mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-28 13:17:23 +00:00
Merge remote-tracking branch 'refs/remotes/origin/master' into rs2
This commit is contained in:
jdeckerMS
commit
f3d583bf9c
@ -45,11 +45,11 @@ When you develop for HoloLens, there are [system requirements and tools](https:/
|
||||
|
||||
## Related resources
|
||||
|
||||
[Getting started with Azure Active Directory Premium](https://azure.microsoft.com/en-us/documentation/articles/active-directory-get-started-premium/)
|
||||
[Getting started with Azure Active Directory Premium](https://azure.microsoft.com/documentation/articles/active-directory-get-started-premium/)
|
||||
|
||||
[Get started with Intune](https://docs.microsoft.com/en-us/intune/understand-explore/get-started-with-a-30-day-trial-of-microsoft-intune)
|
||||
[Get started with Intune](https://docs.microsoft.com/intune/understand-explore/get-started-with-a-30-day-trial-of-microsoft-intune)
|
||||
|
||||
[Enroll devices for management in Intune](https://docs.microsoft.com/en-us/intune/deploy-use/enroll-devices-in-microsoft-intune#supported-device-platforms)
|
||||
[Enroll devices for management in Intune](https://docs.microsoft.com/intune/deploy-use/enroll-devices-in-microsoft-intune#supported-device-platforms)
|
||||
|
||||
[Azure AD editions](https://azure.microsoft.com/en-us/documentation/articles/active-directory-editions/)
|
||||
[Azure AD editions](https://azure.microsoft.com/documentation/articles/active-directory-editions/)
|
||||
|
||||
|
||||
@ -16,10 +16,9 @@ localizationpriority: medium
|
||||
You can install additional apps on your Surface Hub to fit your team or organization's needs. There are different methods for installing apps depending on whether you are developing and testing an app, or deploying a released app. This topic describes methods for installing apps for either scenario.
|
||||
|
||||
A few things to know about apps on Surface Hub:
|
||||
- Surface Hub only runs [Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/windows/uwp/get-started/whats-a-uwp).
|
||||
- Surface Hub only runs [Universal Windows Platform (UWP) apps](https://msdn.microsoft.com/windows/uwp/get-started/whats-a-uwp). See a [list of apps that work with Surface Hub](https://www.microsoft.com/surface/support/surface-hub/surface-hub-apps).
|
||||
- Apps must be targeted for the [Universal device family](https://msdn.microsoft.com/library/windows/apps/dn894631).
|
||||
- By default, apps must be Store-signed to be installed. During testing and development, you can also choose to run developer-signed UWP apps by placing the device in developer mode.
|
||||
- When submitting an app to the Windows Store, developers need to set Device family availability and Organizational licensing options to make sure an app will be available to run on Surface Hub.
|
||||
- By default, apps must be Store-signed to be installed. During testing and development, you can also choose to run developer-signed UWP apps by placing the device in developer mode.- When submitting an app to the Windows Store, developers need to set Device family availability and Organizational licensing options to make sure an app will be available to run on Surface Hub.
|
||||
- You need admin credentials to install apps on your Surface Hub. Since the device is designed to be used in communal spaces like meeting rooms, people can't access the Windows Store to download and install apps.
|
||||
|
||||
|
||||
|
||||
@ -76,7 +76,7 @@ Before you proceed, make sure your environment includes these requirements for r
|
||||
<td align="left"><p>.NET Framework 4 or higher</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Windows 8 and Windows 8.1</p></td>
|
||||
<td align="left"><p>Windows 8.1</p></td>
|
||||
<td align="left"><p>Enterprise or Pro</p></td>
|
||||
<td align="left"><p>None</p></td>
|
||||
<td align="left"><p>32-bit or 64-bit</p></td>
|
||||
@ -91,10 +91,26 @@ Before you proceed, make sure your environment includes these requirements for r
|
||||
<td align="left"><p>Windows PowerShell 3.0 or higher</p></td>
|
||||
<td align="left"><p>.NET Framework 4.5</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Windows 10, pre-1607 verison</p></td>
|
||||
<td align="left"><p>Enterprise or Pro</p></td>
|
||||
<td align="left"><p></p></td>
|
||||
<td align="left"><p>32-bit or 64-bit</p></td>
|
||||
<td align="left"><p>Windows PowerShell 3.0 or higher</p></td>
|
||||
<td align="left"><p>.NET Framework 4.5</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p>Windows Server 2016</p></td>
|
||||
<td align="left"><p>Standard or Datacenter</p></td>
|
||||
<td align="left"><p>None</p></td>
|
||||
<td align="left"><p>64-bit</p></td>
|
||||
<td align="left"><p>Windows PowerShell 3.0 or higher</p></td>
|
||||
<td align="left"><p>.NET Framework 4.5</p></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
|
||||
**Note:** Starting with Windows 10, version 1607, UE-V is included with [Windows 10 for Enterprise](https://www.microsoft.com/en-us/WindowsForBusiness/windows-for-enterprise) and is no longer part of the Microsoft Desktop Optimization Pack
|
||||
|
||||
Also…
|
||||
|
||||
|
||||
@ -45,7 +45,7 @@ This workflow diagram provides a high-level understanding of a UE-V deployment a
|
||||
|
||||
|
||||
|
||||
<a href="" id="planning"></a>**Planning a UE-V deployment:** First, you want to do a little bit of planning so that you can determine which UE-V components you’ll be deploying. Planning a UE-V deployment involves these things:
|
||||
**Planning a UE-V deployment:** First, you want to do a little bit of planning so that you can determine which UE-V components you’ll be deploying. Planning a UE-V deployment involves these things:
|
||||
|
||||
- [Decide whether to synchronize settings for custom applications](#deciding)
|
||||
|
||||
@ -663,10 +663,10 @@ Before you proceed, make sure your environment includes these requirements for r
|
||||
<td align="left"><p>.NET Framework 4.5 or higher</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p>Windows 10</p>
|
||||
<td align="left"><p>Windows 10, pre-1607 version</p>
|
||||
<div class="alert">
|
||||
<strong>Note</strong>
|
||||
<p>Only UE-V 2.1 SP1 supports Windows 10</p>
|
||||
<p>Only UE-V 2.1 SP1 supports Windows 10, pre-1607 version</p>
|
||||
</div>
|
||||
<div>
|
||||
|
||||
@ -685,6 +685,14 @@ Before you proceed, make sure your environment includes these requirements for r
|
||||
<td align="left"><p>Windows PowerShell 3.0 or higher</p></td>
|
||||
<td align="left"><p>.NET Framework 4.5 or higher</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p>Windows Server 2016</p></td>
|
||||
<td align="left"><p>Standard or Datacenter</p></td>
|
||||
<td align="left"><p>None</p></td>
|
||||
<td align="left"><p>64-bit</p></td>
|
||||
<td align="left"><p>Windows PowerShell 3.0 or higher</p></td>
|
||||
<td align="left"><p>.NET Framework 4.6 or higher</p></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
@ -697,6 +705,9 @@ Also…
|
||||
- **Administrative Credentials** for any computer on which you’ll be installing
|
||||
|
||||
**Note**
|
||||
|
||||
- Starting with WIndows 10, version 1607, UE-V is included with [Windows 10 for Enterprise](https://www.microsoft.com/en-us/WindowsForBusiness/windows-for-enterprise) and is no longer part of the Microsoft Desktop Optimization Pack.
|
||||
|
||||
- The UE-V Windows PowerShell feature of the UE-V Agent requires .NET Framework 4 or higher and Windows PowerShell 3.0 or higher to be enabled. Download Windows PowerShell 3.0 [here](https://go.microsoft.com/fwlink/?LinkId=309609).
|
||||
|
||||
- Install .NET Framework 4 or .NET Framework 4.5 on computers that run the Windows 7 or the Windows Server 2008 R2 operating system. The Windows 8, Windows 8.1, and Windows Server 2012 operating systems come with .NET Framework 4.5 installed. The Windows 10 operating system comes with .NET Framework 4.6 installed.
|
||||
|
||||
@ -131,6 +131,7 @@ This following is a full list of BCD settings with friendly names which are igno
|
||||
| 0x15000052 | all| graphicsresolution|
|
||||
| 0x15000065 | all| displaymessage|
|
||||
| 0x15000066| all| displaymessageoverride|
|
||||
| 0x15000081 | all| logcontrol|
|
||||
| 0x16000009 | all| recoveryenabled|
|
||||
| 0x1600000b | all| badmemoryaccess|
|
||||
| 0x1600000f | all| traditionalkseg|
|
||||
|
||||
@ -52,7 +52,7 @@ You'll need to configure HP ArcSight so that it can consume Windows Defender ATP
|
||||
## Configure HP ArcSight
|
||||
The following steps assume that you have completed all the required steps in [Before you begin](#before-you-begin). For more information, see the ArcSight FlexConnector Developer's guide.
|
||||
|
||||
1. Save the [WDATP-connector.jsonparser.properties file](http://download.microsoft.com/download/0/8/A/08A4957D-0923-4353-B25F-395EAE363E8C/WDATP-connector.jsonparser.properties) file into the connector installation folder. The
|
||||
1. Save the [WDATP-connector.jsonparser.properties file](http://download.microsoft.com/download/0/8/A/08A4957D-0923-4353-B25F-395EAE363E8C/WDATP-connector.jsonparser.properties) file into the connector installation folder.
|
||||
|
||||
2. Save the [WDATP-connector.properties](http://download.microsoft.com/download/3/9/C/39C703C2-487C-4C3E-AFD8-14C2253C2F12/WDATP-connector.properties) file into the `<root>\current\user\agent\flexagent` folder of the connector installation folder.
|
||||
|
||||
|
||||
@ -26,40 +26,15 @@ This section addresses issues that might arise as you use the Windows Defender A
|
||||
If you encounter a server error when trying to access the service, you’ll need to change your browser cookie settings.
|
||||
Configure your browser to allow cookies.
|
||||
|
||||
### No data is shown on the portal
|
||||
If no data is displayed on the Dashboard portal even if no errors were encountered in the portal logs or in the browser console, you'll need to whitelist the threat intelligence, data access, and detonation endpoints that also use this protocol.
|
||||
### Data is missing on the portal
|
||||
If data is missing on the Windows Defender ATP portal it’s possible that proxy settings are blocking it.
|
||||
|
||||
Make sure that `*.securitycenter.windows.com` is included the proxy whitelist.
|
||||
|
||||
|
||||
> [!NOTE]
|
||||
> You must use the HTTPS protocol when adding the following endpoints.
|
||||
|
||||
Depending on your region, add the following endpoints to the whitelist:
|
||||
|
||||
U.S. region:
|
||||
|
||||
- daasmon-cus-prd.cloudapp.net
|
||||
- daasmon-eus-prd.cloudapp.net
|
||||
- dataaccess-cus-prd.cloudapp.net
|
||||
- dataaccess-eus-prd.cloudapp.net
|
||||
- threatintel-cus-prd.cloudapp.net
|
||||
- threatintel-eus-prd.cloudapp.net
|
||||
- winatpauthorization.windows.com
|
||||
- winatpfeedback.windows.com
|
||||
- winatpmanagement.windows.com
|
||||
- winatponboarding.windows.com
|
||||
- winatpservicehealth.windows.com
|
||||
|
||||
EU region:
|
||||
|
||||
- dataaccess-neu-prd.cloudapp.net
|
||||
- dataaccess-weu-prd.cloudapp.net
|
||||
- threatintel-neu-prd.cloudapp.net
|
||||
- threatintel-weu-prd.cloudapp.net
|
||||
- winatpauthorization.windows.com
|
||||
- winatpfeedback.windows.com
|
||||
- winatpmanagement.windows.com
|
||||
- winatponboarding.windows.com
|
||||
- winatpservicehealth.windows.com
|
||||
|
||||
### Windows Defender ATP service shows event or error logs in the Event Viewer
|
||||
|
||||
See the topic [Review events and errors on endpoints with Event Viewer](event-error-codes-windows-defender-advanced-threat-protection.md) for a list of event IDs that are reported by the Windows Defender ATP service. The topic also contains troubleshooting steps for event errors.
|
||||
|
||||
@ -81,7 +81,7 @@ You can envision user and device management as falling into these two categories
|
||||
|
||||
Domain joined PCs and tablets can continue to be managed with the [System Center Configuration Manager](https://docs.microsoft.com/sccm/core/understand/introduction) client or Group Policy.
|
||||
|
||||
For more information about how Windows 10 and Azure AD optimize access to work resources across a mix of devices and scenarios, see [Using Windows 10 devices in your workplace](https://azure.microsoft.com/en-us/documentation/articles/active-directory-azureadjoin-windows10-devices/).
|
||||
For more information about how Windows 10 and Azure AD optimize access to work resources across a mix of devices and scenarios, see [Using Windows 10 devices in your workplace](https://azure.microsoft.com/documentation/articles/active-directory-azureadjoin-windows10-devices/).
|
||||
|
||||
As you review the roles in your organization, you can use the following generalized decision tree to begin to identify users or devices that require domain join. Consider switching the remaining users to Azure AD.
|
||||
|
||||
|
||||
@ -60,7 +60,7 @@ First, you create a default user profile with the customizations that you want,
|
||||
|
||||
3. [Create an answer file (Unattend.xml)](https://msdn.microsoft.com/library/windows/hardware/dn915085.aspx) that sets the [CopyProfile](https://msdn.microsoft.com/library/windows/hardware/dn922656.aspx) parameter to **True**. The CopyProfile parameter causes Sysprep to copy the currently signed-on user’s profile folder to the default user profile. You can use [Windows System Image Manager](https://msdn.microsoft.com/library/windows/hardware/dn922445.aspx), which is part of the Windows Assessment and Deployment Kit (ADK) to create the Unattend.xml file.
|
||||
|
||||
3. Use the [Remove-AppxProvisionedPackage](https://technet.microsoft.com/library/dn376476%28v=wps.620%29.aspx) cmdlet in Windows PowerShell to uninstall the following applications:
|
||||
3. For devices running Windows 10, use the [Remove-AppxProvisionedPackage](https://technet.microsoft.com/library/dn376476%28v=wps.620%29.aspx) cmdlet in Windows PowerShell to uninstall the following applications:
|
||||
|
||||
- Microsoft.windowscommunicationsapps_8wekyb3d8bbwe
|
||||
- Microsoft.BingWeather_8wekyb3d8bbwe
|
||||
@ -146,14 +146,14 @@ It may take some time for this change to replicate to all domain controllers.
|
||||
|
||||
## Apply policies to improve sign-in time
|
||||
|
||||
When a user is configured with a mandatory profile, Windows 10 starts as though it was the first sign-in each time the user signs in. To improve sign-in performance for users with mandatory user profiles, apply the following Group Policy settings.
|
||||
|
||||
- Computer Configuration > Administrative Templates > System > Logon > **Show first sign-in animation** = Disabled
|
||||
- Computer Configuration > Administrative Templates > Windows Components > Search > **Allow Cortana** = Disabled
|
||||
- Computer Configuration > Administrative Templates > Windows Components > Cloud Content > **Turn off Microsoft consumer experience** = Enabled
|
||||
|
||||
When a user is configured with a mandatory profile, Windows 10 starts as though it was the first sign-in each time the user signs in. To improve sign-in performance for users with mandatory user profiles, apply the Group Policy settings shown in the following table. (The table shows which operating system versions each policy setting can apply to.)
|
||||
|
||||
|
||||
| Group Policy setting | Windows 10 | Windows Server 2016 | Windows 8.1 | Windows Server 2012 |
|
||||
| --- | --- | --- | --- | --- |
|
||||
| Computer Configuration > Administrative Templates > System > Logon > **Show first sign-in animation** = Disabled |  |  |  |  |
|
||||
| Computer Configuration > Administrative Templates > Windows Components > Search > **Allow Cortana** = Disabled |  |  |  |  |
|
||||
| Computer Configuration > Administrative Templates > Windows Components > Cloud Content > **Turn off Microsoft consumer experience** = Enabled |  |  |  |  |
|
||||
|
||||
|
||||
|
||||
|
||||
@ -21,6 +21,10 @@ Windows Spotlight is an option for the lock screen background that displays diff
|
||||
|
||||
For managed devices running Windows 10 Enterprise and Windows 10 Education, enterprise administrators can configure a mobile device management (MDM) or Group Policy setting to prevent users from using the Windows Spotlight background. For managed devices running Windows 10 Pro, version 1607, administrators can disable suggestions for third party apps.
|
||||
|
||||
|
||||
>[!NOTE]
|
||||
>In Windows 10, version 1607, the lock screen background does not display if you disable the **Animate windows when minimizing and mazimizing** setting in **This PC** > **Properties** > **Advanced system settings** > **Performance settings** > **Visual Effects**, or if you enable the Group Policy setting **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Desktop Windows Manager** > **Do not allow windows animations**.
|
||||
|
||||
## What does Windows Spotlight include?
|
||||
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user