fa..7ea30ba8b9 100644 --- a/store-for-business/apps-in-windows-store-for-business.md +++ b/store-for-business/apps-in-microsoft-store-for-business.md @@ -40,7 +40,7 @@ Apps that you acquire from Microsoft Store only work on Windows 10-based device Some apps are free, and some apps charge a price. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time. -Some apps which are available to consumers in the Windows Store might not be available to organizations in Microsoft Store for Business and Education. App developers can opt-out their apps, and they also need to meet eligibility requirements for Microsoft Store for Business and Education. For more information, see [Organizational licensing options](https://msdn.microsoft.com/windows/uwp/publish/organizational-licensing). +Some apps which are available to consumers in Microsoft Store might not be available to organizations in Microsoft Store for Business and Education. App developers can opt-out their apps, and they also need to meet eligibility requirements for Microsoft Store for Business and Education. For more information, see [Organizational licensing options](https://msdn.microsoft.com/windows/uwp/publish/organizational-licensing). Line-of-business (LOB) apps are also supported using Microsoft Store. Admins can invite IT devs and ISVs to be LOB publishers. Apps developed by your LOB publishers that are submitted to Microsoft Store are only available to your organization. Once an administrator accepts an app submitted by one of their LOB publishers, the app can be distributed just like any other app. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md). @@ -55,7 +55,7 @@ If an employee makes an in-app purchase, they'll make it with their personal Mic Microsoft Store supports two options to license apps: online and offline. ### Online licensing -Online licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require customers and devices to connect to Microsoft Store service to acquire an app and its license. License management is enforced based on the user’s Azure AD identity and maintained by Microsoft Store as well as the management tool. By default app updates are handled by Windows Update. +Online licensing is the default licensing model and is similar to the model used by Microsoft Store. Online licensed apps require customers and devices to connect to Microsoft Store service to acquire an app and its license. License management is enforced based on the user’s Azure AD identity and maintained by Microsoft Store as well as the management tool. By default app updates are handled by Windows Update. Distribution options for online-licensed apps include the ability to: diff --git a/store-for-business/assign-apps-to-employees.md b/store-for-business/assign-apps-to-employees.md index ff20b5bbab..c15aa18d1c 100644 --- a/store-for-business/assign-apps-to-employees.md +++ b/store-for-business/assign-apps-to-employees.md @@ -29,7 +29,7 @@ Admins, Purchasers, and Basic Purchasers can assign online-licensed apps to empl Click the app, and then click **Assign User**. 4. Type the email address for the person you're assigning the app to, and click **Assign**. -Employees will receive an email with a link that will install the app on their device. Click the link to start the Windows Store app, and then click **Install**. Also, in the Windows Store app, they can find the app under **My Library**. +Employees will receive an email with a link that will install the app on their device. Click the link to start Microsoft Store app, and then click **Install**. Also, in Microsoft Store app, they can find the app under **My Library**.   diff --git a/store-for-business/configure-mdm-provider-windows-store-for-business.md b/store-for-business/configure-mdm-provider-microsoft-store-for-business.md similarity index 100% rename from store-for-business/configure-mdm-provider-windows-store-for-business.md rename to store-for-business/configure-mdm-provider-microsoft-store-for-business.md diff --git a/store-for-business/distribute-apps-from-your-private-store.md b/store-for-business/distribute-apps-from-your-private-store.md index 73c7ff9a4c..20b8f33ed2 100644 --- a/store-for-business/distribute-apps-from-your-private-store.md +++ b/store-for-business/distribute-apps-from-your-private-store.md @@ -18,7 +18,7 @@ ms.localizationpriority: high - Windows 10 - Windows 10 Mobile -The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in the Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. +The private store is a feature in Microsoft Store for Business and Education that organizations receive during the signup process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Micrsoft Store app, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. You can make an app available in your private store when you acquire the app, or you can do it later from your inventory. Once the app is in your private store, employees can claim and install the app. @@ -50,13 +50,13 @@ Employees can claim apps that admins added to the private store by doing the fol **To claim an app from the private store** -1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start the Windows Store app. +1. Sign in to your computer with your Azure Active Directory (AD) credentials, and start Microsoft Store app. 2. Click the **private store** tab. 3. Click the app you want to install, and then click **Install**. ## Related topics - [Manage access to private store](manage-access-to-private-store.md) -- [Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store) +- [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-the-windows-store)   diff --git a/store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md b/store-for-business/distribute-apps-to-your-employees-microsoft-store-for-business.md similarity index 100% rename from store-for-business/distribute-apps-to-your-employees-windows-store-for-business.md rename to store-for-business/distribute-apps-to-your-employees-microsoft-store-for-business.md diff --git a/store-for-business/distribute-apps-with-management-tool.md b/store-for-business/distribute-apps-with-management-tool.md index 7c5ff2adbd..756f2f2087 100644 --- a/store-for-business/distribute-apps-with-management-tool.md +++ b/store-for-business/distribute-apps-with-management-tool.md @@ -22,29 +22,24 @@ You can configure a mobile device management (MDM) tool to synchronize your Micr Your MDM tool needs to be installed and configured in Azure AD, in the same Azure AD directory used with Microsoft Store. -In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Microsoft Store for Business or Microsoft Store for Education. This allows the MDM tool to call Microsoft Store management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-windows-store-for-business.md) and [Manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune). +In Azure AD management portal, find the MDM application, and then add it to your directory. Once the MDM has been configured in Azure AD, you can authorize the tool to work with the Microsoft Store for Business or Microsoft Store for Education. This allows the MDM tool to call Microsoft Store management tool services. For more information, see [Configure MDM provider](configure-mdm-provider-microsoft-store-for-business.md) and [Manage apps you purchased from the Microsoft Store for Business with Microsoft Intune](https://docs.microsoft.com/intune/deploy-use/manage-apps-you-purchased-from-the-windows-store-for-business-with-microsoft-intune). Microsoft Store services provide: - Services for third-party MDM tools. - - Synchronize app purchases and updates. - - Synchronize metadata. For offline-licensed apps, also synchronize offline app package and offline licenses. - - The ability to download offline-licensed apps from Store for Business. MDM tool requirements: - Must be an Azure Active Directory (AD) application to authenticate against the Store for Business services. - - Must be configured in Azure AD, and Microsoft Store. - - Azure AD identity is required to authorize Microsoft Store services. ## Distribute offline-licensed apps -If your vendor doesn’t support the ability to synchronize applications from the management tool services, or can't connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Microsoft Store for Business.](apps-in-windows-store-for-business.md#licensing-model) +If your vendor doesn’t support the ability to synchronize applications from the management tool services, or can't connect to the management tool services, your vendor may support the ability to deploy offline licensed applications by downloading the application and license from the store and then deploying the app through your MDM. For more information on online and offline licensing with Store for Business, see [Apps in the Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/apps-in-windows-store-for-business#a-href-idlicensing-modelalicensing-model-online-and-offline-licenses). This diagram shows how you can use a management tool to distribute offline-licensed app to employees in your organization. Once synchronized from Store for Business, management tools can use the Windows Management framework to distribute applications to devices. @@ -58,5 +53,5 @@ This diagram shows how you can use a management tool to distribute an online-lic ## Related topics -[Configure MDM Provider](configure-mdm-provider-windows-store-for-business.md) +[Configure MDM Provider](configure-mdm-provider-microsoft-store-for-business.md) [Manage apps you purchased from the Microsoft Store for Business and Education with Microsoft Intune](https://technet.microsoft.com/library/mt676514.aspx) \ No newline at end of file diff --git a/store-for-business/distribute-offline-apps.md b/store-for-business/distribute-offline-apps.md index 1d3c0b70b4..c28d9c1fb1 100644 --- a/store-for-business/distribute-offline-apps.md +++ b/store-for-business/distribute-offline-apps.md @@ -24,7 +24,7 @@ Offline licensing is a new licensing option for Windows 10 with Microsoft Store Offline-licensed apps offer an alternative to online apps, and provide additional deployment options. Some reasons to use offline-licensed apps: -- **You don't have access to Windows Store services** - If your employees don't have access to the internet and Microsoft Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps. +- **You don't have access to Microsoft Store services** - If your employees don't have access to the internet and Microsoft Store services, downloading offline-licensed apps and deploying them with imaging is an alternative to online-licensed apps. - **You use imaging to manage devices in your organization** - Offline-licensed apps can be added to images and deployed with Deployment Image Servicing and Management (DISM), or Windows Imaging and Configuration Designer (ICD). diff --git a/store-for-business/manage-access-to-private-store.md b/store-for-business/manage-access-to-private-store.md index e6f9bc8157..07ee5732c9 100644 --- a/store-for-business/manage-access-to-private-store.md +++ b/store-for-business/manage-access-to-private-store.md @@ -19,13 +19,13 @@ author: TrudyHa You can manage access to your private store in Microsoft Store for Business and Microsoft Store for Education. -You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in Windows Store. Using the private store with the Microsoft Store for Business and Education, admins can curate the set of apps that are available. +You can control the set of apps that are available to your employees and students, and not show the full set of applications that are in Microsoft Store. Using the private store with the Microsoft Store for Business and Education, admins can curate the set of apps that are available. -The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Windows Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this: +The private store is a feature in Store for Business that organizations receive during the sign up process. When admins add apps to the private store, all employees in the organization can view and download the apps. Your private store is available as a tab in Microsoft Store, and is usually named for your company or organization. Only apps with online licenses can be added to the private store. Your private store looks something like this: - +![Image showing the Microsoft Store app, with a private store tab highlighted.](images/wsfb-wsappprivatestore.png) -Organizations can use either an MDM policy, or Group Policy to show only their private store in Windows Store. +Organizations can use either an MDM policy, or Group Policy to show only their private store in Microsoft Store. ## Show private store only using MDM policy @@ -41,36 +41,27 @@ For more information on configuring an MDM provider, see [Configure an MDM provi ## Show private store only using Group Policy -If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Windows Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store. +If you're using Microsoft Store and you want employees to only see apps you're managing in your private store, you can use Group Policy to show only the private store. Microsoft Store app will still be available, but employees can't view or purchase apps. Employees can view and install apps that the admin has added to your organization's private store. -**Only display the private store within Windows Store app** group policy is supported on the following Windows 10 editions: +**Only display the private store within Microsoft Store app** group policy is supported on the following Windows 10 editions: - Enterprise - Education -**To show private store only in Windows Store app** +**To show private store only in Microsoft Store app** 1. Type **gpedit** in the search bar, and then select **Edit group policy (Control panel)** to find and start Group Policy Editor. 2. In the console tree of the snap-in, go to **User Configuration** or **Computer Configuration** > **Administrative Templates** > **Windows Components**, and then click **Store**. -3. Right-click **Only display the private store within Windows Store app** in the right pane, and click **Edit**. +3. Right-click **Only display the private store within Microsoft Store app** in the right pane, and click **Edit**. - This opens the **Only display the private store within the Windows Store app** policy settings. + This opens the **Only display the private store within the Microsoft Store app** policy settings. -4. On the **Only display the private store within the Windows Store app** setting page, click **Enabled**, and then click **OK**. +4. On the **Only display the private store within the Microsoft Store app** setting page, click **Enabled**, and then click **OK**. -You can also prevent employees from using Windows Store. For more information, see [Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store). +You can also prevent employees from using Microsoft Store. For more information, see [Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-the-windows-store). ## Related topics [Distribute apps using your private store](distribute-apps-from-your-private-store.md) -[Configure access to Windows Store](/windows/configuration/stop-employees-from-using-the-windows-store) - -  - -  - - - - - +[Configure access to Microsoft Store](/windows/configuration/stop-employees-from-using-the-windows-store) \ No newline at end of file diff --git a/store-for-business/manage-apps-windows-store-for-business-overview.md b/store-for-business/manage-apps-microsoft-store-for-business-overview.md similarity index 100% rename from store-for-business/manage-apps-windows-store-for-business-overview.md rename to store-for-business/manage-apps-microsoft-store-for-business-overview.md diff --git a/store-for-business/manage-orders-windows-store-for-business.md b/store-for-business/manage-orders-microsoft-store-for-business.md similarity index 100% rename from store-for-business/manage-orders-windows-store-for-business.md rename to store-for-business/manage-orders-microsoft-store-for-business.md diff --git a/store-for-business/manage-private-store-settings.md b/store-for-business/manage-private-store-settings.md index af833aefb3..8ad01a972f 100644 --- a/store-for-business/manage-private-store-settings.md +++ b/store-for-business/manage-private-store-settings.md @@ -19,9 +19,9 @@ ms.localizationpriority: high The private store is a feature in Microsoft Store for Business and Education that organizations receive during the sign up process. When admins add apps to the private store, all people in the organization can view and download the apps. Only online-licensed apps can be distributed from your private store. -The name of your private store is shown on a tab in Windows Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com). +The name of your private store is shown on a tab in Microsoft Store app, or on [Microsoft Store for Business](https://businessstore.microsoft.com), or [Microsoft Store for Education](https://educationstore.microsoft.com). -![Image showing Windows Store app with private store tab highlighted.](images/wsfb-wsappprivatestore.png) +![Image showing Microsoft Store app with private store tab highlighted.](images/wsfb-wsappprivatestore.png) You can change the name of your private store in Microsoft Store. diff --git a/store-for-business/manage-settings-windows-store-for-business.md b/store-for-business/manage-settings-microsoft-store-for-business.md similarity index 100% rename from store-for-business/manage-settings-windows-store-for-business.md rename to store-for-business/manage-settings-microsoft-store-for-business.md diff --git a/store-for-business/manage-users-and-groups-windows-store-for-business.md b/store-for-business/manage-users-and-groups-microsoft-store-for-business.md similarity index 100% rename from store-for-business/manage-users-and-groups-windows-store-for-business.md rename to store-for-business/manage-users-and-groups-microsoft-store-for-business.md diff --git a/store-for-business/windows-store-for-business-overview.md b/store-for-business/microsoft-store-for-business-overview.md similarity index 65% rename from store-for-business/windows-store-for-business-overview.md rename to store-for-business/microsoft-store-for-business-overview.md index 0ec624a13e..3e9013604a 100644 --- a/store-for-business/windows-store-for-business-overview.md +++ b/store-for-business/microsoft-store-for-business-overview.md @@ -17,47 +17,45 @@ ms.localizationpriority: high - Windows 10 - Windows 10 Mobile -Designed for organizations, Microsoft Store for Business and Microsoft Store for Education gives IT decision makers and administrators in businesses or schools a flexible way to find, acquire, manage, and distribute free and paid apps in select markets to Windows 10 devices in volume. IT administrators can manage Windows Store apps and private line-of-business apps in one inventory, plus assign and re-use licenses as needed. You can choose the best distribution method for your organization: directly assign apps to individuals and teams, publish apps to private pages in Windows Store, or connect with management solutions for more options. +Designed for organizations, Microsoft Store for Business and Microsoft Store for Education give IT decision makers and administrators in businesses or schools a flexible way to find, acquire, manage, and distribute free and paid apps in select markets to Windows 10 devices in volume. IT administrators can manage Microsoft Store apps and private line-of-business apps in one inventory, plus assign and re-use licenses as needed. You can choose the best distribution method for your organization: directly assign apps to individuals and teams, publish apps to private pages in Microsoft Store, or connect with management solutions for more options. ## Features -Organizations of any size can benefit from using the Microsoft Store: +Organizations or schools of any size can benefit from using Microsoft Store for Business or Microsoft Store for Education: -- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts or Office 365 accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate the Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts. -- **Bulk app acquisition** - Acquire apps in volume from the Store for Business. +- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts or Office 365 accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Business are available to you, or you can integrate Microsoft Store for Business with management tools, for greater control over access to apps and app updates. You can use existing work or school accounts. +- **Bulk app acquisition** - Acquire apps in volume from Microsoft Store for Business. - **Centralized management** – Microsoft Store provides centralized management for inventory, billing, permissions, and order history. You can use Microsoft Store to view, manage and distribute items purchased from: - **Microsoft Store for Business** – Apps and subscriptions - **Microsoft Store for Education** – Apps and subscriptions - **Office 365** – Subscriptions - **Volume licensing** - Apps purchased with volume licensing -- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device. Your private store is available from Windows Store app, or with a browser on the Web. People in your organization can download apps from the private store on Windows 10 devices. +- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device. Your private store is available from Microsoft Store on Windows 10, or with a browser on the Web. People in your organization can download apps from your organization's private store on Windows 10 devices. - **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices: - - Distribute through Store for Business services. You can assign apps to individual employees, or make apps available to all employees in your private store. + - Distribute through Microsoft Store services. You can assign apps to individual employees, or make apps available to all employees in your private store. - Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images. - Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images. - **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options. - **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps. - **Up-to-date apps** - Microsoft Store manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees. -- **Office app launcher** Office apps while working with Store for Business. -- **Find a partner** – Microsoft Store allows businesses to search and find a Microsoft Partner who can assist you with Microsoft solutions for your business. - +- **Office app launcher** Office apps while working with Microsoft Store for Business. +- **Find a partner** – Search and find a Microsoft Partner who can assist you with Microsoft solutions for your business. ## Prerequisites -You'll need this software to work with the Store for Business. +You'll need this software to work with Store for Business and Education. ### Required -- Admins working with Microsoft Store for Business and Education need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, or current versions of Microsoft Edge, Chrome or Firefox. JavaScript must be supported and enabled. - -- Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device. +- Admins working with Store for Business and Education need a browser compatible with Microsoft Store running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, or current versions of Microsoft Edge, Chrome or Firefox. JavaScript must be supported and enabled. +- Employees using apps from Store for Business and Education need at least Windows 10, version 1511 running on a PC or mobile device. Microsoft Azure Active Directory (AD) accounts for your employees: -- Admins need Azure AD accounts to sign up for the Store for Business, and then to sign in, get apps, distribute apps, and manage app licenses. +- Admins need Azure AD accounts to sign up for Store for Business and Education, and then to sign in, get apps, distribute apps, and manage app licenses. You can sign up for Azure AD accounts as part of signing up for Store for Business and Education. - Employees need Azure AD account when they access Store for Business content from Windows devices. - If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account - For offline-licensed apps, Azure AD accounts are not required for employees. -- Admins can add or remove user accounts in the Office 365 admin center, even if you don’t have an Office 365 subscription. You can access the Office 365 admin portal directly from the Microsoft Store for Business and Education. +- Admins can add or remove user accounts in the Office 365 admin center, even if you don’t have an Office 365 subscription. You can access the Office 365 admin portal directly from the Store for Business and Education. For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611). @@ -66,20 +64,19 @@ For more information on Azure AD, see [About Office 365 and Azure Active Directo While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. A couple of things to note about management tools: - Need to integrate with Windows 10 management framework and Azure AD. - - Need to sync with the Store for Business inventory to distribute apps. -## How does the Store for Business work? +## How does the Store for Business and Education work? ## Sign up! -The first step for getting your organization started with the Store for Business is signing up. Sign up using an existing account (the same one you use for Office 365, Dynamics 365, Intune, Azure, etc.) or we’ll quickly create an account for you. You must be a Global Administrator for your organization. +The first step for getting your organization started with Store for Business and Education is signing up. Sign up using an existing account (the same one you use for Office 365, Dynamics 365, Intune, Azure, etc.) or we’ll quickly create an account for you. You must be a Global Administrator for your organization. -For more information, see [Sign up for the Store for Business](sign-up-windows-store-for-business.md). +For more information, see [Sign up for Store for Business and Education](sign-up-windows-store-for-business.md). ## Set up -After your admin signs up for the Store for Business, they can assign roles to other employees in your company. The admin needs Azure AD User Admin permissions to assign Microsoft Store for Business and Education roles. These are the roles and their permissions. +After your admin signs up for the Store for Business and Education, they can assign roles to other employees in your company or school. The admin needs Azure AD User Admin permissions to assign Microsoft Store for Business and Education roles. These are the roles and their permissions. | Permission | Account settings | Acquire apps | Distribute apps | Device Guard signing | | ---------- | ---------------- | ------------ | --------------- | -------------------- | @@ -89,51 +86,49 @@ After your admin signs up for the Store for Business, they can assign roles to o | Basic purchaser | | X | X | | > [!NOTE] -> Currently, the Basic purchaser role is only available for schools using Microsoft Store for Education. For more information, see +> Currently, the Basic purchaser role is only available for schools using Microsoft Store for Education. For more information, see [Microsoft Store for Education permissions](https://docs.microsoft.com/education/windows/education-scenarios-store-for-business?toc=/microsoft-store/education/toc.json#manage-domain-settings). In some cases, admins will need to add Azure Active Directory (AD) accounts for their employees. For more information, see [Manage user accounts and groups](manage-users-and-groups-windows-store-for-business.md). -Also, if your organization plans to use a management tool, you’ll need to configure your management tool to sync with the Store for Business. +Also, if your organization plans to use a management tool, you’ll need to configure your management tool to sync with Store for Business and Education. ## Get apps and content -Once signed in to the Microsoft Store, you can browse and search for all products in the Store for Business catalog. Some apps are free, and some apps charge a price. We're continuing to add more paid apps to the Store for Business. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card, and some items can be paid for with an invoice. We'll be adding more payment options over time. +Once signed in to the Microsoft Store, you can browse and search for all products in the Store for Business and Education catalog. Some apps are free,and some apps charge a price. We're continuing to add more paid apps to the Store for Business and Education. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card, and some items can be paid for with an invoice. We'll be adding more payment options over time. -**App types** -- These app types are supported in the Microsoft Store for Business: +**App types** - These app types are supported in the Store for Business and Education: - Universal Windows Platform apps - Universal Windows apps, by device: Phone, Surface Hub, IOT devices, HoloLens -Apps purchased from the Store for Business only work on Windows 10 devices. +Apps purchased from the Store for Business and Education only work on Windows 10 devices. -Line-of-business (LOB) apps are also supported via the Business store. You can invite IT developers or ISVs to be LOB publishers for your organization. This allows them to submit apps via the developer center that are only available to your organization. These apps can be distributed using the distribution methods discussed in this topic. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md). +Line-of-business (LOB) apps are also supported through Microsoft Store. You can invite IT developers or ISVs to be LOB publishers for your organization. This allows them to submit apps via the developer center that are only available to your organization through Store for Business and Education. These apps can be distributed using the distribution methods discussed in this topic. For more information, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md). **App licensing model** -The Business store supports two options to license apps: online and offline. **Online** licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require users and devices to connect to the Store for Business service to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. + Store for Business and Education supports two license options for apps: online and offline. **Online** licensing is the default licensing model and is similar to the licensing model for Microsoft Store. Online licensed apps require users and devices to connect to Microsoft Store services to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt in their apps for offline licensing when they submit them to the developer center. -For more information, see [Apps in the Store for Business](apps-in-windows-store-for-business.md#licensing-model). +For more information, see [Apps in Microsoft Store for Business](apps-in-windows-store-for-business.md#licensing-model). ## Distribute apps and content -App distribution is handled through two channels, either through the Store for Business, or using a management tool. You can use either or both distribution methods in your organization. +App distribution is handled through two channels, either through the Microsoft Store for Business, or using a management tool. You can use either, or both distribution methods in your organization. -**Using the Store for Business** – Distribution options for the Store for Business: - -- Email link – After purchasing an app, admins can send employees a link in an email message. Employees can click the link to install the app. -- Curate private store for all employees – A private store can include content you’ve purchased from the Store, and your line-of-business apps that you’ve submitted to the Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed. +**Distribute with Store for Business and Education**: +- Email link – After purchasing an app, Admins can send employees a link in an email message. Employees can click the link to install the app. +- Curate private store for all employees – A private store can include content you’ve purchased from Microsoft Store for Business, and your line-of-business apps that you’ve submitted to Microsoft Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed. - To use the options above users must be signed in with an Azure AD account on a Windows 10 device. Licenses are assigned as individuals install apps. -**Using a management tool** – For larger organizations that might want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options: - +**Using a management tool** – For larger organizations that want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options: - Scoped content distribution – Ability to scope content distribution to specific groups of employees. - Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees. Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata, management tools can enable portals or apps as a destination for employees to acquire apps. -For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). +For more information, see [Distribute apps to your employees from Microsoft Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md). -## Manage Store for Business settings and content +## Manage Microsoft Store for Business settings and content Once you are signed up with the Business store and have purchased apps, Admins can manage Store for Business settings and inventory. @@ -155,7 +150,7 @@ For more information, see [Manage settings in the Store for Business](manage-set ## Supported markets -Microsoft Store for Business and Education is currently available in these markets. +Store for Business and Education is currently available in these markets. ### Support for free and paid products @@ -377,24 +372,24 @@ This table summarize what customers can purchase, depending on which Microsoft S ## Privacy notice -Microsoft Store for Business services get names and email addresses of people in your organization from Azure Active Directory. This information is needed for these admin functions: +Store for Business and Education services get names and email addresses of people in your organization from Azure Active Directory. This information is needed for these admin functions: - Granting and managing permissions - Managing app licenses - Distributing apps to people (names appear in a list that admins can select from) -Microsoft Store for Business and Education does not save names, or email addresses. +Store for Business and Education does not save names, or email addresses. -Your use of Microsoft Store for Business and Education is also governed by the [Microsoft Store for Business and Education Services Agreement](https://businessstore.microsoft.com/servicesagreement). +Your use of Store for Business and Education is also governed by the [Microsoft Store for Business and Education Services Agreement](https://businessstore.microsoft.com/servicesagreement). -Information sent to Microsoft Store for Business and Education is subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement/). +Information sent to Store for Business and Education is subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement/). -## ISVs and the Store for Business +## ISVs and Store for Business and Education -Developers in your organization, or ISVs can create content specific to your organization. In the Store for Business, we call these line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this: +Developers in your organization, or ISVs can create content specific to your organization. In Store for Business and Education, we call these line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this: - Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs. - LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization. -- Admin adds the app to Store for Business inventory. +- Admin adds the app to Microsoft Store for Business or Microsoft Store for Education inventory. -Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in the Store for Business. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in the Store for Business will work only on Windows 10. +Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in Store for Business and Education. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in Store for Business and Education will work only on Windows 10. For more information on line-of-business apps, see [Working with Line-of-Business apps](working-with-line-of-business-apps.md). diff --git a/store-for-business/prerequisites-windows-store-for-business.md b/store-for-business/prerequisites-microsoft-store-for-business.md similarity index 92% rename from store-for-business/prerequisites-windows-store-for-business.md rename to store-for-business/prerequisites-microsoft-store-for-business.md index a07a501b9e..681d4b4a36 100644 --- a/store-for-business/prerequisites-windows-store-for-business.md +++ b/store-for-business/prerequisites-microsoft-store-for-business.md @@ -21,7 +21,6 @@ There are a few prerequisites for using Microsoft Store for Business or Microsof ## Prerequisites - You'll need this software to work with Microsoft Store for Business or Education. ### Required @@ -45,7 +44,7 @@ While not required, you can use a management tool to distribute and manage apps. ## Proxy configuration -If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Windows Store app and Microsoft Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy sever to block traffic, your configuration needs to allow these URLs: +If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy sever to block traffic, your configuration needs to allow these URLs: - login.live.com - login.windows.net diff --git a/store-for-business/roles-and-permissions-windows-store-for-business.md b/store-for-business/roles-and-permissions-microsoft-store-for-business.md similarity index 100% rename from store-for-business/roles-and-permissions-windows-store-for-business.md rename to store-for-business/roles-and-permissions-microsoft-store-for-business.md diff --git a/store-for-business/settings-reference-windows-store-for-business.md b/store-for-business/settings-reference-microsoft-store-for-business.md similarity index 100% rename from store-for-business/settings-reference-windows-store-for-business.md rename to store-for-business/settings-reference-microsoft-store-for-business.md diff --git a/store-for-business/sfb-change-history.md b/store-for-business/sfb-change-history.md index ed0904b3ee..a8f511215c 100644 --- a/store-for-business/sfb-change-history.md +++ b/store-for-business/sfb-change-history.md @@ -18,12 +18,20 @@ ms.localizationpriority: high - Windows 10 - Windows 10 Mobile +## September 2017 + +| New or changed topic | Description | +| --- | --- | +| [What's New in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md) | New | +| [App requests](https://docs.microsoft.com/microsoft-store/acquire-apps-windows-store-for-business#request-apps) | New | +| [Settings reference: Microsoft Store for Business and Education](manage-settings-microsoft-store-for-business.md)
and
[Update Microsoft Store for Business and Microsoft Store for Education account settings](update-windows-store-for-business-account-settings.md) | Updates for UI changes in **Settings**. | + ## July 2017 | New or changed topic | Description | | --- | --- | | [Microsoft Store for Business and Education PowerShell module - preview](microsoft-store-for-business-education-powershell-module.md) | New | - +| [Microsoft Store for Business and Education overview - supported markets](https://docs.microsoft.com/en-us/microsoft-store/windows-store-for-business-overview#supported-markets) | Updates for added market support. | ## June 2017 | New or changed topic | Description | diff --git a/store-for-business/sign-up-windows-store-for-business-overview.md b/store-for-business/sign-up-microsoft-store-for-business-overview.md similarity index 100% rename from store-for-business/sign-up-windows-store-for-business-overview.md rename to store-for-business/sign-up-microsoft-store-for-business-overview.md diff --git a/store-for-business/sign-up-windows-store-for-business.md b/store-for-business/sign-up-microsoft-store-for-business.md similarity index 100% rename from store-for-business/sign-up-windows-store-for-business.md rename to store-for-business/sign-up-microsoft-store-for-business.md diff --git a/store-for-business/troubleshoot-windows-store-for-business.md b/store-for-business/troubleshoot-microsoft-store-for-business.md similarity index 62% rename from store-for-business/troubleshoot-windows-store-for-business.md rename to store-for-business/troubleshoot-microsoft-store-for-business.md index 2443391b42..9e55e0279f 100644 --- a/store-for-business/troubleshoot-windows-store-for-business.md +++ b/store-for-business/troubleshoot-microsoft-store-for-business.md @@ -20,13 +20,13 @@ ms.localizationpriority: high Troubleshooting topics for Microsoft Store for Business. ## Can't find apps in private store -The private store for your organization is a page in the Windows Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check: -- **No apps in the private store** - The private store page is only available in the Windows Store app if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on the **Inventory** page. If the status is **Add in progress**, wait and check back. +The private store for your organization is a page in Microsoft Store app that contains apps that are private to your organization. After your organization acquires an app, your Store for Business admin can add it to your organization's private store. Your private store usually has a name that is close to the name of your organization or company. If you can't see your private store, there are a couple of things to check: +- **No apps in the private store** - The private store page is only available in Microsoft Store on Windows 10 if there are apps added to your private store. You won't see your private store page with no apps listed on it. If your Microsoft Store for Business admin has added an app to the private store, and the private store page is still not available, they can check the private store status for the app on **Product & services - Apps**. If the status under **Private store** is **Add in progress**, wait and check back. - **Signed in with the wrong account** - If you have multiple accounts that you use in your organization, you might be signed in with the wrong account. Or, you might not be signed in. Use this procedure to sign in with your organization account. -**To sign in with organization account in Windows Store app** +**To sign in with organization account in Microsoft Store app** -1. Click the people icon in Windows Store app, and click **Sign in**. +1. Click the people icon in Microsoft Store app, and click **Sign in**. ![Sign in to Store app with a different account](images/wsfb-wsappsignin.png) diff --git a/store-for-business/update-windows-store-for-business-account-settings.md b/store-for-business/update-microsoft-store-for-business-account-settings.md similarity index 82% rename from store-for-business/update-windows-store-for-business-account-settings.md rename to store-for-business/update-microsoft-store-for-business-account-settings.md index 951212afbd..90161eda1e 100644 --- a/store-for-business/update-windows-store-for-business-account-settings.md +++ b/store-for-business/update-microsoft-store-for-business-account-settings.md @@ -28,10 +28,10 @@ Before purchasing apps that have a fee, you need to add or update your organizat We use the Business address to calculate sales tax. If your organization's address has already been entered for other commercial purchases through Microsoft Store, or through other online purchases such as Office 365 or Azure subscriptions, then we’ll use the same address in Microsoft Store for Business and Microsoft Store for Education. If we don’t have an address, we’ll ask you to enter it during your first purchase. -We need an email address in case we need to contact you about your Microsoft Store for Business and Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store. +We need an email address in case we need to contact you about your Microsoft Store for Business and for Education account. This email account should reach the admin for your organization’s Office 365 or Azure AD tenant that is used with Microsoft Store. **To update Organization information** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com) +1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com) 2. Click **Manage**, click **Billing**, **Account profile**, and then click **Edit**. ## Organization tax information @@ -86,7 +86,7 @@ These countries can provide their VAT number or local equivalent in **Payments & If you qualify for tax-exempt status in your market, start a service request to establish tax exempt status for your organization. **To start a service request** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com). +1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com). 2. Click **Manage**, click **Support**, and then under **Store settings & configuration** click **Create technical support ticket**. You’ll need this documentation: @@ -119,14 +119,14 @@ You can purchase apps from Microsoft Store for Business using your credit card. 5. Japan Commercial Bureau (JCB) > [!NOTE] -> Not all cards available in all countries. When you add a payment option, Store for Business shows which cards are available in your region. +> Not all cards available in all countries. When you add a payment option, Microsoft Store for Business shows which cards are available in your region. **To add a new payment option** 1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). -2. Click **Manage**, click **Billing**, and then click **Payments methods**. +2. Click **Manage**, click **Billing**, and then click **Payments methods**. 3. Click **Add a payment options**, and then select the type of credit card that you want to add. -4. Add information to any required fields, and then click **Next**. +4. Add information to required fields, and then click **Next**. Once you click Next, the information you provided will be validated with a test authorization transaction and, if validated, the payment option will be added to your list of available payment options. Otherwise, you will be prompted for additional information or notified if there are any problems. @@ -135,7 +135,7 @@ Once you click Next, the information you provided will be validated with a tes **To update a payment option** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com). 2. Click **Manage**, click **Billing**, and then click **Payments methods**. 3. Select the payment option that you want to update, and then click **Update**. 4. Enter any updated information in the appropriate fields, and then click **Next**. @@ -146,17 +146,17 @@ Once you click **Next**, the information you provided will be validated with a ## Offline licensing -Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. For more information on the Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model). +Offline licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center. Only apps that are opted in to offline licensing will show that they are available for offline licensing in Microsoft Store for Business. This model means organizations can deploy apps when users or devices do not have connectivity to the Store. For more information on Microsoft Store for Business licensing model, see [licensing model](https://technet.microsoft.com/itpro/windows/manage/apps-in-windows-store-for-business#licensing-model). Admins can decide whether or not offline licenses are shown for apps in Microsoft Store. **To set offline license visibility** -1. Sign in to the [Store for Business](http://businessstore.microsoft.com) or [Store for Education](https://educationstore.microsoft.com). +1. Sign in to the [Microsoft Store for Business](http://businessstore.microsoft.com) or [Microsoft Store for Education](https://educationstore.microsoft.com). 2. Click **Manage**, and then click **Settings - Shop**. 3. Under **Shopping experience** turn on or turn off **Show offline apps**,to show availability for offline-licensed apps. You have the following distribution options for offline-licensed apps: - Include the app in a provisioning package, and then use it as part of imaging a device. - Distribute the app through a management tool. -For more information, see [Distribute apps to your employees from the Store for Business](distribute-apps-with-management-tool.md). \ No newline at end of file +For more information, see [Distribute apps to your employees from Microsoft Store for Business](distribute-apps-with-management-tool.md). \ No newline at end of file diff --git a/store-for-business/working-with-line-of-business-apps.md b/store-for-business/working-with-line-of-business-apps.md index 87dc16ae0e..af7a2e13b1 100644 --- a/store-for-business/working-with-line-of-business-apps.md +++ b/store-for-business/working-with-line-of-business-apps.md @@ -19,29 +19,23 @@ ms.localizationpriority: high Your company or school can make line-of-business (LOB) applications available through Microsoft Store for Business or Microsoft Store for Education. These apps are custom to your school or organization – they might be internal apps, or apps specific to your school, business, or industry. -Developers within your organization, or ISVs that you invite, can become LOB publishers and submit apps to Microsoft Store for your company or school. Once an LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in the Store, and then can be managed or deployed using the same process as any other app that has been acquired through the Store. +Developers within your organization, or ISVs that you invite, can become LOB publishers and submit apps to Microsoft Store for your company or school. Once an LOB publisher submits an app for your company, the app is only available to your company. LOB publishers submit apps through the Windows Dev Center using the same process as all apps that are in Microsoft Store, and then can be managed or deployed using the same process as any other app that has been acquired through Microsoft Store. -One advantage of making apps available through Microsoft Store is that the app has been signed by the Store, and uses the standard Store policies. For organizations that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](https://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported in Windows 10. +One advantage of making apps available through Microsoft Store for Business is that the app has been signed by Microsoft Store, and uses the standard Microsoft Store policies. For organizations that can’t submit their application through the Windows Dev Center (for example, those needing additional capabilities or due to compliance purposes), [Sideloading](https://go.microsoft.com/fwlink/p/?LinkId=623433) is also supported on Windows 10. ## Adding LOB apps to your private store -Admins and ISVs each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees or students. Admins use the Store for Business portal; ISVs or devs use the Windows Dev center on MSDN. +Admins and ISVs each own different parts of the process for getting LOB apps created, submitted, and deployed to your employees or students. Admins use Microsoft Store for Business or Microsoft Store for Education portal; ISVs or devs use the Windows Dev center on MSDN. Here’s what’s involved: - -- The Store for Business admin invites a developer or ISV to become an LOB publisher for your company. - -- LOB publisher develops and submits app to the Store, tagging the app so it is only available to your company. - -- The Store for Business admin accepts the app and can distribute the app to employees in your company. +- Microsoft Store for Business admin invites a developer or ISV to become an LOB publisher for your company. +- LOB publisher develops and submits app to Microsoft Store, tagging the app so it is only available to your company. +- Microsoft Store for Business admin accepts the app and can distribute the app to employees in your company. You'll need to set up: - - Your company needs to be signed up with Microsoft Store for Business or Microsoft Store for Education. - - LOB publishers need to have an active developer account. To learn more about account options, see [Ready to sign up](https://go.microsoft.com/fwlink/p/?LinkId=623432). - -- LOB publishers need to have an app in the Store, or have an app ready to submit to the Store. +- LOB publishers need to have an app in Microsoft Store, or have an app ready to submit to the Store. ## Add an LOB publisher (Admin) @@ -49,7 +43,7 @@ Admins need to invite developer or ISVs to become an LOB publisher. **To invite a developer to become an LOB publisher** -1. Sign in to the [Microsoft Store for Business]( https://go.microsoft.com/fwlink/p/?LinkId=623531). +1. Sign in to [Microsoft Store for Business](https://businessstore.microsoft.com). 2. Click **Manage**, click **Permissions**, and then choose **Line-of-business publishers**. 3. On the Line-of business publishers page, click **Invite** to send an email invitation to a developer. >[!Note] @@ -92,18 +86,14 @@ After an ISV submits the LOB app for your company or school, someone with Micros **To add the LOB app to your inventory** -1. Sign in to the Store for Business. -2. Click **Manage**, click **Apps & Software**, and then choose **New LOB apps**. +1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com). +2. Click **Manage**, click **Products & services**, and then choose **New LOB apps**. 3. Click the ellipses under **Action** for the app you want to add to your inventory, and then choose **Add to inventory**. After you add the app to your inventory, you can choose how to distribute the app. For more information, see: - - [Distribute apps to your employees from the Microsoft Store for Business](distribute-apps-to-your-employees-windows-store-for-business.md) - - [Distribute apps from your private store](distribute-apps-from-your-private-store.md) - - [Assign apps to employees](assign-apps-to-employees.md) - - [Distribute offline apps](distribute-offline-apps.md)   diff --git a/windows/configuration/TOC.md b/windows/configuration/TOC.md index 835a88ecb3..dbace94aff 100644 --- a/windows/configuration/TOC.md +++ b/windows/configuration/TOC.md @@ -51,7 +51,7 @@ ### [Set up and test custom voice commands in Cortana for your organization](cortana-at-work/cortana-at-work-voice-commands.md) ### [Use Group Policy and mobile device management (MDM) settings to configure Cortana in your organization](cortana-at-work/cortana-at-work-policy-settings.md) ### [Send feedback about Cortana at work back to Microsoft](cortana-at-work/cortana-at-work-feedback.md) -## [Configure access to Microsoft Store](stop-employees-from-using-the-windows-store.md) +## [Configure access to Microsoft Store](stop-employees-from-using-microsoft-store.md) ## [Provisioning packages for Windows 10](provisioning-packages/provisioning-packages.md) ### [How provisioning works in Windows 10](provisioning-packages/provisioning-how-it-works.md) ### [Introduction to configuration service providers (CSPs)](provisioning-packages/how-it-pros-can-use-configuration-service-providers.md) diff --git a/windows/configuration/stop-employees-from-using-the-windows-store.md b/windows/configuration/stop-employees-from-using-microsoft-store.md similarity index 100% rename from windows/configuration/stop-employees-from-using-the-windows-store.md rename to windows/configuration/stop-employees-from-using-microsoft-store.md diff --git a/windows/deployment/update/images/uc-10.png b/windows/deployment/update/images/uc-10.png index 3ab72d10d2..ea065590b9 100644 Binary files a/windows/deployment/update/images/uc-10.png and b/windows/deployment/update/images/uc-10.png differ diff --git a/windows/deployment/update/images/uc-emptyworkspacetile.PNG b/windows/deployment/update/images/uc-emptyworkspacetile.PNG new file mode 100644 index 0000000000..24c37d4279 Binary files /dev/null and b/windows/deployment/update/images/uc-emptyworkspacetile.PNG differ diff --git a/windows/deployment/update/images/uc-featureupdatestatus.PNG b/windows/deployment/update/images/uc-featureupdatestatus.PNG new file mode 100644 index 0000000000..ae6a38502f Binary files /dev/null and b/windows/deployment/update/images/uc-featureupdatestatus.PNG differ diff --git a/windows/deployment/update/images/uc-filledworkspacetile.PNG b/windows/deployment/update/images/uc-filledworkspacetile.PNG new file mode 100644 index 0000000000..5bce136cd1 Binary files /dev/null and b/windows/deployment/update/images/uc-filledworkspacetile.PNG differ diff --git a/windows/deployment/update/images/uc-filledworkspaceview.PNG b/windows/deployment/update/images/uc-filledworkspaceview.PNG new file mode 100644 index 0000000000..7456db62c0 Binary files /dev/null and b/windows/deployment/update/images/uc-filledworkspaceview.PNG differ diff --git a/windows/deployment/update/images/uc-needattentionoverview.PNG b/windows/deployment/update/images/uc-needattentionoverview.PNG new file mode 100644 index 0000000000..50b6d04699 Binary files /dev/null and b/windows/deployment/update/images/uc-needattentionoverview.PNG differ diff --git a/windows/deployment/update/images/uc-overviewblade.PNG b/windows/deployment/update/images/uc-overviewblade.PNG new file mode 100644 index 0000000000..dca364daf6 Binary files /dev/null and b/windows/deployment/update/images/uc-overviewblade.PNG differ diff --git a/windows/deployment/update/images/uc-perspectiveupdatedeploymentstatus.png b/windows/deployment/update/images/uc-perspectiveupdatedeploymentstatus.png new file mode 100644 index 0000000000..f52087a4a7 Binary files /dev/null and b/windows/deployment/update/images/uc-perspectiveupdatedeploymentstatus.png differ diff --git a/windows/deployment/update/images/uc-securityupdatestatus.PNG b/windows/deployment/update/images/uc-securityupdatestatus.PNG new file mode 100644 index 0000000000..776df89dc3 Binary files /dev/null and b/windows/deployment/update/images/uc-securityupdatestatus.PNG differ diff --git a/windows/deployment/update/images/uc-windowsdefenderavstatus.PNG b/windows/deployment/update/images/uc-windowsdefenderavstatus.PNG new file mode 100644 index 0000000000..e3f6990348 Binary files /dev/null and b/windows/deployment/update/images/uc-windowsdefenderavstatus.PNG differ diff --git a/windows/deployment/update/images/waas-wipfb-policy1.png b/windows/deployment/update/images/waas-wipfb-policy1.png new file mode 100644 index 0000000000..1fc89ecd2f Binary files /dev/null and b/windows/deployment/update/images/waas-wipfb-policy1.png differ diff --git a/windows/deployment/update/update-compliance-feature-update-status.md b/windows/deployment/update/update-compliance-feature-update-status.md new file mode 100644 index 0000000000..f24384cba3 --- /dev/null +++ b/windows/deployment/update/update-compliance-feature-update-status.md @@ -0,0 +1,28 @@ +--- +title: Update Compliance - Feature Update Status report +description: an overview of the Feature Update Status report +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 +--- + +# Feature Update Status + +![The Feature Update Status report](images/uc-featureupdatestatus.png) + +The Feature Update Status section provides information about the status of [feature updates](waas-quick-start.md#definitions) across all devices. This section tile in the [Overview Blade](update-compliance-using.md#overview-blade) gives a percentage of devices that are on the latest applicable feature update; [Servicing Channel](waas-overview.md#servicing-channels) is considered in determining applicability. Within this section three **Deployment Status** tiles make up a blade, each charged with tracking the deployment for a different Servicing Channel. + +To effectively track deployment, **Deployment Status Blades** are divided into each Servicing Channel chosen for the device. This is because Deployment for each channel will happen at different periods in time and feature updates are targeted separately for each channel. Within each Deployment Status tile, devices are aggregated on their feature update distribution, and the columns list the states each device is in. + +Refer to the following list for what each state means: +* **Installed** devices are devices that have completed installation for the given update. +* When a device is counted as **In Progress**, it has begun the feature update installation. +* Devices that are **scheduled next 7 days** are all devices that were deferred from installing the Feature update using [Windows Update for Business Settings](waas-manage-updates-wufb.md) and are set to begin installation in the next 7 days. +* Devices that have failed the given feature update installation are counted as **Update failed**. +* If a device should be, in some way, progressing toward this security update, but its status cannot be inferred, it will count as **Status Unknown**. Devices not using Windows Update are the most likely devices to fall into this category. + +Clicking on any row will navigate to the query relevant to that feature update. These queries are attached to [Perspectives](update-compliance-perspectives.md) that contain detailed deployment data for that update. diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 8e3da008da..41369d98ef 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -6,7 +6,9 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: jaimeo +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 --- # Get started with Update Compliance @@ -14,9 +16,9 @@ author: jaimeo This topic explains the steps necessary to configure your environment for Windows Analytics: Update Compliance. Steps are provided in sections that follow the recommended setup process: -1. Ensure that [prerequisites](#update-compliance-prerequisites) are met. -2. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. -3. [Deploy your Commercial ID](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. +1. Ensure that [prerequisites](#update-compliance-prerequisites) are met. +2. [Add Update Compliance](#add-update-compliance-to-microsoft-operations-management-suite) to Microsoft Operations Management Suite. +3. [Deploy your Commercial ID](#deploy-your-commercial-id-to-your-windows-10-devices) to your organization’s devices. ## Update Compliance prerequisites @@ -34,7 +36,7 @@ Update Compliance has the following requirements: 4. To use Windows Defender Antivirus Assessment, devices must be protected by Windows Defender AV (and not a 3rd party AV program), and must have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus). See the [Troublehsoot Windows Defender Antivirus reporting](/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting.md) topic for help on ensuring the configuration is correct. - For endpoints running Windows 10, version 1607 or earlier, [Windows telemetry must also be set to **Enhanced**](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level). + For endpoints running Windows 10, version 1607 or earlier, [Windows telemetry must also be set to **Enhanced**](https://docs.microsoft.com/en-us/windows/configuration/configure-windows-telemetry-in-your-organization#enhanced-level), to be compatible with Windows Defender Antivirus. See the [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) content library for more information on enabling, configuring, and validating Windows Defender AV. @@ -43,63 +45,37 @@ Update Compliance has the following requirements: Update Compliance is offered as a solution in the Microsoft Operations Management Suite (OMS), a collection of cloud-based servicing for monitoring and automating your on-premise and cloud environments. For more information about OMS, see [Operations Management Suite overview](https://azure.microsoft.com/en-us/documentation/articles/operations-management-suite-overview/). -If you are already using OMS, you’ll find Update Compliance in the Solutions Gallery. Select the **Update Compliance** tile in the gallery and then click **Add** on the solution's details page. Update Compliance is now visible in your workspace. While you're in the Solutions Gallery, you should consider installing the [Upgrade Readiness](../upgrade/use-upgrade-readiness-to-manage-windows-upgrades.md) and [Device Health](device-health-monitor.md) solutions as well, if you haven't already. +If you are already using OMS, skip to step **6** to add Update Compliance to your workspace. If you are not yet using OMS, use the following steps to subscribe to OMS Update Compliance: -1. Go to [Operations Management Suite](https://www.microsoft.com/en-us/cloud-platform/operations-management-suite) on Microsoft.com and click **Sign in**. - - - [![Operations Management Suite bar with sign-in button](images/uc-02a.png)](images/uc-02.png) - - -2. Sign in to Operations Management Suite (OMS). You can use either a Microsoft Account or a Work or School account to create a workspace. If your company is already using Azure Active Directory (Azure AD), use a Work or School account when you sign in to OMS. Using a Work or School account allows you to use identities from your Azure AD to manage permissions in OMS. - - - [![OMS Sign-in dialog box for account name and password](images/uc-03a.png)](images/uc-03.png) - - -3. Create a new OMS workspace. - - - [![OMS dialog with buttons to create a new OMS workspace or cancel](images/uc-04a.png)](images/uc-04.png) - -4. Enter a name for the workspace, select the workspace region, and provide the email address that you want associated with this workspace. Click **Create**. - - - [![OMS Create New Workspace dialog](images/uc-05a.png)](images/uc-05.png) - - -5. If your organization already has an Azure subscription, you can link it to your workspace. Note that you may need to request access from your organization’s Azure administrator. If your organization does not have an Azure subscription, create a new one or select the default OMS Azure subscription from the list. If you do not yet have an Azure subscription, follow [this guide](https://blogs.technet.microsoft.com/upgradeanalytics/2016/11/08/linking-operations-management-suite-workspaces-to-microsoft-azure/) to create and link an Azure subscription to an OMS workspace. - - - [![OMS dialog to link existing Azure subscription or create a new one](images/uc-06a.png)](images/uc-06.png) - - -6. To add the Update Compliance solution to your workspace, go to the Solutions Gallery. While you have this dialog open, you should also consider adding the [Upgrade Readiness](../upgrade/use-upgrade-readiness-to-manage-windows-upgrades.md) and [Device Health](device-health-monitor.md) solutions as well, if you haven't already. To do so, just select the check boxes for those solutions. - - - [![OMS workspace with Solutions Gallery tile highlighted](images/uc-07a.png)](images/uc-07.png) - - -7. Select the **Update Compliance** tile in the gallery and then select **Add** on the solution’s details page. You might need to scroll to find **Update Compliance**. The solution is now visible in your workspace. - - - [![Workspace showing Solutions Gallery](images/uc-08a.png)](images/uc-08.png) - - -8. Click the **Update Compliance** tile to configure the solution. The **Settings Dashboard** opens. - - - [![OMS workspace with new Update Compliance tile on the right side highlighted](images/uc-09a.png)](images/uc-09.png) - - -9. Click **Subscribe** to subscribe to OMS Update Compliance. You will then need to distribute your Commercial ID across all your organization’s devices. More information on the Commercial ID is provided below. - - - [![Series of blades showing Connected Sources, Windows Telemetry, and Upgrade Analytics solution with Subscribe button](images/uc-10a.png)](images/uc-10.png) - - +1. Go to [Operations Management Suite](https://www.microsoft.com/en-us/cloud-platform/operations-management-suite) on Microsoft.com and click **Sign in**. + ![Operations Management Suite bar with sign-in button](images/uc-02a.png) + +2. Sign in to Operations Management Suite (OMS). You can use either a Microsoft Account or a Work or School account to create a workspace. If your company is already using Azure Active Directory (Azure AD), use a Work or School account when you sign in to OMS. Using a Work or School account allows you to use identities from your Azure AD to manage permissions in OMS. + ![OMS Sign-in dialog box for account name and password](images/uc-03a.png) + +3. Create a new OMS workspace. + ![OMS dialog with buttons to create a new OMS workspace or cancel](images/uc-04a.png) + +4. Enter a name for the workspace, select the workspace region, and provide the email address that you want associated with this workspace. Click **Create**. + ![OMS Create New Workspace dialog](images/uc-05a.png)](images/uc-05.png) + +5. If your organization already has an Azure subscription, you can link it to your workspace. Note that you may need to request access from your organization’s Azure administrator. If your organization does not have an Azure subscription, create a new one or select the default OMS Azure subscription from the list. If you do not yet have an Azure subscription, follow [this guide](https://blogs.technet.microsoft.com/upgradeanalytics/2016/11/08/linking-operations-management-suite-workspaces-to-microsoft-azure/) to create and link an Azure subscription to an OMS workspace. + ![OMS dialog to link existing Azure subscription or create a new one](images/uc-06a.png) + +6. To add the Update Compliance solution to your workspace, go to the Solutions Gallery. While you have this dialog open, you should also consider adding the [Upgrade Readiness](../upgrade/use-upgrade-readiness-to-manage-windows-upgrades.md) and [Device Health](device-health-monitor.md) solutions as well, if you haven't already. To do so, just select the check boxes for those solutions. + ![OMS workspace with Solutions Gallery tile highlighted](images/uc-07a.png) + +7. Select the **Update Compliance** tile in the gallery and then select **Add** on the solution’s details page. You might need to scroll to find **Update Compliance**. The solution is now visible in your workspace. + ![Workspace showing Solutions Gallery](images/uc-08a.png) + +8. Click the **Update Compliance** tile to configure the solution. The **Settings Dashboard** opens. + ![OMS workspace with new Update Compliance tile on the right side highlighted](images/uc-09a.png) + +9. Click **Subscribe** to subscribe to OMS Update Compliance. You will then need to distribute your Commercial ID across all your organization’s devices. More information on the Commercial ID is provided below. + ![Series of blades showing Connected Sources, Windows Telemetry, and Upgrade Analytics solution with Subscribe button](images/uc-10a.png) + After you are subscribed to OMS Update Compliance and your devices have a Commercial ID, you will begin receiving data. It will typically take 24 hours for the first data to begin appearing. The following section explains how to deploy your Commercial ID to your Windows 10 devices. >[!NOTE] diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index 2619584ebd..95e64fcee6 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -6,7 +6,9 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: greg-lindsay +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 --- # Monitor Windows Updates and Windows Defender Antivirus with Update Compliance @@ -15,7 +17,7 @@ author: greg-lindsay With Windows 10, organizations need to change the way they approach monitoring and deploying updates. Update Compliance is a powerful set of tools that enable organizations to monitor and track all important aspects of the new servicing strategy from Microsoft: [Windows as a Service](waas-overview.md). -Update Compliance is a solution built within Operations Management Suite (OMS), a cloud-based monitoring and automation service which has a flexible servicing subscription based off data usage/retention. For more information about OMS, see [Operations Management Suite overview](http://azure.microsoft.com/en-us/documentation/articles/operations-management-suite-overview/). +Update Compliance is a solution built within Operations Management Suite (OMS), a cloud-based monitoring and automation service which has a flexible servicing subscription based off data usage/retention. For more information about OMS, see [Operations Management Suite overview](http://azure.microsoft.com/documentation/articles/operations-management-suite-overview/). Update Compliance uses the Windows telemetry that is part of all Windows 10 devices. It collects system data including update installation progress, Windows Update for Business (WUfB) configuration data, Windows Defender Antivirus data, and other update-specific information, and then sends this data privately to a secure cloud to be stored for analysis and usage within the solution. @@ -52,7 +54,7 @@ These steps are illustrated in following diagram: ![Update Compliance architecture](images/uc-01-wdav.png) >[!NOTE] ->This process assumes that Windows telemetry is enabled and you [have assigned your Commercial ID to devices](update-compliance-get-started#deploy-your-commercial-id-to-your-windows-10-devices. +>This process assumes that Windows telemetry is enabled and you [have assigned your Commercial ID to devices](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). diff --git a/windows/deployment/update/update-compliance-need-attention.md b/windows/deployment/update/update-compliance-need-attention.md new file mode 100644 index 0000000000..5aefff3779 --- /dev/null +++ b/windows/deployment/update/update-compliance-need-attention.md @@ -0,0 +1,38 @@ +--- +title: Update Compliance - Need Attention! report +description: an overview of the Update Compliance Need Attention! report +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 +--- + +# Need Attention! + +![Need Attention! report](images/uc-needattentionoverview.png) + +The “Need Attention!” section provides a breakdown of all device issues detected by Update Compliance. The summary tile for this section counts the number of devices that have issues, while the blades within break down the issues encountered. Finally, a [list of queries](#list-of-queries) blade is shown within this section that contains queries that provide values but do not fit within any other main section. + +>[!NOTE] +>The summary tile counts the number of devices that have issues, while the blades within the section break down the issues encountered. A single device can have more than one issue, so these numbers may not add up. + +The different issues are broken down by Device Issues and Update Issues, which are iterated below: + +## Device Issues + +* **Missing multiple security updates:** This issue occurs when a device is behind by two or more security updates. These devices may be more vulnerable and should be investigated and updated. +* **Out of support OS Version:** This issue occurs when a device has fallen out of support due to the version of Windows 10 it is running. When a device has fallen out of support, it will no longer be serviced, and may be vulnerable. These devices should be updated to a supported version of Windows 10. + +## Update Issues + +* **Failed:** This issue occurs when an error halts the process of downloading and applying an update on a device. Some of these errors may be transient, but should be investigated further to be sure. +* **Progress stalled:** This issue occurs when an update is in progress, but has not completed over a period of 10 days. + +Clicking on any of the issues will navigate you to the Log Search view with all devices that have the given issue. + +## List of Queries + +The List of Queries blade resides within the “Need Attention!” section of Update Compliance. This blade contains a list of queries with a description and a link to the query. These queries contain important meta-information that did not fit within any specific section or were listed to serve as a good starting point for modification into custom queries. \ No newline at end of file diff --git a/windows/deployment/update/update-compliance-perspectives.md b/windows/deployment/update/update-compliance-perspectives.md new file mode 100644 index 0000000000..f039195996 --- /dev/null +++ b/windows/deployment/update/update-compliance-perspectives.md @@ -0,0 +1,56 @@ +--- +title: Update Compliance - Perspectives +description: an overview of Update Compliance Perspectives +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 +--- + +# Perspectives + +![Perspectives data view](images/uc-perspectiveupdatedeploymentstatus.png) + +Perspectives are elaborations on specific queries hand-crafted by developers which data views that provide deeper insight into your data. Perspectives are loaded whenever clicking into more detailed views from both the Security Update Status section and Feature Update Status section of Update Compliance. + +There is only one perspective framework; it is for **Update Deployment Status**. The same framework is utilized for both feature and quality updates. + +The first blade is the **Build Summary** blade. This blade summarizes the most important aspects of the given build being queried, listing the total number of devices, the total number of update failures for the build, and a breakdown of the different errors encountered. + +The second blade is the **Deferral Configurations** blade, breaking down Windows Update for Business deferral settings (if any). + +The third blade is the **Deployment Status** blade. This defines how many days it has been since the queried version has been released, and breaks down the various states in the update funnel each device has reported to be in. The possible states are as follows: + +| State | Description | +| --- | --- | +| Update Completed | When a device has finished the update process and is on the queried update, it will display here as Update completed. | +| In Progress | Devices that report they are “In Progress” are one of the various stages of installing an update; these stages are reported in the Detailed Deployment Status blade. | +| Deferred | When a device’s Windows Update for Business deferral policy dictates that the update is not yet applicable due to deferral, it will report as such in this blade. | +| Progress stalled | Devices that report as “Progress stalled” have been stuck at “In progress” for more than 7 days. | +| Cancelled | The update was cancelled. | +| Blocked | There is a hard block on the update being completed. This could be that another update must be completed before this one, or some other task is blocking the installation of the update. | +| Unknown | Devices that do not report detailed information on the status of their updates will report Unknown. This is most likely devices that do not use Windows Update for deployment. | +| Update paused | These devices have Windows Update for Business pause enabled, preventing this update from being installed. | + +The final blade is the **Detailed Deployment Status** blade. This blade breaks down the detailed stage of deployment a device is in, beyond the generalized terms defined in Deployment Status. The following are the possible stages a device can report: + +| State | Description | +| --- | --- | +| Update deferred | When a device’s Windows Update for Business policy dictates the update is deferred. | +| Update paused | The device’s Windows Update for Business policy dictates the update is paused from being offered. | +| Update offered | The device has been offered the update, but has not begun downloading it. | +| Pre-Download tasks passed | The device has finished all necessary tasks prior to downloading the update. | +| Download Started | The update has begun downloading on the device. | +| Download Succeeded | The update has successfully completed downloading. | +| Pre-Install Tasks Passed | Tasks that must be completed prior to installing the update have been completed. | +| Install Started | Installation of the update has begun. | +| Reboot Required | The device has finished installing the update, and a reboot is required before the update can be completed. +| Reboot Pending | The device has a scheduled reboot to apply the update. | +| Reboot Initiated | The scheduled reboot has been initiated. | +| Update Completed/Commit | The update has successfully installed. | + +>[!NOTE] +>Interacting with any rows in the perspective view will automatically apply the given value to the query and execute it with the new parameter, narrowing the perspective to devices that satisfy that criteria. For example, clicking “Not configured (-1)” devices in Deferral Configurations will filter the query to only contain devices that do not have a deferral configuration. These filters can also be applied to queries via the filter sidebar. diff --git a/windows/deployment/update/update-compliance-security-update-status.md b/windows/deployment/update/update-compliance-security-update-status.md new file mode 100644 index 0000000000..b361f73d30 --- /dev/null +++ b/windows/deployment/update/update-compliance-security-update-status.md @@ -0,0 +1,32 @@ +--- +title: Update Compliance - Security Update Status report +description: an overview of the Security Update Status report +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 +--- + +# Security Update Status + +![The Security Update Status report](images/uc-securityupdatestatus.png) + +The Security Update Status section provides information about [quality updates](waas-quick-start.md#definitions) across all devices. The section tile within the O[verview Blade](update-compliance-using.md#overview-blade) lists the percentage of devices on the latest security update to provide the most essential data without needing to navigate into the section. However, within the section the Overall Quality Update Status blade also considers whether devices are up-to-date on non-security updates. + +>[!NOTE] +>It is possible for the percentage of devices on the latest security update to differ from devices that are up-to-date on all quality updates. This is because some devices may have non-security updates that are applicable to them. + +The **Overall Quality Update Status** blade provides a visualization of devices that are and are not up-to-date on the latest quality updates (not just security updates). Below the visualization are all devices further broken down by OS Version and a count of how many are up-to-date and not up-to-date. Within the “Not up-to-date” column, the count of update failures is also given. + +The **Latest Security Update Status** and **Previous Security Update Status** tiles are stacked to form one blade. The **Latest Security Update Status** provides a visualization of the different deployment states devices are in regarding the latest update for each build (or version) of Windows 10, along with the revision of that update. The **Previous Security Update Status** blade provides the same information without the accompanying visualization. + +What follows is a breakdown of the different deployment states reported by devices: +* **Installed** devices are devices that have completed installation for the given update. +* When a device is counted as **In Progress or Deferred**, it has either begun the installation process for the given update or has been intentionally deferred or paused using WU for Business Settings. +* Devices that have **Update Failed**, failed updating at some point during the installation process of the given security update. +* If a device should be, in some way, progressing toward this security update, but its status cannot be inferred, it will count as **Status Unknown**. Devices not using Windows Update are the most likely devices to fall into this category. + +The rows of each tile in this section are interactive; clicking on them will navigate you to the query that is representative of that row and section. These queries are also attached to [Perspectives](update-compliance-perspectives.md) with detailed deployment data for that update. \ No newline at end of file diff --git a/windows/deployment/update/update-compliance-using.md b/windows/deployment/update/update-compliance-using.md index a49a7adb06..68bd4160b1 100644 --- a/windows/deployment/update/update-compliance-using.md +++ b/windows/deployment/update/update-compliance-using.md @@ -5,12 +5,14 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy -author: greg-lindsay +author: DaniHalfin +ms.author: daniha +ms.date: 10/17/2017 --- -# Use Update Compliance to monitor Windows Updates +# Use Update Compliance -This section describes how to use Update Compliance to monitor Windows Updates and troubleshoot update failures on your network. +In this section you'll learn how to use Update Compliance to monitor your device's Windows updates and Windows Defender Antivirus status. To configure your environment for use with Update Compliance, refer to [Get started with Update Compliance](update-compliance-get-started.md). Update Compliance: @@ -18,470 +20,59 @@ Update Compliance: - Enables you to maintain a high-level perspective on the progress and status of updates across all devices. - Provides a workflow that can be used to quickly identify which devices require attention. - Enables you to track deployment compliance targets for updates. +- Summarizes Windows Defender Antivirus status for devices that use it. >[!NOTE] >Information is refreshed daily so that update progress can be monitored. Changes will be displayed about 24 hours after their occurrence, so you always have a recent snapshot of your devices. -In OMS, the aspects of a solution's dashboard are usually divided into blades. Blades are a slice of information, typically with a summarization tile and an enumeration of the items that makes up that data. All data is presented through queries. Perspectives are also possible, wherein a given query has a unique view designed to display custom data. The terminology of blades, tiles, and perspectives will be used in the sections that follow. +In Update Compliance, data is separated into vertically-sliced sections. Each section is referred to as a blade. Within a blade, there may or may not be multiple tiles, which serve to represent the data in different ways. Blades are summarized by their title in the upper-left corner above it. Every number displayed in OMS is the direct result of one or more queries. Clicking on data in blades will often navigate you to the query view, with the query used to produce that data. Some of these queries have perspectives attached to them; when a perspective is present, an additional tab will load in the query view. These additional tabs provide blades containing more information relevant to the results of the query. -Update Compliance has the following primary blades: +## The Update Compliance Tile +After Update Compliance has successfully been added from the solution gallery, you’ll see this tile: +![Empty Update Compliance Tile](images/uc-emptyworkspacetile.png) -1. [OS Update Overview](#os-update-overview) -2. [Overall Quality Update Status](#overall-quality-update-status) -3. [Latest and Previous Security Update Status](#latest-and-previous-security-update-status) -4. [Overall Feature Update Status](#overall-feature-update-status) -5. [CB, CBB, LTSB Deployment Status](#cb-cbb-ltsb-deployment-status) -6. [Windows Defender Antivirus Assessment](#wdav-assessment) -7. [List of Queries](#list-of-queries) +When the solution is added, data is not immediately available. Data will begin to be collected after data is sent up that is associated with the Commercial ID associated with the device. If you haven’t read about assigning your Commercial ID to your devices, refer to [this topic](update-compliance-get-started.md#deploy-your-commercial-id-to-your-windows-10-devices). After Microsoft has collected and processed any device data associated with your Commercial ID, the tile will be replaced with the following summary: +![Filled Update Compliance Tile](images/uc-filledworkspacetile.png) -## OS Update Overview +The summary details the total number of devices that Microsoft has received data from with your Commercial ID. It also provides the number of devices that need attention if any. Finally, it details the last point at which your Update Compliance workspace was updated. -The first blade of OMS Update Compliance is the General **OS Update Overview** blade: +## The Update Compliance Workspace -![OS Update Overview](images/uc-11.png) +![Update Compliance workspace view](images/uc-filledworkspaceview.png) +Upon clicking the tile, you will be redirected to the Update Compliance workspace. The workspace is organized with the Overview Blade providing a hub from which to navigate to different reports of your device’s data. +### Overview Blade -This blade is divided into three sections: -- Device Summary: -- Needs Attention Summary -- Update Status Summary +![The Overview Blade](images/uc-overviewblade.png) -The **Device Summary** displays the total number of devices in your organization. These devices have the commercial ID configured, telemetry enabled, and have sent telemetry to Microsoft within the last 28 days. The tile also shows the devices that Need Attention. +Update Compliance’s overview blade provides a summarization of all the data Update Compliance focuses on. It functions as a hub from which different sections can be navigated to. The total number of devices detected by Update Compliance are counted within the title of this blade. What follows is a distribution for all devices as to whether they are up to date on: +* Quality updates: A device is up to date on quality updates whenever it has the latest applicable quality update installed. Quality updates are monthly cumulative updates that are specific to a version of Windows 10. +* Feature updates: A device is up to date on feature updates whenever it has the latest applicable feature update installed. Update Compliance considers [Servicing Channel](waas-overview.md#servicing-channels) when determining update applicability. +* AV Signature: A device is up to date on Antivirus Signature when the latest Windows Defender Signatures have been downloaded. This distribution only considers devices that are running Windows Defender Antivirus. +The blade also provides the time at which your Update Compliance workspace was refreshed. -The **Needs Attention Summary** summarizes devices that require action on your part. There are multiple reasons why a device might need attention, and these reasons are categorized and summarized in the tile. You can view details about devices that are categorized as Needs Attention using a table view. The following **Needs Attention** states are defined: +Below the “Last Updated” time, a list of the different sections follows that can be clicked on to view more information, they are: +* [Need Attention!](update-compliance-need-attention.md) - This section is the default section when arriving to your Update Compliance workspace. It counts the number of devices encountering issues and need attention; clicking into this provides blades that summarize the different issues that devices are encountering, and provides a List of Queries that Microsoft finds useful. +* [Security Update Status](update-compliance-security-update-status.md) - This section lists the percentage of devices that are on the latest security update released for the version of Windows 10 it is running. Clicking into this section provides blades that summarize the overall status of Quality updates across all devices; including deployment. +* [Feature Update Status](update-compliance-feature-update-status.md) - This section lists the percentage of devices that are on the latest feature update that is applicable to a given device. Clicking into this section provides blades that summarize the overall feature update status across all devices, with an emphasis on deployment progress. +* [Windows Defender AV Status](update-compliance-wd-av-status.md) - This section lists the percentage of devices running Windows Defender Antivirus that are not sufficiently protected. Clicking into this section provides a summary of signature and threat status across all devices that are running Windows Defender Antivirus. This section is not applicable to devices not running Windows Defender Antivirus. +Use [Perspectives](update-compliance-perspectives.md) for data views that provide deeper insight into your data. -
-
Needs AttentionDefinition -
Out of SupportTotal number of devices that are no longer receiving servicing updates -
Update failedWhen a device has reported a failure at some stage in its update deployment process, it will report that the Update Failed. You can click on this to see the full set of devices with more details about the stage at which a failure was reported, when the device reported a failure, and other data. -
Missing 2+ Security UpdatesTotal number of devices that are missing two or more security updates -
Update Progress StalledTotal number of devices where an update installation has been “in progress” for more than 7 days -
+## Utilizing Log Analytics +Update Compliance is built upon the Log Analytics platform that is integrated into Operations Management Suite. All data within the workspace is the direct result of a query. Understanding the tools and features at your disposal, all integrated within OMS, can deeply enhance your experience and complement Update Compliance. -The **Update Status Summary** summarizes your organization's devices per the Windows 10 "Windows as a Service" (WaaS) model. For more information about WaaS, see [Overview of Windows as a service](waas-overview.md). Devices are categorized as: **Current**, **Up-to-date**, and **Not up-to-date**. See the following graphical representation of this model:
+See below for a few topics related to Log Analytics: +* Learn how to effectively execute custom Log Searches by referring to Microsoft Azure’s excellent documentation on [querying data in Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-log-searches). +* To develop your own custom data views in Operations Management Suite or [Power BI](https://powerbi.microsoft.com/); check out documentation on [analyzing data for use in Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-dashboards). +* [Gain an overview of Log Analytics’ alerts](https://docs.microsoft.com/azure/log-analytics/log-analytics-alerts) and learn how to utilize it to always stay informed about the most critical issues you care about. -![Device states](images/uc-12.png) - - -Update Status Summary definitions: - - - -
Update StatusDefinition -
Current and Up-to-dateA device that is current is on the latest and greatest Microsoft offers. It is on the very newest feature update (ex. The Windows Anniversary Update, RS1), on the very latest quality update for its servicing branch. -
Up-to-dateA device that is up-to-date is on the latest quality update for its servicing option (CB, CBB, LTSB), and the device is running an OS that is supported by Microsoft. -
Not up-to-dateA device does not have the latest quality update for its servicing option. -
- - -## Overall Quality Update Status - -**Overall Quality Update Status** is the second blade in Update Compliance. It has a donut data tile and lists the breakdown of the Up-to-date status of devices pivoted on OS version. See the following example: - - -![OS Quality Update Status](images/uc-13.png) - - -The donut tile offers a summary of all devices in your organization, divided into **Up-to-date** and **Not up-to-date**. Recall that devices that are current are also up-to-date. - - -The list view contains the breakdown of Up-to-date, Not up-to-date, and Update failed, all pivoted on OS version (e.g., 1507, 1511, 1607). Clicking on any of the rows of this list view will display the **OS Quality Update Summary Perspective** for that OS version. - - -## Latest and Previous Security Update Status - -Security updates are extremely important to your organization, so in addition to an overall view of Quality Updates, the deployment status for the latest two security updates are displayed for each supported OS build offered by Microsoft. - - -![Latest security update status](images/uc-14.png) - - -For the latest security update, a doughnut chart is displayed across all OS builds with a count of installed, in progress/deferred, update failed, and unknown status relative to that update. Two table views are provided below the doughnut displaying the same breakdown for each OS build supported by Microsoft. - -See the following definitions: - - - -
TermDefinition -
OS BuildThe OS build + Revision for the OS Version. The build + revision is a one-to-one mapping of the given security update in this context. -
VersionThe OS Version corresponding to the OS build. -
InstalledThe count of devices that have the given security update installed. In the case that the latest security update is not latest quality update (that is, an update has since been released but it did not contain any security fixes), then devices that are on a newer update will also be counted. -

For the previous security update, a device will display as **Installed** until it has at least installed the latest security update. -
In Progress or DeferredThe count of devices that are either currently in the process of installing the given security update, or are deferring the install as per their WUFB policy. -

All devices in this category for Previous Security Update Status are missing 2 or more security updates, and therefore qualify as needing attention. -
Update FailedThe count of devices that were **In Progress** for the given security update, but failed at some point in the process. They will no longer be shown as **In Progress or deferred** in this case, and only be counted as **Update failed**. -
Status UnknownIf a device should be, in some way, progressing toward this security update, but it’s status cannot be inferred, it will count as **Status Unknown**. Devices that are not using Windows Update are the most likely devices to fall into this category. -
- - -## Overall Feature Update Status - -Windows 10 has two main update types: Quality and Feature updates. The third blade in Update Compliance provides the most essential data about your organization’s devices for feature updates. - -Microsoft has developed terms to help specify the state of a given device for how it fits into the Windows as a Service (WaaS) model. There are three update states for a device: -- Current -- Up-to-date -- Not up-to-date - - -See the **Update Status Summary** description under [OS Update Overview](#os-update-overview) in this guide for definitions of these terms. - - -The Overall Feature Update Status blade focuses around whether or not your devices are considered Current. See the following example: - - -![Overall feature update status](images/uc-15.png) - - -Devices are evaluated by OS Version (e.g., 1607) and the count of how many are Current, Not Current, and have Update Failures is displayed. Clicking on any of these counts will allow you to view all those devices, as well as select the **Update Deployment Status** perspective, described below.  - - -## Windows Defender Antivirus Assessment - -You'll notice some new tiles in the Overview blade which provide a summary of Windows Defender AV-related issues, highlighted in the following screenshot. - -![Overview blade showing a summary of key Windows Defender Antivirus issues](images/update-compliance-wdav-overview.png) - ->[!IMPORTANT] ->If your devices are not showing up in the Windows Defender AV assessment section, check the [Troublshoot Windows Defender Antivirus reporting](/windows/threat-protection/windows-defender-antivirus/troubleshoot-reporting) topic for help. - -The **AV Signature** chart shows the number of devices that either have up-to-date [protection updates (also known as signatures or definitions)](/windows/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus), while the **Windows Defender AV Status** tile indicates the percentage of all assessed devices that are not updated and do not have real-time protection enabled. The Windows Defender Antivirus Assessment section provides more information that lets you investigate potential issues. - -If you're using [Windows Defender Antivirus in Windows 10](/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-in-windows-10) to protect devices in your organization and have enabled [cloud-delivered protection](/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus), you can use this section to review the overall status of key protection features, including the number of devices that have [always-on real-time protection](/windows/threat-protection/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus) and up-to-date definitions. - -There are two blades in the Windows Defender AV Assessment section: - -- Protection status -- Threats status - -![Windows Defender Antivirus Assessment blade in Update Compliance](images/update-compliance-wdav-assessment.png) - -The **Protection Status** blade shows three key measurements: - -1. How many devices have old or current signatures (also known as protection updates or definitions) -2. How many devices have the core Windows Defender AV always-on scanning feature enabled, called real-time protection - - -![Windows Defender Antivirus protection status in Update Compliance](images/update-compliance-wdav-prot-status.png) - -See the [Manage Windows Defender AV updates and apply baselines](/windows/threat-protection/windows-defender-antivirus/manage-updates-baselines-windows-defender-antivirus) topic for an overview on how updates work, and further information on applying updates. - -The **Threats Status** blade shows the following measurements: - -1. How many devices that have threats that have been remediated (removed or quarantined on the device) -2. How many devices that have threats where remediation was not successful (this may indicate a manual reboot or clean is required) - - -![Windows Defender Antivirus threat status in Update Compliance](images/update-compliance-wdav-threat-status.png) - -Devices can be in multiple states at once, as one device may have multiple threats, some of which may or may not be remediated. - -> [!IMPORTANT] -> The data reported in Update Compliance can be delayed by up to 24 hours. - -See the [Customize, initiate, and review the results of Windows Defender AV scans and remediation](/windows/threat-protection/windows-defender-antivirus/customize-run-review-remediate-scans-windows-defender-antivirus) topic for more information on how to perform scans and other manual remediation tasks. - -As with other blades in Update Compliance, clicking on a specific measurement or item will open the associated query that you can use to investigate individual devices and issues, as described below. - - -### Investigate individual devices and threats - - -Click on any of the status measurements to be taken to a pre-built log query that shows the impacted devices for that status. - -![Sample Windows Defender AV query in Update Compliance](images/update-compliance-wdav-status-log.png) - -You can also find a pre-built query on the main Update Compliance screen, under the **Queries** blade, that lists devices that have not been assessed for Windows Defender AV. - -![Overview blade showing a summary of key Windows Defender Antivirus issues](images/update-compliance-wdav-query-not-assessed.png) - - - - - - - - -You can further filter queries by clicking any of the measurement labels for each incident, changing the values in the query filter pane, and then clicking **Apply**. - -![Click the Apply button on the left pane](images/update-compliance-wdav-status-filter-apply.png) - - - -Click **+Add** at the bottom of the filter pane to open a list of filters you can apply. - -![Click Add to add more filters](images/update-compliance-wdav-status-add-filter.png) - - -You can also click the **. . .** button next to each label to instantly filter by that label or value. - -![Click the elipsis icon to instantly filter by the selected label](images/update-compliance-wdav-status-filter.png) - -You can create your own queries by using a query string in the following format: - -``` -Type: