deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Updated

Browse Source
This commit is contained in:
nimishasatapathy 2021-05-05 17:02:53 +05:30
parent 90a0149692
commit f1b3f2aa0d
6 changed files with 65 additions and 270 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
windows/client-management/mdm/bitlocker-csp.md
View File

@ -271,7 +271,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Require addition
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -280,7 +280,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Require addition
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -379,7 +379,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Configure minimu
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -388,7 +388,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Configure minimu
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -456,7 +456,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Configure pre-bo
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -465,7 +465,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Configure pre-bo
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -545,7 +545,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Choose how BitLo
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -554,7 +554,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Choose how BitLo
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -642,7 +642,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Choose how BitLo
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -651,7 +651,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Choose how BitLo
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -748,7 +748,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Deny write acces
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -757,7 +757,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Deny write acces
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -817,7 +817,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Deny write acces
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -826,7 +826,7 @@ This setting is a direct mapping to the Bitlocker Group Policy "Deny write acces
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -902,7 +902,7 @@ Allows the admin to disable the warning prompt for other disk encryption on the
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -911,7 +911,7 @@ Allows the admin to disable the warning prompt for other disk encryption on the
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -966,7 +966,7 @@ If "AllowWarningForOtherDiskEncryption" is not set, or is set to "1", "RequireDe
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -975,7 +975,7 @@ If "AllowWarningForOtherDiskEncryption" is not set, or is set to "1", "RequireDe
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -1021,7 +1021,7 @@ This setting initiates a client-driven recovery password refresh after an OS dri
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -1030,7 +1030,7 @@ This setting initiates a client-driven recovery password refresh after an OS dri
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -1076,7 +1076,7 @@ Each server-side recovery key rotation is represented by a request ID. The serve
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -1085,7 +1085,7 @@ Each server-side recovery key rotation is represented by a request ID. The serve
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -1121,7 +1121,7 @@ This node reports compliance state of device encryption on the system.
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -1130,7 +1130,7 @@ This node reports compliance state of device encryption on the system.
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -1189,7 +1189,7 @@ Status code can be one of the following:
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -1198,7 +1198,7 @@ Status code can be one of the following:
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>
<!--/SupportedSKUs--> <!--/SupportedSKUs-->
@ -1224,7 +1224,7 @@ This node needs to be queried in synchronization with RotateRecoveryPasswordsSta
<th>Enterprise</th> <th>Enterprise</th>
<th>Education</th> <th>Education</th>
<th>Mobile</th> <th>Mobile</th>
<th>Mobile Enterprise</th>
</tr> </tr>
<tr> <tr>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
@ -1233,7 +1233,7 @@ This node needs to be queried in synchronization with RotateRecoveryPasswordsSta
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/checkmark.png" alt="check mark" /></td> <td><img src="images/checkmark.png" alt="check mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td> <td><img src="images/crossmark.png" alt="cross mark" /></td>
<td><img src="images/crossmark.png" alt="cross mark" /></td>
</tr> </tr>
</table> </table>

191
windows/client-management/mdm/configuration-service-provider-reference.md
View File

File diff suppressed because it is too large Load Diff

68
windows/client-management/mdm/device-update-management.md
View File

@ -143,7 +143,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-activehoursend"></a>**Update/ActiveHoursEnd** <a href="" id="update-activehoursend"></a>**Update/ActiveHoursEnd**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1607. Allows the IT admin (when used with <strong>Update/ActiveHoursStart</strong>) to manage a range of active hours where update reboots are not scheduled. This value sets the end time. There is a 12 hour maximum from start time. <p style="margin-left: 20px">Added in Windows 10, version 1607. Allows the IT admin (when used with <strong>Update/ActiveHoursStart</strong>) to manage a range of active hours where update reboots are not scheduled. This value sets the end time. There is a 12 hour maximum from start time.
@ -157,8 +157,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-activehoursmaxrange"></a>**Update/ActiveHoursMaxRange** <a href="" id="update-activehoursmaxrange"></a>**Update/ActiveHoursMaxRange**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education.
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT admin to specify the max active hours range. This value sets max number of active hours from start time. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT admin to specify the max active hours range. This value sets max number of active hours from start time.
@ -168,7 +167,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-activehoursstart"></a>**Update/ActiveHoursStart** <a href="" id="update-activehoursstart"></a>**Update/ActiveHoursStart**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education.
<p style="margin-left: 20px">Added in Windows 10, version 1607. Allows the IT admin (when used with <strong>Update/ActiveHoursEnd</strong>) to manage a range of hours where update reboots are not scheduled. This value sets the start time. There is a 12 hour maximum from end time. <p style="margin-left: 20px">Added in Windows 10, version 1607. Allows the IT admin (when used with <strong>Update/ActiveHoursEnd</strong>) to manage a range of hours where update reboots are not scheduled. This value sets the start time. There is a 12 hour maximum from end time.
@ -182,7 +181,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-allowautoupdate"></a>**Update/AllowAutoUpdate** <a href="" id="update-allowautoupdate"></a>**Update/AllowAutoUpdate**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education.
<p style="margin-left: 20px">Enables the IT admin to manage automatic update behavior to scan, download, and install updates. <p style="margin-left: 20px">Enables the IT admin to manage automatic update behavior to scan, download, and install updates.
@ -218,7 +217,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-allownonmicrosoftsignedupdate"></a>**Update/AllowNonMicrosoftSignedUpdate** <a href="" id="update-allownonmicrosoftsignedupdate"></a>**Update/AllowNonMicrosoftSignedUpdate**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise and Windows 10 Education.
<p style="margin-left: 20px">Allows the IT admin to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found at the UpdateServiceUrl location. This policy supports using WSUS for 3rd party software and patch distribution. <p style="margin-left: 20px">Allows the IT admin to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found at the UpdateServiceUrl location. This policy supports using WSUS for 3rd party software and patch distribution.
@ -234,7 +233,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-allowupdateservice"></a>**Update/AllowUpdateService** <a href="" id="update-allowupdateservice"></a>**Update/AllowUpdateService**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft. <p style="margin-left: 20px">Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft.
@ -254,7 +253,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-autorestartnotificationschedule"></a>**Update/AutoRestartNotificationSchedule** <a href="" id="update-autorestartnotificationschedule"></a>**Update/AutoRestartNotificationSchedule**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart reminder notifications. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart reminder notifications.
@ -265,7 +264,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-autorestartrequirednotificationdismissal"></a>**Update/AutoRestartRequiredNotificationDismissal** <a href="" id="update-autorestartrequirednotificationdismissal"></a>**Update/AutoRestartRequiredNotificationDismissal**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the method by which the auto-restart required notification is dismissed. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the method by which the auto-restart required notification is dismissed.
@ -277,7 +276,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-branchreadinesslevel"></a>**Update/BranchReadinessLevel** <a href="" id="update-branchreadinesslevel"></a>**Update/BranchReadinessLevel**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1607. Allows the IT admin to set which branch a device receives their updates from. <p style="margin-left: 20px">Added in Windows 10, version 1607. Allows the IT admin to set which branch a device receives their updates from.
@ -299,7 +298,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-deferqualityupdatesperiodindays"></a>**Update/DeferQualityUpdatesPeriodInDays** <a href="" id="update-deferqualityupdatesperiodindays"></a>**Update/DeferQualityUpdatesPeriodInDays**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1607. Defers Quality Updates for the specified number of days. <p style="margin-left: 20px">Added in Windows 10, version 1607. Defers Quality Updates for the specified number of days.
@ -308,7 +307,7 @@ The following diagram shows the Update policies in a tree format.
<a href="" id="update-deferupdateperiod"></a>**Update/DeferUpdatePeriod** <a href="" id="update-deferupdateperiod"></a>**Update/DeferUpdatePeriod**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
> >
> Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use DeferUpdatePeriod for Windows 10, version 1511 devices. > Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use DeferUpdatePeriod for Windows 10, version 1511 devices.
@ -317,11 +316,6 @@ The following diagram shows the Update policies in a tree format.
<p style="margin-left: 20px">Supported values are 0-4, which refers to the number of weeks to defer updates. <p style="margin-left: 20px">Supported values are 0-4, which refers to the number of weeks to defer updates.
<p style="margin-left: 20px">In Windows 10 Mobile Enterprise version 1511 devices set to automatic updates, for DeferUpdatePeriod to work, you must set the following:
- Update/RequireDeferUpgrade must be set to 1
- System/AllowTelemetry must be set to 1 or higher
<p style="margin-left: 20px">If the &quot;Specify intranet Microsoft update service location&quot; policy is enabled, then the &quot;Defer upgrades by&quot;, &quot;Defer updates by&quot; and &quot;Pause Updates and Upgrades&quot; settings have no effect. <p style="margin-left: 20px">If the &quot;Specify intranet Microsoft update service location&quot; policy is enabled, then the &quot;Defer upgrades by&quot;, &quot;Defer updates by&quot; and &quot;Pause Updates and Upgrades&quot; settings have no effect.
<p style="margin-left: 20px">If the Allow Telemetry policy is enabled and the Options value is set to 0, then the &quot;Defer upgrades by&quot;, &quot;Defer updates by&quot; and &quot;Pause Updates and Upgrades&quot; settings have no effect. <p style="margin-left: 20px">If the Allow Telemetry policy is enabled and the Options value is set to 0, then the &quot;Defer upgrades by&quot;, &quot;Defer updates by&quot; and &quot;Pause Updates and Upgrades&quot; settings have no effect.
@ -397,7 +391,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-engagedrestartdeadline"></a>**Update/EngagedRestartDeadline** <a href="" id="update-engagedrestartdeadline"></a>**Update/EngagedRestartDeadline**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the deadline in days before automatically scheduling and executing a pending restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to be automatically executed within the specified period. If no deadline is specified or deadline is set to 0, the restart will not be automatically executed and will remain Engaged restart (pending user scheduling). <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the deadline in days before automatically scheduling and executing a pending restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to be automatically executed within the specified period. If no deadline is specified or deadline is set to 0, the restart will not be automatically executed and will remain Engaged restart (pending user scheduling).
@ -408,7 +402,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-engagedrestartsnoozeschedule"></a>**Update/EngagedRestartSnoozeSchedule** <a href="" id="update-engagedrestartsnoozeschedule"></a>**Update/EngagedRestartSnoozeSchedule**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to control the number of days a user can snooze Engaged restart reminder notifications. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to control the number of days a user can snooze Engaged restart reminder notifications.
@ -419,7 +413,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-engagedrestarttransitionschedule"></a>**Update/EngagedRestartTransitionSchedule** <a href="" id="update-engagedrestarttransitionschedule"></a>**Update/EngagedRestartTransitionSchedule**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to control the timing before transitioning from Auto restarts scheduled outside of active hours to Engaged restart, which requires the user to schedule. The period can be set between 2 and 30 days from the time the restart becomes pending. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to control the timing before transitioning from Auto restarts scheduled outside of active hours to Engaged restart, which requires the user to schedule. The period can be set between 2 and 30 days from the time the restart becomes pending.
@ -484,7 +478,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-pausedeferrals"></a>**Update/PauseDeferrals** <a href="" id="update-pausedeferrals"></a>**Update/PauseDeferrals**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
> >
> Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use PauseDeferrals for Windows 10, version 1511 devices. > Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use PauseDeferrals for Windows 10, version 1511 devices.
@ -515,7 +509,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-pausequalityupdates"></a>**Update/PauseQualityUpdates** <a href="" id="update-pausequalityupdates"></a>**Update/PauseQualityUpdates**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1607. Allows IT Admins to pause Quality Updates. <p style="margin-left: 20px">Added in Windows 10, version 1607. Allows IT Admins to pause Quality Updates.
@ -527,7 +521,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-requiredeferupgrade"></a>**Update/RequireDeferUpgrade** <a href="" id="update-requiredeferupgrade"></a>**Update/RequireDeferUpgrade**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
> >
> Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use RequireDeferUpgrade for Windows 10, version 1511 devices. > Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in [Changes in Windows 10, version 1607 for update management](device-update-management.md#windows10version1607forupdatemanagement). You can continue to use RequireDeferUpgrade for Windows 10, version 1511 devices.
@ -542,7 +536,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-requireupdateapproval"></a>**Update/RequireUpdateApproval** <a href="" id="update-requireupdateapproval"></a>**Update/RequireUpdateApproval**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<br> <br>
@ -561,7 +555,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-scheduleimminentrestartwarning"></a>**Update/ScheduleImminentRestartWarning** <a href="" id="update-scheduleimminentrestartwarning"></a>**Update/ScheduleImminentRestartWarning**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart imminent warning notifications. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart imminent warning notifications.
@ -572,7 +566,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-scheduledinstallday"></a>**Update/ScheduledInstallDay** <a href="" id="update-scheduledinstallday"></a>**Update/ScheduledInstallDay**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Enables the IT admin to schedule the day of the update installation. <p style="margin-left: 20px">Enables the IT admin to schedule the day of the update installation.
@ -594,7 +588,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-scheduledinstalltime"></a>**Update/ScheduledInstallTime** <a href="" id="update-scheduledinstalltime"></a>**Update/ScheduledInstallTime**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Enables the IT admin to schedule the time of the update installation. <p style="margin-left: 20px">Enables the IT admin to schedule the time of the update installation.
@ -609,7 +603,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-schedulerestartwarning"></a>**Update/ScheduleRestartWarning** <a href="" id="update-schedulerestartwarning"></a>**Update/ScheduleRestartWarning**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart warning reminder notifications. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart warning reminder notifications.
@ -620,7 +614,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-setautorestartnotificationdisable"></a>**Update/SetAutoRestartNotificationDisable** <a href="" id="update-setautorestartnotificationdisable"></a>**Update/SetAutoRestartNotificationDisable**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
<p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to disable auto-restart notifications for update installations. <p style="margin-left: 20px">Added in Windows 10, version 1703. Allows the IT Admin to disable auto-restart notifications for update installations.
@ -632,10 +626,10 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
<a href="" id="update-updateserviceurl"></a>**Update/UpdateServiceUrl** <a href="" id="update-updateserviceurl"></a>**Update/UpdateServiceUrl**
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
> [!Important] > [!Important]
> Starting in Windows 10, version 1703 this policy is not supported in Windows 10 Mobile Enterprise and IoT Enterprise. > Starting in Windows 10, version 1703 this policy is not supported in IoT Enterprise.
<p style="margin-left: 20px">Allows the device to check for updates from a WSUS server instead of Microsoft Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet. <p style="margin-left: 20px">Allows the device to check for updates from a WSUS server instead of Microsoft Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet.
@ -894,18 +888,6 @@ Here is the list of older policies that are still supported for backward compati
- Update/DeferUpdatePeriod - Update/DeferUpdatePeriod
- Update/PauseDeferrals - Update/PauseDeferrals
For Windows Update for Business, here is the list of supported policies on Windows 10 Mobile Enterprise:
- For Windows 10, version 1511 (Build 10586): Update/RequireDeferUpgrade, Update/DeferUpdatePeriod and Update/PauseDeferrals. To use DeferUpdatePeriod and PauseDeferrals the RequireDeferUpgrade has to be set to 1, which essentially means for a device running 1511, the Windows Update for Business policies can only be set when a device is configured for CBB servicing.
- For Windows 10, version 1607 (Build 14393): Update/BranchReadinessLevel, Update/DeferQualityUpdatesPeriodInDays and Update/PauseQualityUpdates. In 1607 we added support where you can configure Windows Update for Business policies when a device is configured for CB/CBB servicing.
> **Note**  
For policies supported for Windows Update for Business, when you set policies for both Windows 10, version 1607 and Windows 10, version 1511 running on 1607, then 1607 policies will be configured (1607 trumps 1511).
For policies supported for Windows Update for Business, when you set 1511 policies on a device running 1607, the you will get the expected behavior for 1511 policies.
## <a href="" id="userexperiencescreenshot"></a>Update management user experience screenshot ## <a href="" id="userexperiencescreenshot"></a>Update management user experience screenshot
The following screenshots of the administrator console shows the list of update titles, approval status, and additional metadata fields. The following screenshots of the administrator console shows the list of update titles, approval status, and additional metadata fields.

3
windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md
View File

File diff suppressed because one or more lines are too long

6
windows/client-management/mdm/policy-csp-system.md
View File

@ -141,7 +141,7 @@ manager: dansimp
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
> [!NOTE] > [!NOTE]
> This policy setting applies only to devices running Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, Windows 10 Mobile, and Windows 10 Mobile Enterprise. > This policy setting applies only to devices running Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education.
This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. These controls are located under "Get Insider builds," and enable users to make their devices available for downloading and installing Windows preview software. This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. These controls are located under "Get Insider builds," and enable users to make their devices available for downloading and installing Windows preview software.
@ -738,7 +738,7 @@ The following list shows the supported values for Windows 8.1:
In Windows 10, you can configure this policy setting to decide what level of diagnostic data to send to Microsoft. The following list shows the supported values for Windows 10: In Windows 10, you can configure this policy setting to decide what level of diagnostic data to send to Microsoft. The following list shows the supported values for Windows 10:
- 0 – (**Security**) Sends information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Microsoft Defender. - 0 – (**Security**) Sends information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Microsoft Defender.
**Note:** This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), Hololens 2, and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1. **Note:** This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 IoT Core (IoT Core), Hololens 2, and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1.
- 1 – (**Basic**) Sends the same data as a value of 0, plus additional basic device info, including quality-related data, app compatibility, and app usage data. - 1 – (**Basic**) Sends the same data as a value of 0, plus additional basic device info, including quality-related data, app compatibility, and app usage data.
- 2 – (**Enhanced**) Sends the same data as a value of 1, plus additional insights, including how Windows, Windows Server, System Center, and apps are used, how they perform, and advanced reliability data. - 2 – (**Enhanced**) Sends the same data as a value of 1, plus additional insights, including how Windows, Windows Server, System Center, and apps are used, how they perform, and advanced reliability data.
- 3 – (**Full**) Sends the same data as a value of 2, plus all data necessary to identify and fix problems with devices. - 3 – (**Full**) Sends the same data as a value of 2, plus all data necessary to identify and fix problems with devices.
@ -756,7 +756,7 @@ In Windows 10, you can configure this policy setting to decide what level of dia
<tr class="odd"> <tr class="odd">
<td style="vertical-align:top"><p>0 – Security. Information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.</p> <td style="vertical-align:top"><p>0 – Security. Information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.</p>
<div class="alert"> <div class="alert">
<strong>Note</strong>  This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1. <strong>Note</strong>  This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 IoT Core (IoT Core), and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1.
</div> </div>
</td> </td>
</tr> </tr>

11
windows/client-management/mdm/policy-csp-update.md
View File

@ -1715,11 +1715,6 @@ Allows IT Admins to specify update delays for up to 4 weeks.
Supported values are 0-4, which refers to the number of weeks to defer updates. Supported values are 0-4, which refers to the number of weeks to defer updates.
In Windows 10 Mobile Enterprise version 1511 devices set to automatic updates, for DeferUpdatePeriod to work, you must set the following:
- Update/RequireDeferUpgrade must be set to 1
- System/AllowTelemetry must be set to 1 or higher
If the "Specify intranet Microsoft update service location" policy is enabled, then the "Defer upgrades by", "Defer updates by" and "Pause Updates and Upgrades" settings have no effect. If the "Specify intranet Microsoft update service location" policy is enabled, then the "Defer upgrades by", "Defer updates by" and "Pause Updates and Upgrades" settings have no effect.
If the Allow Telemetry policy is enabled and the Options value is set to 0, then the "Defer upgrades by", "Defer updates by" and "Pause Updates and Upgrades" settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the "Defer upgrades by", "Defer updates by" and "Pause Updates and Upgrades" settings have no effect.
@ -3470,7 +3465,7 @@ Supported values are 15, 30, or 60 (minutes).
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart warning reminder notifications. Added in Windows 10, version 1703. Allows the IT Admin to specify the period for auto-restart warning reminder notifications.
@ -3937,7 +3932,7 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
> [!NOTE] > [!NOTE]
> This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise > This policy is available on Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education
Enables the IT admin to schedule the time of the update installation. Enables the IT admin to schedule the time of the update installation.
@ -4479,7 +4474,7 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
> [!IMPORTANT] > [!IMPORTANT]
> Starting in Windows 10, version 1703 this policy is not supported in Windows 10 Mobile Enterprise and IoT Mobile. > Starting in Windows 10, version 1703 this policy is not supported in IoT Mobile.
Allows the device to check for updates from a WSUS server instead of Microsoft Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet. Allows the device to check for updates from a WSUS server instead of Microsoft Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet.