mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-21 21:33:38 +00:00
Links: Windows (2021-03)
This commit is contained in:
David Coulter
@ -21,12 +21,12 @@ ms.date: 07/27/2017
|
||||
- Windows 10
|
||||
- Windows 10 Mobile
|
||||
|
||||
This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows 10 and Windows 10 Mobile in their organizations. CSPs expose device configuration settings in Windows 10. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Hardware Dev Center](https://go.microsoft.com/fwlink/p/?LinkId=717390).
|
||||
This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows 10 and Windows 10 Mobile in their organizations. CSPs expose device configuration settings in Windows 10. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Hardware Dev Center](/windows/client-management/mdm/configuration-service-provider-reference).
|
||||
|
||||
> [!NOTE]
|
||||
> The information provided here about CSPs and CSP documentation also applies to Windows Mobile 5, Windows Mobile 6, Windows Phone 7, and Windows Phone 8, but links to current CSPs are for Windows 10 and Windows 10 Mobile.
|
||||
|
||||
[See what's new for CSPs in Windows 10, version 1809.](https://docs.microsoft.com/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#whatsnew1809)
|
||||
[See what's new for CSPs in Windows 10, version 1809.](/windows/client-management/mdm/new-in-windows-mdm-enrollment-management#whatsnew1809)
|
||||
|
||||
## What is a CSP?
|
||||
|
||||
@ -34,9 +34,9 @@ In the client operating system, a CSP is the interface between configuration set
|
||||
|
||||
Starting with Windows Mobile 5.0, CSPs were used to manage Windows mobile devices. On the Windows 10 platform, the management approach for both desktop and mobile devices converges, taking advantage of the same CSPs to configure and manage all devices running Windows 10.
|
||||
|
||||
Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](https://go.microsoft.com/fwlink/p/?LinkId=717438) contains the settings to create a Wi-Fi profile.
|
||||
Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) contains the settings to create a Wi-Fi profile.
|
||||
|
||||
CSPs are behind many of the management tasks and policies for Windows 10, both in Microsoft Intune and in non-Microsoft MDM service providers. For example, in Intune, the policy to allow search suggestions in the Microsoft Edge address bar uses **Browser/AllowSearchSuggestionsinAddressBar** in the [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244).
|
||||
CSPs are behind many of the management tasks and policies for Windows 10, both in Microsoft Intune and in non-Microsoft MDM service providers. For example, in Intune, the policy to allow search suggestions in the Microsoft Edge address bar uses **Browser/AllowSearchSuggestionsinAddressBar** in the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider).
|
||||
|
||||
|
||||
|
||||
@ -50,7 +50,7 @@ The Open Mobile Alliance Device Management (OMA-DM) protocol uses the XML-based
|
||||
|
||||
The WMI-to-CSP Bridge is a component allowing configuration of Windows 10 CSPs using scripts and traditional enterprise management software, such as Configuration Manager using WMI. The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device.
|
||||
|
||||
[Learn how to use the WMI Bridge Provider with PowerShell.](https://go.microsoft.com/fwlink/p/?LinkId=761090)
|
||||
[Learn how to use the WMI Bridge Provider with PowerShell.](/windows/client-management/mdm/using-powershell-scripting-with-the-wmi-bridge-provider)
|
||||
|
||||
## Why should you learn about CSPs?
|
||||
|
||||
@ -58,11 +58,11 @@ Generally, enterprises rely on Group Policy or MDM to configure and manage devic
|
||||
|
||||
In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried.
|
||||
|
||||
Some of the articles in the [Windows 10 and Windows 10 Mobile](/windows/windows-10) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](../cortana-at-work/cortana-at-work-overview.md), which links to the [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244). In the CSP topics, you can learn about all of the available configuration settings.
|
||||
Some of the articles in the [Windows 10 and Windows 10 Mobile](/windows/windows-10) library on Technet include links to applicable CSP reference topics, such as [Cortana integration in your business or enterprise](../cortana-at-work/cortana-at-work-overview.md), which links to the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider). In the CSP topics, you can learn about all of the available configuration settings.
|
||||
|
||||
### CSPs in Windows Configuration Designer
|
||||
|
||||
You can use Windows Configuration Designer to create [provisioning packages](https://go.microsoft.com/fwlink/p/?LinkId=717466) to apply settings to devices during the out-of-box-experience (OOBE), and after the devices are set up. You can also use provisioning packages to configure a device's connectivity and enroll the device in MDM. Many of the runtime settings in Windows Configuration Designer are based on CSPs.
|
||||
You can use Windows Configuration Designer to create [provisioning packages](./provisioning-packages.md) to apply settings to devices during the out-of-box-experience (OOBE), and after the devices are set up. You can also use provisioning packages to configure a device's connectivity and enroll the device in MDM. Many of the runtime settings in Windows Configuration Designer are based on CSPs.
|
||||
|
||||
Many settings in Windows Configuration Designer will display documentation for that setting in the center pane, and will include a reference to the CSP if the setting uses one, as shown in the following image.
|
||||
|
||||
@ -72,19 +72,19 @@ Many settings in Windows Configuration Designer will display documentation for t
|
||||
|
||||
### CSPs in MDM
|
||||
|
||||
Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and cannot find that capability in your MDM service, contact your MDM provider for assistance. It might be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](https://go.microsoft.com/fwlink/p/?LinkId=717390).
|
||||
Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and cannot find that capability in your MDM service, contact your MDM provider for assistance. It might be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference).
|
||||
|
||||
When a CSP is available but is not explicitly included in your MDM solution, you may be able to make use of the CSP by using OMA-URI settings. In Intune, for example, you can use [custom policy settings](https://go.microsoft.com/fwlink/p/?LinkID=616316) to deploy settings. Intune documents [a partial list of settings](https://go.microsoft.com/fwlink/p/?LinkID=616317) that you can enter in the **OMA-URI Settings** section of a custom policy, if your MDM service provides that extension. You'll notice that the list doesn't explain the meanings of the allowed and default values, so use the [CSP reference documentation](https://go.microsoft.com/fwlink/p/?LinkId=717390) to locate that information.
|
||||
When a CSP is available but is not explicitly included in your MDM solution, you may be able to make use of the CSP by using OMA-URI settings. In Intune, for example, you can use [custom policy settings](https://go.microsoft.com/fwlink/p/?LinkID=616316) to deploy settings. Intune documents [a partial list of settings](https://go.microsoft.com/fwlink/p/?LinkID=616317) that you can enter in the **OMA-URI Settings** section of a custom policy, if your MDM service provides that extension. You'll notice that the list doesn't explain the meanings of the allowed and default values, so use the [CSP reference documentation](/windows/client-management/mdm/configuration-service-provider-reference) to locate that information.
|
||||
|
||||
### CSPs in Lockdown XML
|
||||
|
||||
Lockdown XML can be used to configure devices running Windows 10 Mobile. You can manually author a [Lockdown XML file](../mobile-devices/lockdown-xml.md) to make use of the configuration settings available through the [EnterpriseAssignedAccess configuration service provider (CSP)](https://go.microsoft.com/fwlink/p/?LinkID=618601). In Windows 10, version 1703, you can also use the new [Lockdown Designer app](../mobile-devices/mobile-lockdown-designer.md) to configure your Lockdown XML.
|
||||
Lockdown XML can be used to configure devices running Windows 10 Mobile. You can manually author a [Lockdown XML file](../mobile-devices/lockdown-xml.md) to make use of the configuration settings available through the [EnterpriseAssignedAccess configuration service provider (CSP)](/windows/client-management/mdm/enterpriseassignedaccess-csp). In Windows 10, version 1703, you can also use the new [Lockdown Designer app](../mobile-devices/mobile-lockdown-designer.md) to configure your Lockdown XML.
|
||||
|
||||
## <a href="" id="bkmk-csp-doc"></a>How do you use the CSP documentation?
|
||||
|
||||
All CSPs in Windows 10 are documented in the [Configuration service provider reference](https://go.microsoft.com/fwlink/p/?LinkId=717390).
|
||||
All CSPs in Windows 10 are documented in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference).
|
||||
|
||||
The [main CSP topic](https://go.microsoft.com/fwlink/p/?LinkId=717390) tells you which CSPs are supported on each edition of Windows 10, and links to the documentation for each individual CSP.
|
||||
The [main CSP topic](/windows/client-management/mdm/configuration-service-provider-reference) tells you which CSPs are supported on each edition of Windows 10, and links to the documentation for each individual CSP.
|
||||
|
||||
|
||||
|
||||
@ -92,11 +92,11 @@ The documentation for each CSP follows the same structure. After an introduction
|
||||
|
||||
The full path to a specific configuration setting is represented by its Open Mobile Alliance - Uniform Resource Identifier (OMA-URI). The URI is relative to the devices’ root node (MSFT, for example). Features supported by a particular CSP can be set by addressing the complete OMA-URI path.
|
||||
|
||||
The following example shows the diagram for the [AssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=626608). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes, and rectangular elements are settings or policies for which a value must be supplied.
|
||||
The following example shows the diagram for the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes, and rectangular elements are settings or policies for which a value must be supplied.
|
||||
|
||||
|
||||
|
||||
The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see that it uses the [AssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=626608).
|
||||
The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see that it uses the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp).
|
||||
|
||||
```XML
|
||||
./Vendor/MSFT/AssignedAccess/KioskModeApp
|
||||
@ -108,7 +108,7 @@ When an element in the diagram uses _italic_ font, it indicates a placeholder fo
|
||||
|
||||
After the diagram, the documentation describes each element. For each policy or setting, the valid values are listed.
|
||||
|
||||
For example, in the [AssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=626608), the setting is **KioskModeApp**. The documentation tells you that the value for **KioskModeApp** is a JSON string that contains the user account name and Application User Model ID (AUMID) of the Kiosk mode app.
|
||||
For example, in the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp), the setting is **KioskModeApp**. The documentation tells you that the value for **KioskModeApp** is a JSON string that contains the user account name and Application User Model ID (AUMID) of the Kiosk mode app.
|
||||
|
||||
The documentation for most CSPs will also include an XML example.
|
||||
|
||||
@ -116,7 +116,7 @@ The documentation for most CSPs will also include an XML example.
|
||||
|
||||
CSPs provide access to a number of settings useful to enterprises. This section introduces the CSPs that an enterprise might find useful.
|
||||
|
||||
- [EnterpriseAssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=618601)
|
||||
- [EnterpriseAssignedAccess CSP](/windows/client-management/mdm/enterpriseassignedaccess-csp)
|
||||
|
||||
The EnterpriseAssignedAccess CSP lets IT administrators configure settings on a Windows 10 Mobile device. An enterprise can make use of this CSP to create single-use or limited-use mobile devices, such as a handheld device that only runs a price-checking app.
|
||||
|
||||
@ -131,7 +131,7 @@ CSPs provide access to a number of settings useful to enterprises. This section
|
||||
- Enabling or disabling tile manipulation.
|
||||
- Creating role-specific configurations.
|
||||
|
||||
- [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244)
|
||||
- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
|
||||
|
||||
The Policy CSP enables the enterprise to configure policies on Windows 10 and Windows 10 Mobile. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings.
|
||||
|
||||
@ -155,60 +155,60 @@ CSPs provide access to a number of settings useful to enterprises. This section
|
||||
|
||||
Here is a list of CSPs supported on Windows 10 Enterprise, Windows 10 Mobile Enterprise, or both:
|
||||
|
||||
- [ActiveSync CSP](https://go.microsoft.com/fwlink/p/?LinkId=723219)
|
||||
- [Application CSP](https://go.microsoft.com/fwlink/p/?LinkId=723220)
|
||||
- [AppLocker CSP](https://go.microsoft.com/fwlink/p/?LinkID=626609)
|
||||
- [AssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=626608)
|
||||
- [Bootstrap CSP](https://go.microsoft.com/fwlink/p/?LinkId=723224)
|
||||
- [BrowserFavorite CSP](https://go.microsoft.com/fwlink/p/?LinkId=723428)
|
||||
- [CellularSettings CSP](https://go.microsoft.com/fwlink/p/?LinkId=723427)
|
||||
- [CertificateStore CSP](https://go.microsoft.com/fwlink/p/?LinkId=723225)
|
||||
- [ClientCertificateInstall CSP](https://go.microsoft.com/fwlink/p/?LinkId=723226)
|
||||
- [CM\_CellularEntries CSP](https://go.microsoft.com/fwlink/p/?LinkId=723426)
|
||||
- [CM\_ProxyEntries CSP](https://go.microsoft.com/fwlink/p/?LinkId=723425)
|
||||
- [CMPolicy CSP](https://go.microsoft.com/fwlink/p/?LinkId=723424)
|
||||
- [Defender CSP](https://go.microsoft.com/fwlink/p/?LinkId=723227)
|
||||
- [DevDetail CSP](https://go.microsoft.com/fwlink/p/?LinkId=723228)
|
||||
- [DeviceInstanceService CSP](https://go.microsoft.com/fwlink/p/?LinkId=723275)
|
||||
- [DeviceLock CSP](https://go.microsoft.com/fwlink/p/?LinkId=723370)
|
||||
- [DeviceStatus CSP](https://go.microsoft.com/fwlink/p/?LinkId=723229)
|
||||
- [DevInfo CSP](https://go.microsoft.com/fwlink/p/?LinkId=723230)
|
||||
- [DiagnosticLog CSP](https://go.microsoft.com/fwlink/p/?LinkId=723231)
|
||||
- [DMAcc CSP](https://go.microsoft.com/fwlink/p/?LinkId=723232)
|
||||
- [DMClient CSP](https://go.microsoft.com/fwlink/p/?LinkId=723233)
|
||||
- [Email2 CSP](https://go.microsoft.com/fwlink/p/?LinkId=723234)
|
||||
- [EnterpriseAPN CSP](https://go.microsoft.com/fwlink/p/?LinkId=723235)
|
||||
- [EnterpriseAppManagement CSP](https://go.microsoft.com/fwlink/p/?LinkId=723237)
|
||||
- [EnterpriseAssignedAccess CSP](https://go.microsoft.com/fwlink/p/?LinkID=618601)
|
||||
- [EnterpriseDesktopAppManagement CSP](https://go.microsoft.com/fwlink/p/?LinkId=723236)
|
||||
- [EnterpriseExt CSP](https://go.microsoft.com/fwlink/p/?LinkId=723423)
|
||||
- [EnterpriseExtFileSystem CSP](https://go.microsoft.com/fwlink/p/?LinkID=703716)
|
||||
- [EnterpriseModernAppManagement CSP](https://go.microsoft.com/fwlink/p/?LinkId=723257)
|
||||
- [FileSystem CSP](https://go.microsoft.com/fwlink/p/?LinkId=723422)
|
||||
- [HealthAttestation CSP](https://go.microsoft.com/fwlink/p/?LinkId=723258)
|
||||
- [HotSpot CSP](https://go.microsoft.com/fwlink/p/?LinkId=723421)
|
||||
- [Maps CSP](https://go.microsoft.com/fwlink/p/?LinkId=723420)
|
||||
- [NAP CSP](https://go.microsoft.com/fwlink/p/?LinkId=723419)
|
||||
- [NAPDEF CSP](https://go.microsoft.com/fwlink/p/?LinkId=723371)
|
||||
- [ActiveSync CSP](/windows/client-management/mdm/activesync-csp)
|
||||
- [Application CSP](/windows/client-management/mdm/application-csp)
|
||||
- [AppLocker CSP](/windows/client-management/mdm/applocker-csp)
|
||||
- [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp)
|
||||
- [Bootstrap CSP](/windows/client-management/mdm/bootstrap-csp)
|
||||
- [BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp)
|
||||
- [CellularSettings CSP](/windows/client-management/mdm/cellularsettings-csp)
|
||||
- [CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp)
|
||||
- [ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp)
|
||||
- [CM\_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp)
|
||||
- [CM\_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp)
|
||||
- [CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp)
|
||||
- [Defender CSP](/windows/client-management/mdm/defender-csp)
|
||||
- [DevDetail CSP](/windows/client-management/mdm/devdetail-csp)
|
||||
- [DeviceInstanceService CSP](/windows/client-management/mdm/deviceinstanceservice-csp)
|
||||
- [DeviceLock CSP](/windows/client-management/mdm/devicelock-csp)
|
||||
- [DeviceStatus CSP](/windows/client-management/mdm/devicestatus-csp)
|
||||
- [DevInfo CSP](/windows/client-management/mdm/devinfo-csp)
|
||||
- [DiagnosticLog CSP](/windows/client-management/mdm/diagnosticlog-csp)
|
||||
- [DMAcc CSP](/windows/client-management/mdm/dmacc-csp)
|
||||
- [DMClient CSP](/windows/client-management/mdm/dmclient-csp)
|
||||
- [Email2 CSP](/windows/client-management/mdm/email2-csp)
|
||||
- [EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp)
|
||||
- [EnterpriseAppManagement CSP](/windows/client-management/mdm/enterpriseappmanagement-csp)
|
||||
- [EnterpriseAssignedAccess CSP](/windows/client-management/mdm/enterpriseassignedaccess-csp)
|
||||
- [EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp)
|
||||
- [EnterpriseExt CSP](/windows/client-management/mdm/enterpriseext-csp)
|
||||
- [EnterpriseExtFileSystem CSP](/windows/client-management/mdm/enterpriseextfilessystem-csp)
|
||||
- [EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp)
|
||||
- [FileSystem CSP](/windows/client-management/mdm/filesystem-csp)
|
||||
- [HealthAttestation CSP](/windows/client-management/mdm/healthattestation-csp)
|
||||
- [HotSpot CSP](/windows/client-management/mdm/hotspot-csp)
|
||||
- [Maps CSP](/windows/client-management/mdm/maps-csp)
|
||||
- [NAP CSP](/windows/client-management/mdm/filesystem-csp)
|
||||
- [NAPDEF CSP](/windows/client-management/mdm/napdef-csp)
|
||||
- [NodeCache CSP]( https://go.microsoft.com/fwlink/p/?LinkId=723265)
|
||||
- [PassportForWork CSP](https://go.microsoft.com/fwlink/p/?LinkID=692070)
|
||||
- [Policy CSP](https://go.microsoft.com/fwlink/p/?LinkID=623244)
|
||||
- [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp)
|
||||
- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider)
|
||||
- [PolicyManager CSP]( https://go.microsoft.com/fwlink/p/?LinkId=723418)
|
||||
- [Provisioning CSP](https://go.microsoft.com/fwlink/p/?LinkId=723266)
|
||||
- [Provisioning CSP](/windows/client-management/mdm/provisioning-csp)
|
||||
- [Proxy CSP]( https://go.microsoft.com/fwlink/p/?LinkId=723372)
|
||||
- [PXLOGICAL CSP](https://go.microsoft.com/fwlink/p/?LinkId=723374)
|
||||
- [Registry CSP](https://go.microsoft.com/fwlink/p/?LinkId=723417)
|
||||
- [RemoteFind CSP](https://go.microsoft.com/fwlink/p/?LinkId=723267)
|
||||
- [RemoteWipe CSP](https://go.microsoft.com/fwlink/p/?LinkID=703714)
|
||||
- [Reporting CSP](https://go.microsoft.com/fwlink/p/?LinkId=723375)
|
||||
- [RootCATrustedCertificates CSP](https://go.microsoft.com/fwlink/p/?LinkId=723270)
|
||||
- [SecurityPolicy CSP](https://go.microsoft.com/fwlink/p/?LinkId=723376)
|
||||
- [Storage CSP](https://go.microsoft.com/fwlink/p/?LinkId=723377)
|
||||
- [SUPL CSP](https://go.microsoft.com/fwlink/p/?LinkId=723378)
|
||||
- [UnifiedWriteFilter CSP](https://go.microsoft.com/fwlink/p/?LinkId=723272)
|
||||
- [Update CSP](https://go.microsoft.com/fwlink/p/?LinkId=723271)
|
||||
- [VPN CSP](https://go.microsoft.com/fwlink/p/?LinkId=723416)
|
||||
- [VPNv2 CSP](https://go.microsoft.com/fwlink/p/?LinkID=617588)
|
||||
- [Wi-Fi CSP](https://go.microsoft.com/fwlink/p/?LinkID=71743)
|
||||
- [WindowsLicensing CSP](https://go.microsoft.com/fwlink/p/?LinkId=723274)
|
||||
- [WindowsSecurityAuditing CSP](https://go.microsoft.com/fwlink/p/?LinkId=723415)
|
||||
- [PXLOGICAL CSP](/windows/client-management/mdm/pxlogical-csp)
|
||||
- [Registry CSP](/windows/client-management/mdm/registry-csp)
|
||||
- [RemoteFind CSP](/windows/client-management/mdm/remotefind-csp)
|
||||
- [RemoteWipe CSP](/windows/client-management/mdm/remotewipe-csp)
|
||||
- [Reporting CSP](/windows/client-management/mdm/reporting-csp)
|
||||
- [RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp)
|
||||
- [SecurityPolicy CSP](/windows/client-management/mdm/securitypolicy-csp)
|
||||
- [Storage CSP](/windows/client-management/mdm/storage-csp)
|
||||
- [SUPL CSP](/windows/client-management/mdm/supl-csp)
|
||||
- [UnifiedWriteFilter CSP](/windows/client-management/mdm/unifiedwritefilter-csp)
|
||||
- [Update CSP](/windows/client-management/mdm/update-csp)
|
||||
- [VPN CSP](/windows/client-management/mdm/vpn-csp)
|
||||
- [VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp)
|
||||
- [Wi-Fi CSP](/documentation/)
|
||||
- [WindowsLicensing CSP](/windows/client-management/mdm/windowslicensing-csp)
|
||||
- [WindowsSecurityAuditing CSP](/windows/client-management/mdm/windowssecurityauditing-csp)
|
||||
@ -81,9 +81,9 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
|
||||
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/one.png" alt="step one"/><img src="../images/set-up-device.png" alt="set up device"/></br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. <a href="https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades" data-raw-source="[See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)">See the permitted upgrades.</a></br></br>Toggle <strong>Yes</strong> or <strong>No</strong> to <strong>Configure devices for shared use</strong>. This setting optimizes Windows 10 for shared use scenarios. <a href="../set-up-shared-or-guest-pc.md" data-raw-source="[Learn more about shared PC configuration.](../set-up-shared-or-guest-pc.md)">Learn more about shared PC configuration.</a></br></br>You can also select to remove pre-installed software from the device. </td><td><img src="../images/set-up-device-details-desktop.png" alt="device name, upgrade to enterprise, shared use, remove pre-installed software"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/one.png" alt="step one"/><img src="../images/set-up-device.png" alt="set up device"/></br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. <a href="/windows/deployment/upgrade/windows-10-edition-upgrades" data-raw-source="[See the permitted upgrades.](/windows/deployment/upgrade/windows-10-edition-upgrades)">See the permitted upgrades.</a></br></br>Toggle <strong>Yes</strong> or <strong>No</strong> to <strong>Configure devices for shared use</strong>. This setting optimizes Windows 10 for shared use scenarios. <a href="../set-up-shared-or-guest-pc.md" data-raw-source="[Learn more about shared PC configuration.](../set-up-shared-or-guest-pc.md)">Learn more about shared PC configuration.</a></br></br>You can also select to remove pre-installed software from the device. </td><td><img src="../images/set-up-device-details-desktop.png" alt="device name, upgrade to enterprise, shared use, remove pre-installed software"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/two.png" alt="step two"/> <img src="../images/set-up-network.png" alt="set up network"/></br></br>Toggle <strong>On</strong> or <strong>Off</strong> for wireless network connectivity. If you select <strong>On</strong>, enter the SSID, the network type (<strong>Open</strong> or <strong>WPA2-Personal</strong>), and (if <strong>WPA2-Personal</strong>) the password for the wireless network.</td><td><img src="../images/set-up-network-details-desktop.png" alt="Enter network SSID and type"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/three.png" alt="step three"/> <img src="../images/account-management.png" alt="account management"/></br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, <a href="https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup" data-raw-source="[set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup)">set up Azure AD join in your organization</a>. The <strong>maximum number of devices per user</strong> setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click <strong>Get bulk token</strong>. In the <strong>Let's get you signed in</strong> window, enter an account that has permissions to join a device to Azure AD, and then the password. Click <strong>Accept</strong> to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br><strong>Important:</strong> If you create a local account in the provisioning package, you must change the password using the <strong>Settings</strong> app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td><img src="../images/account-management-details.png" alt="join Active Directory, Azure AD, or create a local admin account"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/three.png" alt="step three"/> <img src="../images/account-management.png" alt="account management"/></br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, <a href="/azure/active-directory/active-directory-azureadjoin-setup" data-raw-source="[set up Azure AD join in your organization](/azure/active-directory/active-directory-azureadjoin-setup)">set up Azure AD join in your organization</a>. The <strong>maximum number of devices per user</strong> setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click <strong>Get bulk token</strong>. In the <strong>Let's get you signed in</strong> window, enter an account that has permissions to join a device to Azure AD, and then the password. Click <strong>Accept</strong> to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br><strong>Important:</strong> If you create a local account in the provisioning package, you must change the password using the <strong>Settings</strong> app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td><img src="../images/account-management-details.png" alt="join Active Directory, Azure AD, or create a local admin account"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/four.png" alt="step four"/> <img src="../images/add-applications.png" alt="add applications"/></br></br>You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see <a href="provision-pcs-with-apps.md" data-raw-source="[Provision PCs with apps](provision-pcs-with-apps.md)">Provision PCs with apps</a>. </td><td><img src="../images/add-applications-details.png" alt="add an application"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"><img src="../images/five.png" alt="step five"/> <img src="../images/add-certificates.png" alt="add certificates"/></br></br>To provision the device with a certificate, click <strong>Add a certificate</strong>. Enter a name for the certificate, and then browse to and select the certificate to be used.</td><td><img src="../images/add-certificates-details.png" alt="add a certificate"/></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> <img src="../images/finish.png" alt="finish"/></br></br>You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.</td><td><img src="../images/finish-details.png" alt="Protect your package"/></td></tr>
|
||||
@ -114,9 +114,4 @@ After you're done, click **Create**. It only takes a few seconds. When the packa
|
||||
- [NFC-based device provisioning](../mobile-devices/provisioning-nfc.md)
|
||||
- [Use the package splitter tool](../mobile-devices/provisioning-package-splitter.md)
|
||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
@ -27,7 +27,7 @@ In Windows 10, version 1703, you can install multiple Universal Windows Platform
|
||||
When you add an app in a Windows Configuration Designer wizard, the appropriate settings are displayed based on the app that you select. For instructions on adding an app using the advanced editor in Windows Configuration Designer, see [Add an app using advanced editor](#adv).
|
||||
|
||||
>[!IMPORTANT]
|
||||
>If you plan to use Intune to manage your devices, we recommend using Intune to install Microsoft 365 Apps for enterprise 2016 apps (Access, Excel, OneDrive for Business, OneNote, Outlook, PowerPoint, Publisher, Skype for Business, Word, Project Desktop Client, and Visio Pro for Microsoft 365 Apps for enterprise). Apps that are installed using a provisioning package cannot be managed or modified using Intune. [Learn how to assign Microsoft 365 Apps for enterprise 2016 apps using Microsoft Intune.](https://docs.microsoft.com/intune/apps-add-office365)
|
||||
>If you plan to use Intune to manage your devices, we recommend using Intune to install Microsoft 365 Apps for enterprise 2016 apps (Access, Excel, OneDrive for Business, OneNote, Outlook, PowerPoint, Publisher, Skype for Business, Word, Project Desktop Client, and Visio Pro for Microsoft 365 Apps for enterprise). Apps that are installed using a provisioning package cannot be managed or modified using Intune. [Learn how to assign Microsoft 365 Apps for enterprise 2016 apps using Microsoft Intune.](/intune/apps-add-office365)
|
||||
|
||||
## Settings for UWP apps
|
||||
|
||||
@ -42,7 +42,7 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate
|
||||
### MSI installer
|
||||
|
||||
> [!NOTE]
|
||||
> You can find more information about command-line options for Msiexec.exe [here](https://docs.microsoft.com/windows/win32/msi/command-line-options).
|
||||
> You can find more information about command-line options for Msiexec.exe [here](/windows/win32/msi/command-line-options).
|
||||
|
||||
- **Command line arguments**: Optionally, append additional command arguments. The silent flag is appended for you. Example: PROPERTY=VALUE
|
||||
|
||||
@ -213,6 +213,4 @@ For details about the settings you can customize in provisioning packages, see [
|
||||
- [NFC-based device provisioning](../mobile-devices/provisioning-nfc.md)
|
||||
- [Use the package splitter tool](../mobile-devices/provisioning-package-splitter.md)
|
||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
|
||||
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
@ -46,8 +46,8 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
||||
- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md)
|
||||
- [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md)
|
||||
- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard)
|
||||
- [Instructions for HoloLens wizard](https://technet.microsoft.com/itpro/hololens/hololens-provisioning)
|
||||
- [Instructions for Surface Hub wizard](https://technet.microsoft.com/itpro/surface-hub/provisioning-packages-for-certificates-surface-hub)
|
||||
- [Instructions for HoloLens wizard](/hololens/hololens-provisioning)
|
||||
- [Instructions for Surface Hub wizard](/surface-hub/provisioning-packages-for-surface-hub)
|
||||
|
||||
Wizards are also available for creating provisioning packages for Microsoft Surface Hub and Microsoft HoloLens devices. For a summary of the settings available in the desktop, mobile, and kiosk devices, see [What you can configure using Configuration Designer wizards](provisioning-packages.md#configuration-designer-wizards).
|
||||
|
||||
@ -69,8 +69,8 @@ You can use Windows Configuration Designer to create a provisioning package (.pp
|
||||
| All Windows desktop editions | Common settings and settings specific to desktop devices | All Windows 10 desktop editions (Home, Pro, Enterprise, Pro Education, Enterprise Education) |
|
||||
| All Windows mobile editions | Common settings and settings specific to mobile devices | All Windows 10 Mobile devices |
|
||||
| Windows 10 IoT Core | Common settings and settings specific to Windows 10 IoT Core | All Windows 10 IoT Core devices |
|
||||
| Windows 10 Holographic | Common settings and settings specific to Windows 10 Holographic | [Microsoft HoloLens](https://technet.microsoft.com/itpro/hololens/hololens-provisioning) |
|
||||
| Common to Windows 10 Team edition | Common settings and settings specific to Windows 10 Team | [Microsoft Surface Hub](https://technet.microsoft.com/itpro/surface-hub/provisioning-packages-for-certificates-surface-hub) |
|
||||
| Windows 10 Holographic | Common settings and settings specific to Windows 10 Holographic | [Microsoft HoloLens](/hololens/hololens-provisioning) |
|
||||
| Common to Windows 10 Team edition | Common settings and settings specific to Windows 10 Team | [Microsoft Surface Hub](/surface-hub/provisioning-packages-for-surface-hub) |
|
||||
|
||||
|
||||
5. On the **Import a provisioning package (optional)** page, you can select **Finish** to create your project, or browse to and select an existing provisioning package to import to your project, and then select **Finish**.
|
||||
@ -89,7 +89,7 @@ For an advanced provisioning project, Windows Configuration Designer opens the *
|
||||
|
||||
|
||||
|
||||
The settings in Windows Configuration Designer are based on Windows 10 configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](https://technet.microsoft.com/itpro/windows/manage/how-it-pros-can-use-configuration-service-providers).
|
||||
The settings in Windows Configuration Designer are based on Windows 10 configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](./how-it-pros-can-use-configuration-service-providers.md).
|
||||
|
||||
The process for configuring settings is similar for all settings. The following table shows an example.
|
||||
|
||||
@ -101,7 +101,7 @@ The process for configuring settings is similar for all settings. The following
|
||||
<tr><td><img src="../images/five.png" alt="step five"/></br>When the setting is configured, it is displayed in the <strong>Selected customizations</strong> pane.</td><td><img src="../images/icd-step5.png" alt="Selected customizations pane"/></td></tr>
|
||||
</table>
|
||||
|
||||
For details on each specific setting, see [Windows Provisioning settings reference](https://msdn.microsoft.com/library/windows/hardware/dn965990.aspx). The reference topic for a setting is also displayed in Windows Configuration Designer when you select the setting, as shown in the following image.
|
||||
For details on each specific setting, see [Windows Provisioning settings reference](../wcd/wcd.md). The reference topic for a setting is also displayed in Windows Configuration Designer when you select the setting, as shown in the following image.
|
||||
|
||||
|
||||
|
||||
@ -150,7 +150,7 @@ For details on each specific setting, see [Windows Provisioning settings referen
|
||||
|
||||
- Watch the video: [Windows 10 for Mobile Devices: Provisioning Is Not Imaging](https://go.microsoft.com/fwlink/p/?LinkId=615922)
|
||||
|
||||
- [How to bulk-enroll devices with On-premises Mobile Device Management in Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/mdm/deploy-use/bulk-enroll-devices-on-premises-mdm)
|
||||
- [How to bulk-enroll devices with On-premises Mobile Device Management in Microsoft Endpoint Configuration Manager](/configmgr/mdm/deploy-use/bulk-enroll-devices-on-premises-mdm)
|
||||
|
||||
## Related topics
|
||||
|
||||
@ -163,4 +163,4 @@ For details on each specific setting, see [Windows Provisioning settings referen
|
||||
- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md)
|
||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
@ -65,7 +65,7 @@ Windows provisioning XML is the framework that allows Microsoft and OEM componen
|
||||
|
||||
Settings for each component can be declared within that component's package manifest file. These declarations are turned into settings schema that are used by Windows Configuration Designer to expose the potential settings to users to create customizations in the image or in provisioning packages. Windows Configuration Designer translates the user configuration, which is declared through Windows provisioning answer file(s), into the on-device provisioning format.
|
||||
|
||||
When the provisioning engine selects a configuration, the Windows provisioning XML is contained within the selected provisioning data and is passed through the configuration manager and then to the [Windows provisioning CSP](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/provisioning-csp). The Windows provisioning CSP then takes and applies the provisioning to the proper location for the actual component to use.
|
||||
When the provisioning engine selects a configuration, the Windows provisioning XML is contained within the selected provisioning data and is passed through the configuration manager and then to the [Windows provisioning CSP](/windows/client-management/mdm/provisioning-csp). The Windows provisioning CSP then takes and applies the provisioning to the proper location for the actual component to use.
|
||||
|
||||
## Provisioning engine
|
||||
|
||||
@ -82,7 +82,7 @@ The provisioning engine provides the following functionality:
|
||||
|
||||
## Configuration manager
|
||||
|
||||
The configuration manager provides the unified way of managing Windows 10 devices. Configuration is mainly done through the Open Mobile Alliance (OMA) Device Management (DM) and Client Provisioning (CP) protocols. The configuration manager handles and parses these protocol requests from different channels and passes them down to [Configuration Service Providers (CSPs)](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/configuration-service-provider-reference) to perform the specific management requests and settings.
|
||||
The configuration manager provides the unified way of managing Windows 10 devices. Configuration is mainly done through the Open Mobile Alliance (OMA) Device Management (DM) and Client Provisioning (CP) protocols. The configuration manager handles and parses these protocol requests from different channels and passes them down to [Configuration Service Providers (CSPs)](/windows/client-management/mdm/configuration-service-provider-reference) to perform the specific management requests and settings.
|
||||
|
||||
The provisioning engine relies on configuration manager for all of the actual processing and application of a chosen configuration. The provisioning engine determines the stage of provisioning and, based on a set of keys, determines the set of configuration to send to the configuration manager. The configuration manager in turn parses and calls into the CSPs for the setting to be applied.
|
||||
|
||||
@ -178,9 +178,4 @@ After a stand-alone provisioning package is applied to the device, the package i
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -61,7 +61,7 @@ The following table shows the conditions supported in Windows 10 provisioning fo
|
||||
| ProcessorType | P1 | Supported | Supported | String | Use to target settings based on the processor type. |
|
||||
| ProcessorName | P1 | Supported | Supported | String | Use to target settings based on the processor name. |
|
||||
| AoAc ("Always On, Always Connected") | P1 | Supported | Supported | Boolean | Set the value to **0** (false) or **1** (true). If this condition is TRUE, the system supports the S0 low power idle model. |
|
||||
| PowerPlatformRole | P1 | Supported | Supported | Enumeration | Indicates the preferred power management profile. Set the value based on the [POWER_PLATFORM_ROLE enumeration](https://msdn.microsoft.com/library/windows/desktop/aa373174.aspx). |
|
||||
| PowerPlatformRole | P1 | Supported | Supported | Enumeration | Indicates the preferred power management profile. Set the value based on the [POWER_PLATFORM_ROLE enumeration](/windows/win32/api/winnt/ne-winnt-power_platform_role). |
|
||||
| Architecture | P1 | Supported | Supported | String | Matches the PROCESSOR_ARCHITECTURE environment variable. |
|
||||
| Server | P1 | Supported | Supported | Boolean | Set the value to **0** (false) or **1** (true) to identify a server. |
|
||||
| Region | P1 | Supported | Supported | Enumeration | Use to target settings based on country/region, using the 2-digit alpha ISO code per [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2). |
|
||||
@ -316,9 +316,3 @@ The following events trigger provisioning on Windows 10 devices:
|
||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -79,7 +79,7 @@ The following table describes settings that you can configure using the wizards
|
||||
<tr><td valign="top">Set up device</td><td valign="top">Assign device name,</br>enter product key to upgrade Windows,</br>configure shared used,</br>remove pre-installed software</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></br>(Only device name and upgrade key)</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
||||
<tr><td valign="top">Set up network</td><td valign="top">Connect to a Wi-Fi network</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
||||
<tr><td valign="top">Account management</td><td valign="top">Enroll device in Active Directory,</br>enroll device in Azure Active Directory,</br>or create a local administrator account</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
||||
<tr><td valign="top">Bulk Enrollment in Azure AD</td><td valign="top">Enroll device in Azure Active Directory</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, <a href="https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup" data-raw-source="[set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup)">set up Azure AD join in your organization</a>.</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td></tr>
|
||||
<tr><td valign="top">Bulk Enrollment in Azure AD</td><td valign="top">Enroll device in Azure Active Directory</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, <a href="/azure/active-directory/active-directory-azureadjoin-setup" data-raw-source="[set up Azure AD join in your organization](/azure/active-directory/active-directory-azureadjoin-setup)">set up Azure AD join in your organization</a>.</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td></tr>
|
||||
<tr><td valign="top">Add applications</td><td valign="top">Install applications using the provisioning package.</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td></tr>
|
||||
<tr><td valign="top">Add certificates</td><td valign="top">Include a certificate file in the provisioning package.</td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td></tr>
|
||||
<tr><td valign="top">Configure kiosk account and app</td><td valign="top">Create local account to run the kiosk mode app,</br>specify the app to run in kiosk mode</td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td><td align="center" valign="top"><img src="../images/checkmark.png" alt="yes"/></td><td align="center" valign="top"><img src="../images/crossmark.png" alt="no"/></td></tr>
|
||||
@ -89,7 +89,7 @@ The following table describes settings that you can configure using the wizards
|
||||
- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md)
|
||||
- [Instructions for the mobile wizard](../mobile-devices/provisioning-configure-mobile.md)
|
||||
- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard)
|
||||
- [Instructions for the HoloLens wizard](https://docs.microsoft.com/hololens/hololens-provisioning#wizard)
|
||||
- [Instructions for the HoloLens wizard](/hololens/hololens-provisioning#wizard)
|
||||
|
||||
|
||||
>[!NOTE]
|
||||
@ -142,7 +142,7 @@ Windows ICD in Windows 10, version 1607, supported the following scenarios for I
|
||||
* Other MDMs (cert-based enrollment)
|
||||
|
||||
> [!NOTE]
|
||||
> Windows ICD in Windows 10, version 1607, also provided a wizard to create provisioning packages for school PCs. To learn more, see [Set up students' PCs to join domain](https://technet.microsoft.com/edu/windows/index).
|
||||
> Windows ICD in Windows 10, version 1607, also provided a wizard to create provisioning packages for school PCs. To learn more, see [Set up students' PCs to join domain](/education/windows/).
|
||||
|
||||
## Learn more
|
||||
|
||||
@ -164,17 +164,4 @@ For more information about provisioning, watch the following videos:
|
||||
- [PowerShell cmdlets for provisioning Windows 10 (reference)](provisioning-powershell.md)
|
||||
- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md)
|
||||
- [Create a provisioning package with multivariant settings](provisioning-multivariant.md)
|
||||
- [Use Windows Configuration Designer to configure Windows 10 Mobile devices](../mobile-devices/provisioning-configure-mobile.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
- [Use Windows Configuration Designer to configure Windows 10 Mobile devices](../mobile-devices/provisioning-configure-mobile.md)
|
||||
@ -35,17 +35,17 @@ Only settings in the following lists are revertible.
|
||||
The registry-based settings that are revertible when a provisioning package is uninstalled all fall under these categories, which you can find in the Windows Configuration Designer.
|
||||
|
||||
|
||||
- [Wi-Fi Sense](https://msdn.microsoft.com/library/windows/hardware/mt219706.aspx)
|
||||
- [CountryAndRegion](https://msdn.microsoft.com/library/windows/hardware/mt219726.aspx)
|
||||
- [Wi-Fi Sense](../wcd/wcd-connectivityprofiles.md#wifisense)
|
||||
- [CountryAndRegion](../wcd/wcd-countryandregion.md)
|
||||
- DeviceManagement / PGList/ LogicalProxyName
|
||||
- UniversalAppInstall / LaunchAppAtLogin
|
||||
- [Power](https://msdn.microsoft.com/library/windows/hardware/dn953704.aspx)
|
||||
- [TabletMode](https://msdn.microsoft.com/library/windows/hardware/mt297550.aspx)
|
||||
- [Maps](https://msdn.microsoft.com/library/windows/hardware/mt131464.aspx)
|
||||
- [Browser](https://msdn.microsoft.com/library/windows/hardware/mt573151.aspx)
|
||||
- [DeviceFormFactor](https://msdn.microsoft.com/library/windows/hardware/mt243449.aspx)
|
||||
- [USBErrorsOEMOverride](https://msdn.microsoft.com/library/windows/hardware/mt769908.aspx)
|
||||
- [WeakCharger](https://msdn.microsoft.com/library/windows/hardware/mt346401.aspx)
|
||||
- [Power](/previous-versions//dn953704(v=vs.85))
|
||||
- [TabletMode](../wcd/wcd-tabletmode.md)
|
||||
- [Maps](../wcd/wcd-maps.md)
|
||||
- [Browser](../wcd/wcd-browser.md)
|
||||
- [DeviceFormFactor](../wcd/wcd-deviceformfactor.md)
|
||||
- [USBErrorsOEMOverride](/previous-versions/windows/hardware/previsioning-framework/mt769908(v=vs.85))
|
||||
- [WeakCharger](../wcd/wcd-weakcharger.md)
|
||||
|
||||
|
||||
|
||||
@ -53,29 +53,29 @@ The registry-based settings that are revertible when a provisioning package is u
|
||||
|
||||
Here is the list of revertible settings based on configuration service providers (CSPs).
|
||||
|
||||
[ActiveSync CSP](https://msdn.microsoft.com/library/windows/hardware/dn920017.aspx)
|
||||
[AppLocker CSP](https://msdn.microsoft.com/library/windows/hardware/dn920019.aspx)
|
||||
[BrowserFavorite CSP](https://msdn.microsoft.com/library/windows/hardware/dn914758.aspx)
|
||||
[CertificateStore CSP](https://msdn.microsoft.com/library/windows/hardware/dn920021.aspx)
|
||||
[ClientCertificateInstall CSP](https://msdn.microsoft.com/library/windows/hardware/dn920023.aspx)
|
||||
[RootCATrustedCertificates CSP](https://msdn.microsoft.com/library/windows/hardware/dn904970.aspx)
|
||||
[CM_CellularEntries CSP](https://msdn.microsoft.com/library/windows/hardware/dn914761.aspx)
|
||||
[CM_ProxyEntries CSP](https://msdn.microsoft.com/library/windows/hardware/dn914762.aspx)
|
||||
[CMPolicy CSP](https://msdn.microsoft.com/library/windows/hardware/dn914760.aspx)
|
||||
[CMPolicyEnterprise CSP](https://msdn.microsoft.com/library/windows/hardware/mt706463.aspx)
|
||||
[EMAIL2 CSP](https://msdn.microsoft.com/library/windows/hardware/dn904953.aspx)
|
||||
[EnterpriseAPN CSP](https://msdn.microsoft.com/library/windows/hardware/dn958617.aspx)
|
||||
[EnterpriseAppManagement CSP](https://msdn.microsoft.com/library/windows/hardware/dn904955.aspx)
|
||||
[EnterpriseDesktopAppManagement CSP](https://msdn.microsoft.com/library/windows/hardware/dn958620.aspx)
|
||||
[EnterpriseModernAppManagement CSP](https://msdn.microsoft.com/library/windows/hardware/dn904956.aspx)
|
||||
[NAP CSP](https://msdn.microsoft.com/library/windows/hardware/dn914767.aspx)
|
||||
[PassportForWork CSP](https://msdn.microsoft.com/library/windows/hardware/dn987099.aspx)
|
||||
[Provisioning CSP](https://msdn.microsoft.com/library/windows/hardware/mt203665.aspx)
|
||||
[PROXY CSP](https://msdn.microsoft.com/library/windows/hardware/dn914770.aspx)
|
||||
[SecureAssessment CSP](https://msdn.microsoft.com/library/windows/hardware/mt718628.aspx)
|
||||
[VPN CSP](https://msdn.microsoft.com/library/windows/hardware/dn904978.aspx)
|
||||
[VPNv2 CSP](https://msdn.microsoft.com/library/windows/hardware/dn914776.aspx)
|
||||
[WiFi CSP](https://msdn.microsoft.com/library/windows/hardware/dn904981.aspx)
|
||||
[ActiveSync CSP](/windows/client-management/mdm/activesync-csp)
|
||||
[AppLocker CSP](/windows/client-management/mdm/applocker-csp)
|
||||
[BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp)
|
||||
[CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp)
|
||||
[ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp)
|
||||
[RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp)
|
||||
[CM_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp)
|
||||
[CM_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp)
|
||||
[CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp)
|
||||
[CMPolicyEnterprise CSP](/windows/client-management/mdm/cmpolicyenterprise-csp)
|
||||
[EMAIL2 CSP](/windows/client-management/mdm/email2-csp)
|
||||
[EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp)
|
||||
[EnterpriseAppManagement CSP](/windows/client-management/mdm/enterpriseappmanagement-csp)
|
||||
[EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp)
|
||||
[EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp)
|
||||
[NAP CSP](/windows/client-management/mdm/nap-csp)
|
||||
[PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp)
|
||||
[Provisioning CSP](/windows/client-management/mdm/provisioning-csp)
|
||||
[PROXY CSP](/windows/client-management/mdm/proxy-csp)
|
||||
[SecureAssessment CSP](/windows/client-management/mdm/secureassessment-csp)
|
||||
[VPN CSP](/windows/client-management/mdm/vpn-csp)
|
||||
[VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp)
|
||||
[WiFi CSP](/windows/client-management/mdm/wifi-csp)
|
||||
|
||||
|
||||
|
||||
@ -94,9 +94,4 @@ Here is the list of revertible settings based on configuration service providers
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user