mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-19 12:23:37 +00:00
Merge branch '19H1' of https://github.com/MicrosoftDocs/windows-docs-pr into basic-diag-data-edit
This commit is contained in:
@ -9,7 +9,6 @@ ms.localizationpriority: medium
|
||||
author: jdeckerms
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Enable or block Windows Mixed Reality apps in the enterprise
|
||||
@ -34,7 +33,7 @@ Organizations that use Windows Server Update Services (WSUS) must take action to
|
||||
|
||||
2. Windows Mixed Reality Feature on Demand (FOD) is downloaded from Windows Update. If access to Windows Update is blocked, you must manually install the Windows Mixed Reality FOD.
|
||||
|
||||
a. Download the FOD .cab file for [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](http://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab).
|
||||
a. Download the FOD .cab file for [Windows 10, version 1903](https://software-download.microsoft.com/download/pr/Microsoft-Windows-Holographic-Desktop-FOD-Package-31bf3856ad364e35-amd64.cab), [Windows 10, version 1809](https://software-download.microsoft.com/download/pr/microsoft-windows-holographic-desktop-fod-package31bf3856ad364e35amd64_1.cab), [Windows 10, version 1803](https://download.microsoft.com/download/9/9/3/9934B163-FA01-4108-A38A-851B4ACD1244/Microsoft-Windows-Holographic-Desktop-FOD-Package~31bf3856ad364e35~amd64~~.cab), or [Windows 10, version 1709](http://download.microsoft.com/download/6/F/8/6F816172-AC7D-4F45-B967-D573FB450CB7/Microsoft-Windows-Holographic-Desktop-FOD-Package.cab).
|
||||
|
||||
>[!NOTE]
|
||||
>You must download the FOD .cab file that matches your operating system version.
|
||||
|
@ -79,6 +79,7 @@
|
||||
#### [DeviceFormFactor](wcd/wcd-deviceformfactor.md)
|
||||
#### [DeviceInfo](wcd/wcd-deviceinfo.md)
|
||||
#### [DeviceManagement](wcd/wcd-devicemanagement.md)
|
||||
#### [DeviceUpdateCenter](wcd/wcd-deviceupdatecenter.md)
|
||||
#### [DMClient](wcd/wcd-dmclient.md)
|
||||
#### [EditionUpgrade](wcd/wcd-editionupgrade.md)
|
||||
#### [EmbeddedLockdownProfiles](wcd/wcd-embeddedlockdownprofiles.md)
|
||||
@ -102,6 +103,7 @@
|
||||
#### [OtherAssets](wcd/wcd-otherassets.md)
|
||||
#### [Personalization](wcd/wcd-personalization.md)
|
||||
#### [Policies](wcd/wcd-policies.md)
|
||||
#### [Privacy](wcd/wcd-privacy.md)
|
||||
#### [ProvisioningCommands](wcd/wcd-provisioningcommands.md)
|
||||
#### [RcsPresence](wcd/wcd-rcspresence.md)
|
||||
#### [SharedPC](wcd/wcd-sharedpc.md)
|
||||
@ -110,11 +112,13 @@
|
||||
#### [Start](wcd/wcd-start.md)
|
||||
#### [StartupApp](wcd/wcd-startupapp.md)
|
||||
#### [StartupBackgroundTasks](wcd/wcd-startupbackgroundtasks.md)
|
||||
#### [StorageD3InModernStandby](wcd/wcd-storaged3inmodernstandby.md)
|
||||
#### [SurfaceHubManagement](wcd/wcd-surfacehubmanagement.md)
|
||||
#### [TabletMode](wcd/wcd-tabletmode.md)
|
||||
#### [TakeATest](wcd/wcd-takeatest.md)
|
||||
#### [TextInput](wcd/wcd-textinput.md)
|
||||
#### [Theme](wcd/wcd-theme.md)
|
||||
#### [Time](wcd/wcd-time.md)
|
||||
#### [UnifiedWriteFilter](wcd/wcd-unifiedwritefilter.md)
|
||||
#### [UniversalAppInstall](wcd/wcd-universalappinstall.md)
|
||||
#### [UniversalAppUninstall](wcd/wcd-universalappuninstall.md)
|
||||
|
@ -203,7 +203,7 @@ When you use the **Provision kiosk devices** wizard in Windows Configuration Des
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"></br></br>Enable device setup if you want to configure settings on this page.</br></br>**If enabled:**</br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. [See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)</br></br>Toggle **Configure devices for shared use** off. This setting optimizes Windows 10 for shared use scenarios and isn't necessary for a kiosk scenario.</br></br>You can also select to remove pre-installed software from the device. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable network setup if you want to configure settings on this page.</br></br>**If enabled:**</br></br>Toggle **On** or **Off** for wireless network connectivity. If you select **On**, enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>**If enabled:**</br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.</br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>**If enabled:**</br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards.</br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can provision the kiosk app in the **Add applications** step. You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provisioning-packages/provision-pcs-with-apps.md)</br></br>**Warning:** If you click the plus button to add an application, you must specify an application for the provisioning package to validate. If you click the plus button in error, select any executable file in **Installer Path**, and then a **Cancel** button becomes available, allowing you to complete the provisioning package without an application. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>To provision the device with a certificate for the kiosk app, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can create a local standard user account that will be used to run the kiosk app. If you toggle **No**, make sure that you have an existing user account to run the kiosk app.</br></br>If you want to create an account, enter the user name and password, and then toggle **Yes** or **No** to automatically sign in the account when the device starts. (If you encounter issues with auto sign-in after you apply the provisioning package, check the Event Viewer logs for auto logon issues under **Applications and Services Logs\Microsoft\Windows\Authentication User Interface\Operational**.)</br></br>In **Configure the kiosk mode app**, enter the name of the user account that will run the kiosk mode app. Select the type of app to run in kiosk mode, and then enter the path or filename (for a Windows desktop application) or the AUMID (for a Universal Windows app). For a Windows desktop application, you can use the filename if the path to the file is in the PATH environment variable, otherwise the full path is required.</td><td></td></tr>
|
||||
|
@ -44,7 +44,7 @@ The **Provision Windows mobile devices** wizard lets you configure common settin
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"></br></br>Enter a device name.</br></br> Optionally, you can enter a product key to upgrade the device from Windows 10 Mobile to Windows 10 Mobile Enterprise. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Toggle **On** or **Off** for wireless network connectivity. </br></br>If you select **On**, enter the SSID, network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. </br></br> Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. </br></br> Set an expiration date for the token (maximum is 180 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions.</br></br>**Warning:** You must run Windows Configuration Designer on Windows 10 to configure Azure Active Directory enrollment using any of the wizards. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.</td><td></td></tr>
|
||||
</table>
|
||||
|
||||
|
@ -81,7 +81,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L
|
||||
<table>
|
||||
<tr><td style="width:45%" valign="top"></br></br>Enter a name for the device.</br></br>(Optional) Select a license file to upgrade Windows 10 to a different edition. [See the permitted upgrades.](https://technet.microsoft.com/itpro/windows/deploy/windows-10-edition-upgrades)</br></br>Toggle **Yes** or **No** to **Configure devices for shared use**. This setting optimizes Windows 10 for shared use scenarios. [Learn more about shared PC configuration.](../set-up-shared-or-guest-pc.md)</br></br>You can also select to remove pre-installed software from the device. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Toggle **On** or **Off** for wireless network connectivity. If you select **On**, enter the SSID, the network type (**Open** or **WPA2-Personal**), and (if **WPA2-Personal**) the password for the wireless network.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 30 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>Enable account management if you want to configure settings on this page. </br></br>You can enroll the device in Active Directory, enroll in Azure Active Directory, or create a local administrator account on the device</br></br>To enroll the device in Active Directory, enter the credentials for a least-privileged user account to join the device to the domain.</br></br>Before you use a Windows Configuration Designer wizard to configure bulk Azure AD enrollment, [set up Azure AD join in your organization](https://docs.microsoft.com/azure/active-directory/active-directory-azureadjoin-setup). The **maximum number of devices per user** setting in your Azure AD tenant determines how many times the bulk token that you get in the wizard can be used. To enroll the device in Azure AD, select that option and enter a friendly name for the bulk token you will get using the wizard. Set an expiration date for the token (maximum is 180 days from the date you get the token). Click **Get bulk token**. In the **Let's get you signed in** window, enter an account that has permissions to join a device to Azure AD, and then the password. Click **Accept** to give Windows Configuration Designer the necessary permissions. </br></br>To create a local administrator account, select that option and enter a user name and password. </br></br>**Important:** If you create a local account in the provisioning package, you must change the password using the **Settings** app every 42 days. If the password is not changed during that period, the account might be locked out and unable to sign in. </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can install multiple applications, both Windows desktop applications (Win32) and Universal Windows Platform (UWP) apps, in a provisioning package. The settings in this step vary according to the application that you select. For help with the settings, see [Provision PCs with apps](provision-pcs-with-apps.md). </td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>To provision the device with a certificate, click **Add a certificate**. Enter a name for the certificate, and then browse to and select the certificate to be used.</td><td></td></tr>
|
||||
<tr><td style="width:45%" valign="top"> </br></br>You can set a password to protect your provisioning package. You must enter this password when you apply the provisioning package to a device.</td><td></td></tr>
|
||||
|
@ -8,7 +8,6 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Cellular (Windows Configuration Designer reference)
|
||||
@ -52,6 +51,10 @@ Enter the destination path for the BrandingIcon .ico file.
|
||||
|
||||
Enter the service provider name for the mobile operator.
|
||||
|
||||
### DataClassMappingTable
|
||||
|
||||
Enter a customized string for the appropriate [data class](https://docs.microsoft.com/windows/desktop/api/mbnapi/ne-mbnapi-mbn_data_class).
|
||||
|
||||
### NetworkBlockList
|
||||
|
||||
Enter a comma-separated list of mobile country code (MCC) and mobile network code (MCC) pairs (MCC:MNC).
|
||||
|
@ -8,12 +8,26 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Changes to settings in Windows Configuration Designer
|
||||
|
||||
Settings added in Windows 10, version 1809
|
||||
## Settings added in Windows 10, version 1903
|
||||
|
||||
- [DeviceUpdateCenter](wcd-deviceupdatecenter.md)
|
||||
- [Privacy](wcd-privacy.md)
|
||||
- [Time](wcd-time.md)
|
||||
- [Cellular > DataClassMappingTable](wcd-cellular.md#dataclassmappingtable)
|
||||
- [OOBE > EnableCortanaVoice](wcd-oobe.md#enablecortanavoice)
|
||||
- [Policies > LocalPoliciesSecurityOptions](wcd-policies.md#localpoliciessecurityoptions)
|
||||
- [Policies > Power](wcd-policies.md#power)
|
||||
- [StorageD3InModernStandby](wcd-storaged3inmodernstandby.md)
|
||||
|
||||
## Settings removed in Windows 10, version 1903
|
||||
|
||||
- [WLAN](wcd-wlan.md)
|
||||
|
||||
## Settings added in Windows 10, version 1809
|
||||
|
||||
|
||||
- [Browser > AllowPrelaunch](wcd-browser.md#allowprelaunch)
|
||||
@ -74,7 +88,7 @@ Settings added in Windows 10, version 1809
|
||||
- [WindowsHelloForBusiness](wcd-windowshelloforbusiness.md)
|
||||
|
||||
|
||||
Settings removed in Windows 10, version 1809
|
||||
## Settings removed in Windows 10, version 1809
|
||||
|
||||
- [CellCore](wcd-cellcore.md)
|
||||
- [Policies > Browser:](wcd-policies.md#browser)
|
||||
|
22
windows/configuration/wcd/wcd-deviceupdatecenter.md
Normal file
22
windows/configuration/wcd/wcd-deviceupdatecenter.md
Normal file
@ -0,0 +1,22 @@
|
||||
---
|
||||
title: DeviceUpdateCenter (Windows 10)
|
||||
description: This section describes the DeviceUpdateCenter settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# DeviceUpdateCenter (Windows Configuration Designer reference)
|
||||
|
||||
Do not use **DeviceUpdateCenter** settings at this time.
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| All settings | X | | | | |
|
||||
|
@ -8,20 +8,37 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 09/06/2017
|
||||
---
|
||||
|
||||
# OOBE (Windows Configuration Designer reference)
|
||||
|
||||
Use to configure settings for the Out Of Box Experience (OOBE).
|
||||
Use to configure settings for the [Out Of Box Experience (OOBE)](https://docs.microsoft.com/windows-hardware/customize/desktop/customize-oobe).
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [Desktop > EnableCortanaVoice](#enablecortanavoice) | X | | | | |
|
||||
| [Desktop > HideOobe](#hided) | X | | | | |
|
||||
| [Mobile > EnforceEnterpriseProvisioning](#nforce) | | X | | | |
|
||||
| [Mobile > HideOobe](#hidem) | | X | | | |
|
||||
| [Desktop > HideOobe](#hided) | X | | | | |
|
||||
|
||||
|
||||
|
||||
|
||||
## EnableCortanaVoice
|
||||
|
||||
Use this setting to control whether Cortana voice-over is enabled during OOBE. The voice-over is disabled by default on Windows 10 Pro, Education, and Enterprise. The voice-over is enabled by default on Windows 10 Home. Select **True** to enable voice-over during OOBE, or **False** to disable voice-over during OOBE.
|
||||
|
||||
<span id="hided" />
|
||||
## HideOobe for desktop
|
||||
|
||||
When set to **True**, it hides the interactive OOBE flow for Windows 10.
|
||||
|
||||
>[!NOTE]
|
||||
>You must create a user account if you set the value to true or the device will not be usable.
|
||||
|
||||
When set to **False**, the OOBE screens are displayed.
|
||||
|
||||
<span id="nforce" />
|
||||
## EnforceEnterpriseProvisioning
|
||||
@ -36,13 +53,3 @@ When set to **False**, it does not force the OOBE flow to the enterprise provisi
|
||||
When set to **True**, it hides the interactive OOBE flow for Windows 10 Mobile.
|
||||
|
||||
When set to **False**, the OOBE screens are displayed.
|
||||
|
||||
<span id="hided" />
|
||||
## HideOobe for desktop
|
||||
|
||||
When set to **True**, it hides the interactive OOBE flow for Windows 10.
|
||||
|
||||
>[!NOTE]
|
||||
>You must create a user account if you set the value to true or the device will not be usable.
|
||||
|
||||
When set to **False**, the OOBE screens are displayed.
|
@ -8,7 +8,6 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# Policies (Windows Configuration Designer reference)
|
||||
@ -154,7 +153,7 @@ PreventTabPreloading | Prevent Microsoft Edge from starting and loading the Star
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [AllowCamera](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#camera-allowcamera) | Disable or enable the camera. | X | X | X | X | |
|
||||
| [AllowCamera](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#camera-allowcamera) | Disable or enable the camera. | X | X | X | | |
|
||||
|
||||
|
||||
## Connectivity
|
||||
@ -337,12 +336,46 @@ To configure multiple URLs for **Blocked URL Exceptions** or **Blocked URLs** in
|
||||
5. Open the project again in Windows Configuration Designer.
|
||||
6. Export the package. Ensure you do not revisit the created policies under Kiosk Browser or else the null character will be removed.
|
||||
|
||||
## LocalPoliciesSecurityOptions
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [InteractiveLogon_DoNotDisplayLastSignedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#localpoliciessecurityoptions-interactivelogon-donotdisplaylastsignedin) | Specify whether the Windows sign-in screen will show the username of the last person who signed in. | X | | | | |
|
||||
| [Shutdown_AllowSystemtobeShutDownWithoutHavingToLogOn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#localpoliciessecurityoptions-shutdown-allowsystemtobeshutdownwithouthavingtologon) | Specify whether a computer can be shut down without signing in. | X | | | | |
|
||||
| [UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#localpoliciessecurityoptions-useraccountcontrol-behavioroftheelevationpromptforstandardusers) | Configure how an elevation prompt should behave for standard users. | X | | | | |
|
||||
|
||||
## Location
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [EnableLocation](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#location-enablelocation) | Do not use. | | | | | |
|
||||
|
||||
## Power
|
||||
|
||||
| Setting | Description | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [AllowStandbyStatesWhenSleepingOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#allowstandbystateswhensleepingonbattery) | Specify whether Windows can use standby states when putting the computer in a sleep state while on battery. | X | | | | |
|
||||
| [AllowStandbyWhenSleepingPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#allowstandbystateswhensleepingpluggedin) | Specify whether Windows can use standby states when putting the computer in a sleep state while plugged in. | X | | | | |
|
||||
| [DisplayOffTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#displayofftimeoutonbattery) | Specify the period of inactivity before Windows turns off the display while on battery. | X | | | | |
|
||||
| [DisplayOffTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#displayofftimeoutpluggedin) | Specify the period of inactivity before Windows turns off the display while plugged in. | X | | | | |
|
||||
| [EnergySaverBatteryThresholdOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#energysaverbatterythresholdonbattery) | Specify the battery charge level at which Energy Saver is turned on while on battery. | X | | | | |
|
||||
| [EnergySaverBatteryThresholdPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#EnergySaverBatteryThresholdPluggedIn) | Specify the battery charge level at which Energy Saver is turned on while plugged in. | X | | | | |
|
||||
| [HibernateTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#hibernatetimeoutonbattery) | Specify the period of inactivity before Windows transitions the system to hibernate while on battery. | X | | | | |
|
||||
| [HibernateTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#hibernatetimeoutpluggedin) | Specify the period of inactivity before Windows transitions the system to hibernate while plugged in. | X | | | | |
|
||||
| [RequirePasswordWhenComputerWakesOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#requirepasswordwhencomputerwakesonbattery) | Specify whether the user is prompted for a password when the system resumes from sleep while on battery. | X | | | | |
|
||||
| [RequirePasswordWhenComputerWakesPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#requirepasswordwhencomputerwakespluggedin) | Specify whether the user is prompted for a password when the system resumes from sleep while plugged in. | X | | | | |
|
||||
| [SelectLidCloseActionBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectlidcloseactionpluggedin) | Select the action to be taken when a user closes the lid on a mobile device while on battery. | X | | | | |
|
||||
| [SelectLidCloseActionPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectlidcloseactionpluggedin) | Select the action to be taken when a user closes the lid on a mobile device while on plugged in. | X | | | | |
|
||||
| [SelectPowerButtonActionOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectpowerbuttonactiononbattery) | Select the action to be taken when the user presses the power button while on battery. | X | | | | |
|
||||
| [SelectPowerButtonActionPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectpowerbuttonactionpluggedin) | Select the action to be taken when the user presses the power button while on plugged in. | X | | | | |
|
||||
| [SelectSleepButtonActionOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectsleepbuttonactiononbattery) | Select the action to be taken when the user presses the sleep button while on battery. | X | | | | |
|
||||
| [SelectSleepButtonActionPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#selectsleepbuttonactionpluggedin) | Select the action to be taken when the user presses the sleep button while plugged in. | X | | | | |
|
||||
| [StandbyTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#StandbyTimeoutOnBattery) | Specify the period of inactivity before Windows transitions the system to sleep while on battery. | X | | | | |
|
||||
| [StandbyTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#standbytimeoutpluggedin) | Specify the period of inactivity before Windows transitions the system to sleep while plugged in. | X | | | | |
|
||||
| [TurnOffHybridSleepOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#turnoffhybridsleeponbattery) | Turn off hybrid sleep while on battery. | X | | | | |
|
||||
| [TurnOffHybridSleepPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#turnoffhybridsleeppluggedin) | Turn off hybrid sleep while plugged in. | X | | | | |
|
||||
| [UnattendedSleepTimeoutOnBattery](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#unattendedsleeptimeoutonbattery) | Specify the period of inactivity before Windows transitions the system to sleep automatically when a user is not present while on battery. | X | | | | |
|
||||
| [UnattendedSleepTimeoutPluggedIn](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#unattendedsleeptimeoutpluggedin) | Specify the period of inactivity before Windows transitions the system to sleep automatically when a user is not present while plugged in. | X | | | | |
|
||||
|
||||
## Privacy
|
||||
|
||||
@ -534,7 +567,7 @@ ConfigureTelemetryOptInSettingsUx | This policy setting determines whether peopl
|
||||
| [AllowInternetSharing](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-allowinternetsharing) | Allow Internet sharing. | X | X | | | |
|
||||
| [AllowManualWiFiConfiguration](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-allowmanualwificonfiguration) | Allow connecting to Wi-Fi outside of MDM server-installed networks. | | X | | | |
|
||||
| [AllowWiFi](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-allowwifi) | Allow Wi-Fi connections. | | X | | | |
|
||||
| [WLANScanMode](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-wlanscanmode) | Configure the WLAN scanning behavior and how aggressively devices should be actively scanning for Wi-Fi networks to get devices connected. | X | X | X | X | X |
|
||||
| [WLANScanMode](https://docs.microsoft.com/windows/client-management/mdm/policy-configuration-service-provider#wifi-wlanscanmode) | Configure the WLAN scanning behavior and how aggressively devices should be actively scanning for Wi-Fi networks to get devices connected. | X | X | X | | X |
|
||||
|
||||
## WindowsInkWorkspace
|
||||
|
||||
|
29
windows/configuration/wcd/wcd-privacy.md
Normal file
29
windows/configuration/wcd/wcd-privacy.md
Normal file
@ -0,0 +1,29 @@
|
||||
---
|
||||
title: Privacy (Windows 10)
|
||||
description: This section describes the Privacy settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Privacy (Windows Configuration Designer reference)
|
||||
|
||||
Use **Privacy** to configure settings for app activation with voice.
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| All settings | X | X | X | | X |
|
||||
|
||||
## LetAppsActivateWithVoice
|
||||
|
||||
Select between **User is in control**, **Force allow**, or **Force deny**.
|
||||
|
||||
## LetAppsActivateWithVoiceAboveLock
|
||||
|
||||
Select between **User is in control**, **Force allow**, or **Force deny**.
|
24
windows/configuration/wcd/wcd-storaged3inmodernstandby.md
Normal file
24
windows/configuration/wcd/wcd-storaged3inmodernstandby.md
Normal file
@ -0,0 +1,24 @@
|
||||
---
|
||||
title: StorageD3InModernStandby (Windows 10)
|
||||
description: This section describes the StorageD3InModernStandby settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# StorageD3InModernStandby (Windows Configuration Designer reference)
|
||||
|
||||
Use **StorageD3InModernStandby** to enable or disable low power state (D3) during standby. When this setting is configured to **Enable Storage Device D3**, SATA and NVMe devices will be able to enter the D3 state when the system transits to modern standby state, if they are using a Microsoft inbox driver such as StorAHCI, StorNVMe.
|
||||
|
||||
[Learn more about device power states.](https://docs.microsoft.com/windows-hardware/drivers/kernel/device-power-states)
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| All settings | X | X | X | | X |
|
||||
|
36
windows/configuration/wcd/wcd-time.md
Normal file
36
windows/configuration/wcd/wcd-time.md
Normal file
@ -0,0 +1,36 @@
|
||||
---
|
||||
title: Time (Windows 10)
|
||||
description: This section describes the Time settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer.
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
---
|
||||
|
||||
# Time
|
||||
|
||||
Use **Time** to configure settings for time zone setup for Windows 10, version (TBD) and later.
|
||||
|
||||
## Applies to
|
||||
|
||||
| Setting | Desktop editions | Mobile editions | Surface Hub | HoloLens | IoT Core |
|
||||
| --- | :---: | :---: | :---: | :---: | :---: |
|
||||
| [ProvisionSetTimeZone](#provisionsettimezone) | X | | | | |
|
||||
|
||||
## ProvisionSetTimeZone
|
||||
|
||||
Set to **True** to skip time zone assignment when the first user signs in, in which case the device will remain in its default time zone. For the proper configuration, you should also use **Policies > TimeLanguageSettings > ConfigureTimeZone** to set the default time zone.
|
||||
|
||||
>[!TIP]
|
||||
>Configuring a time zone in **Policies > TimeLanguageSettings > ConfigureTimeZone** accomplishes the same purpose as setting **ProvisionSetTimeZone** to **True**, so you don't need to configure both settings.
|
||||
|
||||
Set to **False** for time zone assignment to occur when the first user signs in. The user will be prompted to select a time zone during first sign-in.
|
||||
|
||||
>[!NOTE]
|
||||
>Do not set **Time > ProvisionSetTimeZone** to **False** and also set a time zone in **Policies > TimeLanguageSettings > ConfigureTimeZone**.
|
||||
|
||||
|
||||
|
@ -8,7 +8,6 @@ author: jdeckerMS
|
||||
ms.localizationpriority: medium
|
||||
ms.author: jdecker
|
||||
ms.topic: article
|
||||
ms.date: 10/02/2018
|
||||
---
|
||||
|
||||
# WLAN (reference)
|
||||
|
@ -24,34 +24,34 @@ This section describes the settings that you can configure in [provisioning pack
|
||||
| [ADMXIngestion](wcd-admxingestion.md) | X | | | | |
|
||||
| [AssignedAccess](wcd-assignedaccess.md) | X | | | X | |
|
||||
| [AutomaticTime](wcd-automatictime.md) | | X | | | |
|
||||
| [Browser](wcd-browser.md) | X | X | X | X | |
|
||||
| [Browser](wcd-browser.md) | X | X | X | | |
|
||||
| [CallAndMessagingEnhancement](wcd-callandmessagingenhancement.md) | | X | | | |
|
||||
| [Calling](wcd-calling.md) | | X | | | |
|
||||
| [CellCore](wcd-cellcore.md) | X | X | | | |
|
||||
| [Cellular](wcd-cellular.md) | X | | | | |
|
||||
| [Certificates](wcd-certificates.md) | X | X | X | X | X |
|
||||
| [CleanPC](wcd-cleanpc.md) | X | | | | |
|
||||
| [Connections](wcd-connections.md) | X | X | X | X | |
|
||||
| [Connections](wcd-connections.md) | X | X | X | | |
|
||||
| [ConnectivityProfiles](wcd-connectivityprofiles.md) | X | X | X | X | |
|
||||
| [CountryAndRegion](wcd-countryandregion.md) | X | X | X | X | |
|
||||
| [CountryAndRegion](wcd-countryandregion.md) | X | X | X | | |
|
||||
| [DesktopBackgroundAndColors](wcd-desktopbackgroundandcolors.md) | X | | | | |
|
||||
| [DeveloperSetup](wcd-developersetup.md) | | | | X | |
|
||||
| [DeviceFormFactor](wcd-deviceformfactor.md) | X | X | X | X | |
|
||||
| [DeviceFormFactor](wcd-deviceformfactor.md) | X | X | X | | |
|
||||
| [DeviceInfo](wcd-deviceinfo.md) | | X | | | |
|
||||
| [DeviceManagement](wcd-devicemanagement.md) | X | X | X | X | |
|
||||
| [DMClient](wcd-dmclient.md) | X | X | X | X | X |
|
||||
| [EditionUpgrade](wcd-editionupgrade.md) | X | X | X | X | |
|
||||
| [DeviceUpdateCenter](wcd-deviceupdatecenter.md) | X | | | | |
|
||||
| [DMClient](wcd-dmclient.md) | X | X | X | | X |
|
||||
| [EditionUpgrade](wcd-editionupgrade.md) | X | X | | X | |
|
||||
| [EmbeddedLockdownProfiles](wcd-embeddedlockdownprofiles.md) | | X | | | |
|
||||
| [FirewallConfiguration](wcd-firewallconfiguration.md) | | | | | X |
|
||||
| [FirstExperience](wcd-firstexperience.md) | | | | X | |
|
||||
| [Folders](wcd-folders.md) |X | X | X | X | |
|
||||
| [HotSpot](wcd-hotspot.md) | | | | | |
|
||||
| [Folders](wcd-folders.md) |X | X | X | | |
|
||||
| [InitialSetup](wcd-initialsetup.md) | | X | | | |
|
||||
| [InternetExplorer](wcd-internetexplorer.md) | | X | | | |
|
||||
| [KioskBrowser](wcd-kioskbrowser.md) | | | | | X |
|
||||
| [Licensing](wcd-licensing.md) | X | | | | |
|
||||
| [Location](wcd-location.md) | | | | | X |
|
||||
| [Maps](wcd-maps.md) |X | X | X | X | |
|
||||
| [Maps](wcd-maps.md) |X | X | X | | |
|
||||
| [Messaging](wcd-messaging.md) | | X | | | |
|
||||
| [ModemConfigurations](wcd-modemconfigurations.md) | | X | | | |
|
||||
| [Multivariant](wcd-multivariant.md) | | X | | | |
|
||||
@ -62,26 +62,29 @@ This section describes the settings that you can configure in [provisioning pack
|
||||
| [OtherAssets](wcd-otherassets.md) | | X | | | |
|
||||
| [Personalization](wcd-personalization.md) | X | | | | |
|
||||
| [Policies](wcd-policies.md) | X | X | X | X | X |
|
||||
| [Privacy](wcd-folders.md) |X | X | X | | X |
|
||||
| [ProvisioningCommands](wcd-provisioningcommands.md) | X | | | | |
|
||||
[RcsPresence](wcd-rcspresence.md) | | X | | | |
|
||||
| [RcsPresence](wcd-rcspresence.md) | | X | | | |
|
||||
| [SharedPC](wcd-sharedpc.md) | X | | | | |
|
||||
| [Shell](wcd-shell.md) | | X | | | |
|
||||
| [SMISettings](wcd-smisettings.md) | X | | | | |
|
||||
| [Start](wcd-start.md) | X | X | | | |
|
||||
| [StartupApp](wcd-startupapp.md) | | | | | X |
|
||||
| [StartupBackgroundTasks](wcd-startupbackgroundtasks.md) | | | | | X |
|
||||
| [StorageD3InModernStandby](wcd-storaged3inmodernstandby.md) |X | X | X | | X |
|
||||
| [SurfaceHubManagement](wcd-surfacehubmanagement.md) | | | X | | |
|
||||
| [TabletMode](wcd-tabletmode.md) |X | X | X | X | |
|
||||
| [TabletMode](wcd-tabletmode.md) |X | X | X | | |
|
||||
| [TakeATest](wcd-takeatest.md) | X | | | | |
|
||||
| [TextInput](wcd-textinput.md) | | X | | | |
|
||||
| [Theme](wcd-theme.md) | | X | | | |
|
||||
| [Time](wcd-time.md) | X | | | | |
|
||||
| [UnifiedWriteFilter](wcd-unifiedwritefilter.md) | X | | | | X |
|
||||
| [UniversalAppInstall](wcd-universalappinstall.md) | X | X | X | X | X |
|
||||
| [UniversalAppUninstall](wcd-universalappuninstall.md) | X | X | X | X | X |
|
||||
| [WeakCharger](wcd-weakcharger.md) |X | X | X | X | |
|
||||
| [UniversalAppInstall](wcd-universalappinstall.md) | X | X | X | | X |
|
||||
| [UniversalAppUninstall](wcd-universalappuninstall.md) | X | X | X | | X |
|
||||
| [UsbErrorsOEMOverride](wcd-usberrorsoemoverride.md) | X | X | X | | |
|
||||
| [WeakCharger](wcd-weakcharger.md) |X | X | X | | |
|
||||
| [WindowsHelloForBusiness](wcd-windowshelloforbusiness.md) | X | | | | |
|
||||
| [WindowsTeamSettings](wcd-windowsteamsettings.md) | | | X | | |
|
||||
| [WLAN](wcd-wlan.md) | | | | X | |
|
||||
| [Workplace](wcd-workplace.md) |X | X | X | X | X |
|
||||
| [Workplace](wcd-workplace.md) |X | X | X | | X |
|
||||
|
||||
|
||||
|
@ -88,7 +88,7 @@ For examples of activation issues, see [Troubleshoot the user experience](https:
|
||||
## Azure Active Directory-joined VMs
|
||||
|
||||
>[!IMPORTANT]
|
||||
>Azure Active Directory (Azure AD) provisioning packages have a 30 day limit on bulk token usage. You will need to update the provisioning package and re-inject it into the image after 30 days. Existing virtual machines that are Azure AD-joined and deployed will not need to be recreated.
|
||||
>Azure Active Directory (Azure AD) provisioning packages have a 180 day limit on bulk token usage. You will need to update the provisioning package and re-inject it into the image after 180 days. Existing virtual machines that are Azure AD-joined and deployed will not need to be recreated.
|
||||
|
||||
For Azure AD-joined VMs, follow the same instructions (above) as for [Active Directory-joined VMs](#active-directory-joined-vms) with the following exceptions:
|
||||
- In step 9, during setup with Windows Configuration Designer, under **Name**, type a name for the project that indicates it is not for Active Directory joined VMs, such as **Desktop Bulk Enrollment Token Pro GVLK**.
|
||||
|
@ -6,7 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
ms.localizationpriority: medium
|
||||
author: justinha
|
||||
author: qrscharmed
|
||||
ms.author: justinha
|
||||
ms.date: 03/28/2019
|
||||
|
||||
@ -59,6 +59,12 @@ Answering frequently asked questions about Windows Defender Application Guard (A
|
||||
|**A:** |WDAG requires proxies to have a symbolic name, not just an IP address. IP-Literal proxy settings such as “192.168.1.4:81” can be annotated as “itproxy:81” or using a record such as “P19216810010” for a proxy with an IP address of 192.168.100.10. This applies to Windows 10 Enterprise edition, 1709 or higher.|
|
||||
<br>
|
||||
|
||||
| | |
|
||||
|---|----------------------------|
|
||||
|**Q:** |Which Input Method Editors (IME) in 19H1 are not supported?|
|
||||
|**A:** |The following Input Method Editors (IME) introduced in Windows 10, version 1903 are currently not supported in WDAG.<br>Vietnam Telex keyboard<br>Vietnam number key-based keyboard<br>Hindi phonetic keyboard<br>Bangla phonetic keyboard<br>Marathi phonetic keyboard<br>Telugu phonetic keyboard<br>Tamil phonetic keyboard<br>Kannada phonetic keyboard<br>Malayalam phonetic keyboard<br>Gujarati phonetic keyboard<br>Odia phonetic keyboard<br>Punjabi phonetic keyboard|
|
||||
<br>
|
||||
|
||||
| | |
|
||||
|---|----------------------------|
|
||||
|**Q:** |I enabled the hardware acceleration policy on my Windows 10 Enterprise, version 1803 deployment. Why are my users still only getting CPU rendering?|
|
||||
|
Reference in New Issue
Block a user