deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 21:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge branch 'master' into nimishasatapathy-4852875-phase5

Browse Source
This commit is contained in:
Gary Moore 2021-04-30 16:05:08 -07:00 committed by GitHub
commit f7f8eedbcf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
29 changed files with 365 additions and 396 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
windows/application-management/change-history-for-application-management.md
View File

@ -1,51 +0,0 @@
---
title: Change history for Application management in Windows 10 (Windows 10)
description: View new release information and updated topics in the documentation for application management in Windows 10.
keywords:
ms.prod: w10
ms.mktglfcycl: manage
ms.sitesec: library
ms.pagetype: security
ms.localizationpriority: medium
author: dansimp
ms.author: dansimp
ms.topic: article
ms.date: 10/24/2017
ms.reviewer:
manager: dansimp
---
# Change history for Application management in Windows 10
This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile.
## RELEASE: Windows 10, version 1803
The topics in this library have been updated for Windows 10, version 1803.
## October 2017
New or changed topic | Description
--- | ---
[Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md) | Added instructions for manually installing Windows Mixed Reality
## RELEASE: Windows 10, version 1709
The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update). The following new topic has been added:
- [Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md)
## September 2017
| New or changed topic | Description |
| --- | --- |
| [Per-user services in Windows 10](per-user-services-in-windows.md) | New |
| [Remove background task resource restrictions](enterprise-background-activity-controls.md) | New |
| [Understand the different apps included in Windows 10](apps-in-windows-10.md) | New |
## July 2017
| New or changed topic | Description |
| --- | --- |
| [Service Host process refactoring](svchost-service-refactoring.md) | New |
| [Deploy app upgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) | New |

31
windows/application-management/index.md
View File

@ -1,31 +0,0 @@
---
title: Windows 10 application management
description: Learn about managing applications in Windows 10 and Windows 10 Mobile clients, including how to remove background task resource restrictions.
ms.prod: w10
ms.mktglfcycl: manage
ms.sitesec: library
manager: dansimp
author: dansimp
ms.localizationpriority: high
---
# Windows 10 application management
**Applies to**
- Windows 10
Learn about managing applications in Windows 10 and Windows 10 Mobile clients.
| Topic | Description |
|---|---|
|[Sideload apps in Windows 10](sideload-apps-in-windows-10.md)| Requirements and instructions for side-loading LOB applications on Windows 10 and Windows 10 Mobile clients|
| [Remove background task resource restrictions](enterprise-background-activity-controls.md) | Windows provides controls to manage which experiences may run in the background. |
| [Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md) | Learn how to enable or block Windows Mixed Reality apps. |
|[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications|
| [Service Host process refactoring](svchost-service-refactoring.md) | Changes to Service Host grouping in Windows 10 |
|[Per User services in Windows 10](per-user-services-in-windows.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016|
[Disabling System Services in Windows Server](/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server) | Security guidelines for disabling services in Windows Server 2016 with Desktop Experience
|[Understand apps in Windows 10](apps-in-windows-10.md)| Overview of the different apps included by default in Windows 10 Enterprise|
| [Deploy app upgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) | How to upgrade apps on Windows 10 Mobile |
[Change history for Application management](change-history-for-application-management.md) | This topic lists new and updated topics in the Application management documentation for Windows 10 and Windows 10 Mobile.

68
windows/application-management/index.yml Normal file
View File

@ -0,0 +1,68 @@
### YamlMime:Landing
title: Windows application management # < 60 chars
summary: Learn about managing applications in Windows client, including how to remove background task resource restrictions. # < 160 chars
metadata:
title: Windows application management # Required; page title displayed in search results. Include the brand. < 60 chars.
description: Learn about managing applications in Windows 10 and Windows Sun Valley. # Required; article description that is displayed in search results. < 160 chars.
services: windows-10
ms.service: windows-10 #Required; service per approved list. service slug assigned to your service by ACOM.
ms.subservice: subservice
ms.topic: landing-page # Required
ms.collection: windows-10
author: greg-lindsay #Required; your GitHub user alias, with correct capitalization.
ms.author: greglin #Required; microsoft alias of author; optional team alias.
ms.date: 04/30/2021 #Required; mm/dd/yyyy format.
localization_priority: medium
# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
landingContent:
# Cards and links should be based on top customer tasks or top subjects
# Start card title with a verb
# Card (optional)
- title: Manage Windows applications
linkLists:
- linkListType: overview
links:
- text: Understand apps in Windows 10
url: apps-in-windows-10.md
- text: How to add apps and features to Windows 10
url: add-apps-and-features.md
- text: Sideload LOB apps in Windows 10
url: sideload-apps-in-windows-10.md
- text: Keep removed apps from returning during an update
url: remove-provisioned-apps-during-update.md
# Card (optional)
- title: Application Virtualization (App-V)
linkLists:
- linkListType: overview
links:
- text: App-V overview
url: app-v/appv-for-windows.md
- text: Getting started with App-V
url: app-v/appv-getting-started.md
- text: Planning for App-V
url: app-v/appv-planning-for-appv.md
- text: Deploying App-V
url: app-v/appv-deploying-appv.md
- text: Operations for App-V
url: app-v/appv-operations.md
- text: Troubleshooting App-V
url: app-v/appv-troubleshooting.md
- text: Technical Reference for App-V
url: app-v/appv-technical-reference.md
# Card (optional)
- title: Windows System Services
linkLists:
- linkListType: overview
links:
- text: Changes to Service Host grouping in Windows 10
url: svchost-service-refactoring.md
- text: Per-user services in Windows
url: per-user-services-in-windows.md
- text: Per-user services in Windows
url: per-user-services-in-windows.md

203
windows/application-management/toc.yml
View File

@ -1,6 +1,7 @@
items: items:
- name: Manage applications in Windows 10 - name: Manage Windows applications
href: index.md href: index.yml
- name: Application management
items: items:
- name: Sideload apps - name: Sideload apps
href: sideload-apps-in-windows-10.md href: sideload-apps-in-windows-10.md
@ -14,99 +15,110 @@ items:
href: add-apps-and-features.md href: add-apps-and-features.md
- name: Repackage win32 apps in the MSIX format - name: Repackage win32 apps in the MSIX format
href: msix-app-packaging-tool.md href: msix-app-packaging-tool.md
- name: Application Virtualization (App-V) for Windows - name: Application Virtualization (App-V)
items:
- name: App-V for Windows 10 overview
href: app-v/appv-for-windows.md href: app-v/appv-for-windows.md
- name: Getting Started
items: items:
- name: Getting Started with App-V - name: Getting Started with App-V
href: app-v/appv-getting-started.md href: app-v/appv-getting-started.md
- name: What's new
items: items:
- name: What's new in App-V for Windows 10, version 1703 and earlier - name: What's new in App-V for Windows 10, version 1703 and earlier
href: app-v/appv-about-appv.md href: app-v/appv-about-appv.md
items: - name: Release Notes for App-V for Windows 10, version 1607
- name: Release Notes for App-V for Windows 10, version 1607 href: app-v/appv-release-notes-for-appv-for-windows.md
href: app-v/appv-release-notes-for-appv-for-windows.md - name: Release Notes for App-V for Windows 10, version 1703
- name: Release Notes for App-V for Windows 10, version 1703 href: app-v/appv-release-notes-for-appv-for-windows-1703.md
href: app-v/appv-release-notes-for-appv-for-windows-1703.md - name: Evaluating App-V
- name: Evaluating App-V href: app-v/appv-evaluating-appv.md
href: app-v/appv-evaluating-appv.md - name: High Level Architecture for App-V
- name: High Level Architecture for App-V href: app-v/appv-high-level-architecture.md
href: app-v/appv-high-level-architecture.md - name: Planning
items:
- name: Planning for App-V - name: Planning for App-V
href: app-v/appv-planning-for-appv.md href: app-v/appv-planning-for-appv.md
- name: Preparing your environment
items: items:
- name: Preparing Your Environment for App-V - name: Preparing your environment for App-V
href: app-v/appv-preparing-your-environment.md href: app-v/appv-preparing-your-environment.md
items: - name: App-V Prerequisites
- name: App-V Prerequisites href: app-v/appv-prerequisites.md
href: app-v/appv-prerequisites.md - name: App-V security considerations
- name: App-V Security Considerations href: app-v/appv-security-considerations.md
href: app-v/appv-security-considerations.md - name: Planning to deploy
items:
- name: Planning to Deploy App-V - name: Planning to Deploy App-V
href: app-v/appv-planning-to-deploy-appv.md href: app-v/appv-planning-to-deploy-appv.md
items: - name: App-V Supported Configurations
- name: App-V Supported Configurations href: app-v/appv-supported-configurations.md
href: app-v/appv-supported-configurations.md - name: App-V Capacity Planning
- name: App-V Capacity Planning href: app-v/appv-capacity-planning.md
href: app-v/appv-capacity-planning.md - name: Planning for High Availability with App-V
- name: Planning for High Availability with App-V href: app-v/appv-planning-for-high-availability-with-appv.md
href: app-v/appv-planning-for-high-availability-with-appv.md - name: Planning to Deploy App-V with an Electronic Software Distribution System
- name: Planning to Deploy App-V with an Electronic Software Distribution System href: app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md
href: app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions.md - name: Planning for the App-V Server Deployment
- name: Planning for the App-V Server Deployment href: app-v/appv-planning-for-appv-server-deployment.md
href: app-v/appv-planning-for-appv-server-deployment.md - name: Planning for the App-V Sequencer and Client Deployment
- name: Planning for the App-V Sequencer and Client Deployment href: app-v/appv-planning-for-sequencer-and-client-deployment.md
href: app-v/appv-planning-for-sequencer-and-client-deployment.md - name: Planning for Using App-V with Office
- name: Planning for Using App-V with Office href: app-v/appv-planning-for-using-appv-with-office.md
href: app-v/appv-planning-for-using-appv-with-office.md - name: Planning to Use Folder Redirection with App-V
- name: Planning to Use Folder Redirection with App-V href: app-v/appv-planning-folder-redirection-with-appv.md
href: app-v/appv-planning-folder-redirection-with-appv.md
- name: App-V Planning Checklist - name: App-V Planning Checklist
href: app-v/appv-planning-checklist.md href: app-v/appv-planning-checklist.md
- name: Deploying
items:
- name: Deploying App-V - name: Deploying App-V
href: app-v/appv-deploying-appv.md href: app-v/appv-deploying-appv.md
- name: App-V sequencer and client configuration
items: items:
- name: Deploying the App-V Sequencer and Configuring the Client - name: Deploying the App-V Sequencer and Configuring the Client
href: app-v/appv-deploying-the-appv-sequencer-and-client.md href: app-v/appv-deploying-the-appv-sequencer-and-client.md
items: - name: About Client Configuration Settings
- name: About Client Configuration Settings href: app-v/appv-client-configuration-settings.md
href: app-v/appv-client-configuration-settings.md - name: Enable the App-V desktop client
- name: Enable the App-V desktop client href: app-v/appv-enable-the-app-v-desktop-client.md
href: app-v/appv-enable-the-app-v-desktop-client.md - name: How to Install the Sequencer
- name: How to Install the Sequencer href: app-v/appv-install-the-sequencer.md
href: app-v/appv-install-the-sequencer.md - name: App-V server deployment
items:
- name: Deploying the App-V Server - name: Deploying the App-V Server
href: app-v/appv-deploying-the-appv-server.md href: app-v/appv-deploying-the-appv-server.md
items: - name: How to Deploy the App-V Server
- name: How to Deploy the App-V Server href: app-v/appv-deploy-the-appv-server.md
href: app-v/appv-deploy-the-appv-server.md - name: How to Deploy the App-V Server Using a Script
- name: How to Deploy the App-V Server Using a Script href: app-v/appv-deploy-the-appv-server-with-a-script.md
href: app-v/appv-deploy-the-appv-server-with-a-script.md - name: How to Deploy the App-V Databases by Using SQL Scripts
- name: How to Deploy the App-V Databases by Using SQL Scripts href: app-v/appv-deploy-appv-databases-with-sql-scripts.md
href: app-v/appv-deploy-appv-databases-with-sql-scripts.md - name: How to Install the Publishing Server on a Remote Computer
- name: How to Install the Publishing Server on a Remote Computer href: app-v/appv-install-the-publishing-server-on-a-remote-computer.md
href: app-v/appv-install-the-publishing-server-on-a-remote-computer.md - name: How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services
- name: How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services href: app-v/appv-install-the-management-and-reporting-databases-on-separate-computers.md
href: app-v/appv-install-the-management-and-reporting-databases-on-separate-computers.md - name: How to install the Management Server on a Standalone Computer and Connect it to the Database
- name: How to install the Management Server on a Standalone Computer and Connect it to the Database href: app-v/appv-install-the-management-server-on-a-standalone-computer.md
href: app-v/appv-install-the-management-server-on-a-standalone-computer.md - name: About App-V Reporting
- name: About App-V Reporting href: app-v/appv-reporting.md
href: app-v/appv-reporting.md - name: How to install the Reporting Server on a Standalone Computer and Connect it to the Database
- name: How to install the Reporting Server on a Standalone Computer and Connect it to the Database href: app-v/appv-install-the-reporting-server-on-a-standalone-computer.md
href: app-v/appv-install-the-reporting-server-on-a-standalone-computer.md - name: App-V Deployment Checklist
- name: App-V Deployment Checklist href: app-v/appv-deployment-checklist.md
href: app-v/appv-deployment-checklist.md - name: Deploying Microsoft Office 2016 by Using App-V
- name: Deploying Microsoft Office 2016 by Using App-V href: app-v/appv-deploying-microsoft-office-2016-with-appv.md
href: app-v/appv-deploying-microsoft-office-2016-with-appv.md - name: Deploying Microsoft Office 2013 by Using App-V
- name: Deploying Microsoft Office 2013 by Using App-V href: app-v/appv-deploying-microsoft-office-2013-with-appv.md
href: app-v/appv-deploying-microsoft-office-2013-with-appv.md - name: Deploying Microsoft Office 2010 by Using App-V
- name: Deploying Microsoft Office 2010 by Using App-V href: app-v/appv-deploying-microsoft-office-2010-wth-appv.md
href: app-v/appv-deploying-microsoft-office-2010-wth-appv.md - name: Operations
- name: Operations for App-V
href: app-v/appv-operations.md
items: items:
- name: Creating and Managing App-V Virtualized Applications - name: Operations for App-V
href: app-v/appv-creating-and-managing-virtualized-applications.md href: app-v/appv-operations.md
- name: Creating and managing virtualized applications
items: items:
- name: Creating and Managing App-V Virtualized Applications
href: app-v/appv-creating-and-managing-virtualized-applications.md
- name: Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer) - name: Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)
href: app-v/appv-auto-provision-a-vm.md href: app-v/appv-auto-provision-a-vm.md
- name: Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer) - name: Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)
@ -123,9 +135,10 @@ items:
href: app-v/appv-create-a-package-accelerator.md href: app-v/appv-create-a-package-accelerator.md
- name: How to Create a Virtual Application Package Using an App-V Package Accelerator - name: How to Create a Virtual Application Package Using an App-V Package Accelerator
href: app-v/appv-create-a-virtual-application-package-package-accelerator.md href: app-v/appv-create-a-virtual-application-package-package-accelerator.md
- name: Administering App-V Virtual Applications by Using the Management Console - name: Administering App-V
href: app-v/appv-administering-virtual-applications-with-the-management-console.md
items: items:
- name: Administering App-V Virtual Applications by Using the Management Console
href: app-v/appv-administering-virtual-applications-with-the-management-console.md
- name: About App-V Dynamic Configuration - name: About App-V Dynamic Configuration
href: app-v/appv-dynamic-configuration.md href: app-v/appv-dynamic-configuration.md
- name: How to Connect to the Management Console - name: How to Connect to the Management Console
@ -150,9 +163,10 @@ items:
href: app-v/appv-customize-virtual-application-extensions-with-the-management-console.md href: app-v/appv-customize-virtual-application-extensions-with-the-management-console.md
- name: How to View and Configure Applications and Default Virtual Application Extensions by Using the Management Console - name: How to View and Configure Applications and Default Virtual Application Extensions by Using the Management Console
href: app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md href: app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console.md
- name: Managing Connection Groups - name: Connection groups
href: app-v/appv-managing-connection-groups.md
items: items:
- name: Managing Connection Groups
href: app-v/appv-managing-connection-groups.md
- name: About the Connection Group Virtual Environment - name: About the Connection Group Virtual Environment
href: app-v/appv-connection-group-virtual-environment.md href: app-v/appv-connection-group-virtual-environment.md
- name: About the Connection Group File - name: About the Connection Group File
@ -169,31 +183,36 @@ items:
href: app-v/appv-configure-connection-groups-to-ignore-the-package-version.md href: app-v/appv-configure-connection-groups-to-ignore-the-package-version.md
- name: How to Allow Only Administrators to Enable Connection Groups - name: How to Allow Only Administrators to Enable Connection Groups
href: app-v/appv-allow-administrators-to-enable-connection-groups.md href: app-v/appv-allow-administrators-to-enable-connection-groups.md
- name: Deploying App-V Packages by Using Electronic Software Distribution (ESD) - name: Deploying App-V packages with ESD
href: app-v/appv-deploying-packages-with-electronic-software-distribution-solutions.md
items: items:
- name: Deploying App-V Packages by Using Electronic Software Distribution (ESD)
href: app-v/appv-deploying-packages-with-electronic-software-distribution-solutions.md
- name: How to deploy App-V Packages Using Electronic Software Distribution - name: How to deploy App-V Packages Using Electronic Software Distribution
href: app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md href: app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions.md
- name: How to Enable Only Administrators to Publish Packages by Using an ESD - name: How to Enable Only Administrators to Publish Packages by Using an ESD
href: app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md href: app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions.md
- name: Using the App-V Client Management Console - name: Using the management console
href: app-v/appv-using-the-client-management-console.md
items: items:
- name: Using the App-V client management console
href: app-v/appv-using-the-client-management-console.md
- name: Automatically clean-up unpublished packages on the App-V client - name: Automatically clean-up unpublished packages on the App-V client
href: app-v/appv-auto-clean-unpublished-packages.md href: app-v/appv-auto-clean-unpublished-packages.md
- name: Migrating to App-V from a Previous Version - name: Migrating
href: app-v/appv-migrating-to-appv-from-a-previous-version.md
items: items:
- name: How to Convert a Package Created in a Previous Version of App-V - name: Migrating to App-V from a previous version
href: app-v/appv-migrating-to-appv-from-a-previous-version.md
- name: How to convert a package created in a previous version of App-V
href: app-v/appv-convert-a-package-created-in-a-previous-version-of-appv.md href: app-v/appv-convert-a-package-created-in-a-previous-version-of-appv.md
- name: Maintaining App-V - name: Maintenance
href: app-v/appv-maintaining-appv.md
items: items:
- name: Maintaining App-V
href: app-v/appv-maintaining-appv.md
- name: How to Move the App-V Server to Another Computer - name: How to Move the App-V Server to Another Computer
href: app-v/appv-move-the-appv-server-to-another-computer.md href: app-v/appv-move-the-appv-server-to-another-computer.md
- name: Administering App-V by Using Windows PowerShell - name: Administering App-V with Windows PowerShell
href: app-v/appv-administering-appv-with-powershell.md
items: items:
- name: Administering App-V by using Windows PowerShell
href: app-v/appv-administering-appv-with-powershell.md
- name: How to Load the Windows PowerShell Cmdlets for App-V and Get Cmdlet Help - name: How to Load the Windows PowerShell Cmdlets for App-V and Get Cmdlet Help
href: app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md href: app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help.md
- name: How to Manage App-V Packages Running on a Stand-Alone Computer by Using Windows PowerShell - name: How to Manage App-V Packages Running on a Stand-Alone Computer by Using Windows PowerShell
@ -218,9 +237,10 @@ items:
href: app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md href: app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md
- name: Troubleshooting App-V - name: Troubleshooting App-V
href: app-v/appv-troubleshooting.md href: app-v/appv-troubleshooting.md
- name: Technical Reference for App-V - name: Technical Reference
href: app-v/appv-technical-reference.md
items: items:
- name: Technical Reference for App-V
href: app-v/appv-technical-reference.md
- name: Available Mobile Device Management (MDM) settings for App-V - name: Available Mobile Device Management (MDM) settings for App-V
href: app-v/appv-available-mdm-settings.md href: app-v/appv-available-mdm-settings.md
- name: Performance Guidance for Application Virtualization - name: Performance Guidance for Application Virtualization
@ -231,6 +251,9 @@ items:
href: app-v/appv-viewing-appv-server-publishing-metadata.md href: app-v/appv-viewing-appv-server-publishing-metadata.md
- name: Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications - name: Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications
href: app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md href: app-v/appv-running-locally-installed-applications-inside-a-virtual-environment.md
- name: Reference
items:
- name: Service Host process refactoring - name: Service Host process refactoring
href: svchost-service-refactoring.md href: svchost-service-refactoring.md
- name: Per-user services in Windows - name: Per-user services in Windows
@ -239,7 +262,5 @@ items:
href: /windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server href: /windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server
- name: Deploy app upgrades on Windows 10 Mobile - name: Deploy app upgrades on Windows 10 Mobile
href: deploy-app-upgrades-windows-10-mobile.md href: deploy-app-upgrades-windows-10-mobile.md
- name: Change history for Application management
href: change-history-for-application-management.md
- name: How to keep apps removed from Windows 10 from returning during an update - name: How to keep apps removed from Windows 10 from returning during an update
href: remove-provisioned-apps-during-update.md href: remove-provisioned-apps-during-update.md

80
windows/client-management/change-history-for-client-management.md
View File

@ -1,80 +0,0 @@
---
title: Change history for Client management (Windows 10)
description: Learn about new and updated topics in the Client management documentation for Windows 10 and Windows 10 Mobile.
keywords:
ms.prod: w10
ms.mktglfcycl: manage
ms.sitesec: library
ms.pagetype: security
ms.localizationpriority: medium
author: dansimp
ms.author: dansimp
ms.date: 1/21/2020
ms.reviewer:
manager: dansimp
ms.topic: article
---
# Change history for Client management
This topic lists new and updated topics in the [Client management](index.md) documentation for Windows 10 and Windows 10 Mobile.
## February 2020
New or changed topic | Description
--- | ---
[Blue screen occurs when you update the in-box Broadcom NIC driver](troubleshoot-stop-error-on-broadcom-driver-update.md) | New
[Advanced troubleshooting for Windows startup](troubleshoot-windows-startup.md) | Updated
## December 2019
New or changed topic | Description
--- | ---
[Change in default removal policy for external storage media in Windows 10, version 1809](change-default-removal-policy-external-storage-media.md) | New
[Advanced troubleshooting for Windows startup](troubleshoot-windows-startup.md) | Updated
[Advanced troubleshooting for Event ID 41 "The system has rebooted without cleanly shutting down first"](troubleshoot-event-id-41-restart.md) | New
## December 2018
New or changed topic | Description
--- | ---
[Advanced troubleshooting for TCP/IP](troubleshoot-tcpip.md) | New
[Collect data using Network Monitor](troubleshoot-tcpip-netmon.md) | New
[Troubleshoot TCP/IP connectivity](troubleshoot-tcpip-connectivity.md) | New
[Troubleshoot port exhaustion issues](troubleshoot-tcpip-port-exhaust.md) | New
[Troubleshoot Remote Procedure Call (RPC) errors](troubleshoot-tcpip-rpc-errors.md) | New
## November 2018
New or changed topic | Description
--- | ---
[Advanced troubleshooting for Windows-based computer freeze issues](troubleshoot-windows-freeze.md) | New
[Advanced troubleshooting for Stop error or blue screen error issue](troubleshoot-stop-errors.md) | New
## RELEASE: Windows 10, version 1709
The topics in this library have been updated for Windows 10, version 1709 (also known as the Fall Creators Update).
## July 2017
| New or changed topic | Description |
| --- | --- |
| [Group Policy settings that apply only to Windows 10 Enterprise and Education Editions](group-policies-for-enterprise-and-education-editions.md) | Added that Start layout policy setting can be applied to Windows 10 Pro, version 1703 |
## June 2017
| New or changed topic | Description |
| --- | --- |
| [Create mandatory user profiles](mandatory-user-profile.md) | Added Windows 10, version 1703, to profile extension table |
## April 2017
| New or changed topic | Description |
|----------------------|-------------|
| [New policies for Windows 10](new-policies-for-windows-10.md) | Added a list of new Group Policy settings for Windows 10, version 1703 |
## RELEASE: Windows 10, version 1703
The topics in this library have been updated for Windows 10, version 1703 (also known as the Creators Update). The following new topic has been added:
- [Manage the Settings app with Group Policy](manage-settings-app-with-group-policy.md)

34
windows/client-management/index.md
View File

@ -1,34 +0,0 @@
---
title: Client management (Windows 10)
description: Learn about the administrative tools, tasks and best practices for managing Windows 10 and Windows 10 Mobile clients across your enterprise.
ms.prod: w10
ms.mktglfcycl: manage
ms.sitesec: library
author: dansimp
ms.localizationpriority: medium
ms.author: dansimp
---
# Client management
**Applies to**
- Windows 10
Learn about the administrative tools, tasks and best practices for managing Windows 10 and Windows 10 Mobile clients across your enterprise.
| Topic | Description |
|---|---|
|[Administrative Tools in Windows 10](administrative-tools-in-windows-10.md)| Links to documentation for tools for IT pros and advanced users in the Administrative Tools folder.|
|[Create mandatory user profiles](mandatory-user-profile.md)| Instructions for managing settings commonly defined in a mandatory profiles, including (but are not limited to): icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more.|
|[Connect to remote Azure Active Directory-joined PCs](connect-to-remote-aadj-pc.md)| Instructions for connecting to a remote PC joined to Azure Active Directory (Azure AD)|
|[Join Windows 10 Mobile to Azure AD](join-windows-10-mobile-to-azure-active-directory.md)| Describes the considerations and options for using Windows 10 Mobile with Azure AD in your organization.|
|[New policies for Windows 10](new-policies-for-windows-10.md)| Listing of new group policy settings available in Windows 10|
|[Windows 10 default media removal policy](change-default-removal-policy-external-storage-media.md) |In Windows 10, version 1809, the default removal policy for external storage media changed from "Better performance" to "Quick removal." |
|[Group policies for enterprise and education editions](group-policies-for-enterprise-and-education-editions.md)| Listing of all group policy settings that apply specifically to Windows 10 Enterprise and Education editions|
| [Manage the Settings app with Group Policy](manage-settings-app-with-group-policy.md) | Starting in Windows 10, version 1703, you can now manage the pages that are shown in the Settings app by using Group Policy. |
|[Reset a Windows 10 Mobile device](reset-a-windows-10-mobile-device.md)| Instructions for resetting a Windows 10 Mobile device using either *factory* or *'wipe and persist'* reset options|
|[Transitioning to modern ITPro management](manage-windows-10-in-your-organization-modern-management.md)| Describes modern Windows 10 ITPro management scenarios across traditional, hybrid and cloud-based enterprise needs|
|[Windows 10 Mobile deployment and management guide](windows-10-mobile-and-mdm.md)| Considerations and instructions for deploying Windows 10 Mobile|
|[Windows libraries](windows-libraries.md)| Considerations and instructions for managing Windows 10 libraries such as My Documents, My Pictures, and My Music.|
|[Mobile device management for solution providers](mdm/index.md) | Procedural and reference documentation for solution providers providing mobile device management (MDM) for Windows 10 devices. |
|[Change history for Client management](change-history-for-client-management.md) | This topic lists new and updated topics in the Client management documentation for Windows 10 and Windows 10 Mobile. |

67
windows/client-management/index.yml Normal file
View File

@ -0,0 +1,67 @@
### YamlMime:Landing
title: Client management # < 60 chars
summary: Find out how to apply custom configurations to Windows client devices. Windows provides a number of features and methods to help you configure or lock down specific parts of the Windows interface. # < 160 chars
metadata:
title: Configure Windows 10 # Required; page title displayed in search results. Include the brand. < 60 chars.
description: Learn about the administrative tools, tasks and best practices for managing Windows clients across your enterprise. # Required; article description that is displayed in search results. < 160 chars.
services: windows-10
ms.service: windows-10 #Required; service per approved list. service slug assigned to your service by ACOM.
ms.subservice: subservice
ms.topic: landing-page # Required
ms.collection: windows-10
author: greg-lindsay #Required; your GitHub user alias, with correct capitalization.
ms.author: greglin #Required; microsoft alias of author; optional team alias.
ms.date: 04/30/2021 #Required; mm/dd/yyyy format.
localization_priority: medium
# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
landingContent:
# Cards and links should be based on top customer tasks or top subjects
# Start card title with a verb
# Card (optional)
- title: Device management
linkLists:
- linkListType: overview
links:
- text: Administrative Tools in Windows 10
url: administrative-tools-in-windows-10.md
- text: Create mandatory user profiles
url: mandatory-user-profile.md
- text: Mobile device management (MDM)
url: mdm/index.md
- text: MDM for device updates
url: mdm/device-update-management.md
- text: Mobile device enrollment
url: mdm/mobile-device-enrollment.md
# Card (optional)
- title: CSP reference documentation
linkLists:
- linkListType: overview
links:
- text: Configuration service provider reference
url: mdm/configuration-service-provider-reference.md
- text: DynamicManagement CSP
url: mdm/dynamicmanagement-csp.md
- text: BitLocker CSP
url: mdm/bitlocker-csp.md
- text: Policy CSP - Update
url: mdm/policy-csp-update.md
# Card (optional)
- title: Troubleshoot Windows clients
linkLists:
- linkListType: how-to-guide
links:
- text: Troubleshoot Windows 10 clients
url: windows-10-support-solutions.md
- text: Advanced troubleshooting for Windows networking
url: troubleshoot-networking.md
- text: Advanced troubleshooting for Windows start-up
url: troubleshoot-networking.md
- text: Advanced troubleshooting for Windows networking
url: troubleshoot-windows-startup.md

78
windows/client-management/toc.yml
View File

@ -1,39 +1,49 @@
items: items:
- name: Manage clients in Windows 10 - name: Windows client management
href: index.md href: index.yml
items: items:
- name: Administrative Tools in Windows 10 - name: Client management tools and settings
href: administrative-tools-in-windows-10.md items:
items: - name: Administrative Tools in Windows 10
href: administrative-tools-in-windows-10.md
- name: Use Quick Assist to help users - name: Use Quick Assist to help users
href: quick-assist.md href: quick-assist.md
- name: Create mandatory user profiles - name: Create mandatory user profiles
href: mandatory-user-profile.md href: mandatory-user-profile.md
- name: Connect to remote Azure Active Directory-joined PC - name: Connect to remote Azure Active Directory-joined PC
href: connect-to-remote-aadj-pc.md href: connect-to-remote-aadj-pc.md
- name: Join Windows 10 Mobile to Azure Active Directory - name: Join Windows 10 Mobile to Azure Active Directory
href: join-windows-10-mobile-to-azure-active-directory.md href: join-windows-10-mobile-to-azure-active-directory.md
- name: New policies for Windows 10 - name: New policies for Windows 10
href: new-policies-for-windows-10.md href: new-policies-for-windows-10.md
- name: Windows 10 default media removal policy - name: Windows 10 default media removal policy
href: change-default-removal-policy-external-storage-media.md href: change-default-removal-policy-external-storage-media.md
- name: Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education - name: Group Policies that apply only to Windows 10 Enterprise and Windows 10 Education
href: group-policies-for-enterprise-and-education-editions.md href: group-policies-for-enterprise-and-education-editions.md
- name: Manage the Settings app with Group Policy - name: Manage the Settings app with Group Policy
href: manage-settings-app-with-group-policy.md href: manage-settings-app-with-group-policy.md
- name: What version of Windows am I running - name: What version of Windows am I running
href: windows-version-search.md href: windows-version-search.md
- name: Reset a Windows 10 Mobile device - name: Reset a Windows 10 Mobile device
href: reset-a-windows-10-mobile-device.md href: reset-a-windows-10-mobile-device.md
- name: Transitioning to modern management - name: Transitioning to modern management
href: manage-windows-10-in-your-organization-modern-management.md href: manage-windows-10-in-your-organization-modern-management.md
- name: Windows 10 Mobile deployment and management guide - name: Windows 10 Mobile deployment and management guide
href: windows-10-mobile-and-mdm.md href: windows-10-mobile-and-mdm.md
- name: Windows libraries - name: Windows libraries
href: windows-libraries.md href: windows-libraries.md
- name: Troubleshoot Windows 10 clients - name: Mobile device management (MDM)
href: windows-10-support-solutions.md
items: items:
- name: Mobile Device Management
href: mdm/index.md
- name: Configuration Service Provider (CSP)
items:
- name: CSP reference
href: mdm/configuration-service-provider-reference.md
- name: Troubleshoot Windows 10 clients
items:
- name: Windows 10 support solutions
href: windows-10-support-solutions.md
- name: Advanced troubleshooting for Windows networking - name: Advanced troubleshooting for Windows networking
href: troubleshoot-networking.md href: troubleshoot-networking.md
items: items:
@ -78,7 +88,5 @@ items:
href: troubleshoot-event-id-41-restart.md href: troubleshoot-event-id-41-restart.md
- name: Stop error occurs when you update the in-box Broadcom network adapter driver - name: Stop error occurs when you update the in-box Broadcom network adapter driver
href: troubleshoot-stop-error-on-broadcom-driver-update.md href: troubleshoot-stop-error-on-broadcom-driver-update.md
- name: Mobile device management for solution providers
href: mdm/index.md
- name: Change history for Client management
href: change-history-for-client-management.md

6
windows/client-management/windows-10-support-solutions.md
View File

@ -1,6 +1,6 @@
--- ---
title: Troubleshooting Windows 10 title: Windows 10 support solutions
description: Learn where to find information about troubleshooting Windows 10 issues, for example Bitlocker issues and bugcheck errors. description: Learn where to find information about troubleshooting Windows 10 issues, for example BitLocker issues and bugcheck errors.
ms.reviewer: kaushika ms.reviewer: kaushika
manager: dansimp manager: dansimp
ms.prod: w10 ms.prod: w10
@ -12,7 +12,7 @@ ms.localizationpriority: medium
ms.topic: troubleshooting ms.topic: troubleshooting
--- ---
# Troubleshoot Windows 10 client # Windows 10 support solutions
Microsoft regularly releases both updates for Windows Server. To ensure your servers can receive future updates, including security updates, it's important to keep your servers updated. Check out - [Windows 10 and Windows Server 2016 update history](https://support.microsoft.com/en-us/help/4000825/windows-10-windows-server-2016-update-history) for a complete list of released updates. Microsoft regularly releases both updates for Windows Server. To ensure your servers can receive future updates, including security updates, it's important to keep your servers updated. Check out - [Windows 10 and Windows Server 2016 update history](https://support.microsoft.com/en-us/help/4000825/windows-10-windows-server-2016-update-history) for a complete list of released updates.

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-new-install.md
View File

@ -1,5 +1,5 @@
--- ---
title: Windows Hello for Business Trust New Installation (Windows Hello for Business) title: Hybrid Azure AD joined Windows Hello for Business Trust New Installation (Windows Hello for Business)
description: Learn about new installations for Windows Hello for Business certificate trust and the various technologies hybrid certificate trust depoyments rely on. description: Learn about new installations for Windows Hello for Business certificate trust and the various technologies hybrid certificate trust depoyments rely on.
keywords: identity, PIN, biometric, Hello, passport, WHFB keywords: identity, PIN, biometric, Hello, passport, WHFB
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Windows Hello for Business Certificate Trust New Installation # Hybrid Azure AD joined Windows Hello for Business Certificate Trust New Installation
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-devreg.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Device Registration for Hybrid Windows Hello for Business title: Configure Device Registration for Hybrid Azure AD joined Windows Hello for Business
description: Azure Device Registration for Hybrid Certificate Trust Deployment (Windows Hello for Business) description: Azure Device Registration for Hybrid Certificate Trust Deployment (Windows Hello for Business)
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, cert-trust, device, registration keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, cert-trust, device, registration
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/18/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Device Registration for Hybrid Windows Hello for Business # Configure Device Registration for Hybrid Azure AD joined Windows Hello for Business
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs.md
View File

@ -1,5 +1,5 @@
--- ---
title: Hybrid Windows Hello for Business Prerequisites title: Hybrid Azure AD joined Windows Hello for Business Prerequisites
description: Learn these prerequisites for hybrid Windows Hello for Business deployments using certificate trust. description: Learn these prerequisites for hybrid Windows Hello for Business deployments using certificate trust.
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Hybrid Windows Hello for Business Prerequisites # Hybrid Azure AD joined Windows Hello for Business Prerequisites
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

10
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-provision.md
View File

@ -1,5 +1,5 @@
--- ---
title: Hybrid Windows Hello for Business Provisioning (Windows Hello for Business) title: Hybrid Azure AD joined Windows Hello for Business Certificate Trust Provisioning (Windows Hello for Business)
description: In this article, learn about provisioning for hybrid certificate trust deployments of Windows Hello for Businesss. description: In this article, learn about provisioning for hybrid certificate trust deployments of Windows Hello for Businesss.
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Hybrid Windows Hello for Business Provisioning # Hybrid Azure AD joined Windows Hello for Business Certificate Trust Provisioning
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later
@ -27,7 +27,7 @@ ms.reviewer:
## Provisioning ## Provisioning
The Windows Hello for Business provisioning begins immediately after the user has signed in, after the user profile is loaded, but before the user receives their desktop. Windows only launches the provisioning experience if all the prerequisite checks pass. You can determine the status of the prerequisite checks by viewing the **User Device Registration** in the **Event Viewer** under **Applications and Services Logs\Microsoft\Windows**. The Windows Hello for Business provisioning begins immediately after the user has signed in, after the user profile is loaded, but before the user receives their desktop. Windows only launches the provisioning experience if all the prerequisite checks pass. You can determine the status of the prerequisite checks by viewing the **User Device Registration** in the **Event Viewer** under **Applications and Services Logs\Microsoft\Windows**.
![Event358](images/Event358.png) ![Event358 from User Device Registration log showing Windows Hello for Business prerequisite check result](images/Event358.png)
The first thing to validate is the computer has processed device registration. You can view this from the User device registration logs where the check **Device is AAD joined (AADJ or DJ++): Yes** appears. Additionally, you can validate this using the **dsregcmd /status** command from a console prompt where the value for **AzureADJoined** reads **Yes**. The first thing to validate is the computer has processed device registration. You can view this from the User device registration logs where the check **Device is AAD joined (AADJ or DJ++): Yes** appears. Additionally, you can validate this using the **dsregcmd /status** command from a console prompt where the value for **AzureADJoined** reads **Yes**.
@ -81,4 +81,4 @@ The certificate authority validates the certificate was signed by the registrati
3. [New Installation Baseline](hello-hybrid-cert-new-install.md) 3. [New Installation Baseline](hello-hybrid-cert-new-install.md)
4. [Configure Azure Device Registration](hello-hybrid-cert-trust-devreg.md) 4. [Configure Azure Device Registration](hello-hybrid-cert-trust-devreg.md)
5. [Configure Windows Hello for Business policy settings](hello-hybrid-cert-whfb-settings-policy.md) 5. [Configure Windows Hello for Business policy settings](hello-hybrid-cert-whfb-settings-policy.md)
6. Sign-in and Provision (*You are here*) 6. Sign-in and Provision (*You are here*)

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-ad.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Hybrid Windows Hello for Business - Active Directory (AD) title: Configure Hybrid Azure AD joined Windows Hello for Business - Active Directory (AD)
description: Discussing the configuration of Active Directory (AD) in a Hybrid deployment of Windows Hello for Business description: Discussing the configuration of Active Directory (AD) in a Hybrid deployment of Windows Hello for Business
keywords: identity, PIN, biometric, Hello, passport, WHFB, ad keywords: identity, PIN, biometric, Hello, passport, WHFB, ad
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Windows Hello for Business: Active Directory # Configure Hybrid Azure AD joined Windows Hello for Business: Active Directory
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configuring Hybrid Windows Hello for Business - Active Directory Federation Services (ADFS) title: Configuring Hybrid Azure AD joined Windows Hello for Business - Active Directory Federation Services (ADFS)
description: Discussing the configuration of Active Directory Federation Services (ADFS) in a Hybrid deployment of Windows Hello for Business description: Discussing the configuration of Active Directory Federation Services (ADFS) in a Hybrid deployment of Windows Hello for Business
keywords: identity, PIN, biometric, Hello, passport, WHFB, adfs keywords: identity, PIN, biometric, Hello, passport, WHFB, adfs
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 01/14/2021 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Windows Hello for Business: Active Directory Federation Services # Configure Hybrid Azure AD joined Windows Hello for Business: Active Directory Federation Services
**Applies to** **Applies to**

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-dir-sync.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Hybrid Windows Hello for Business Directory Synch title: Configure Hybrid Azure AD joined Windows Hello for Business Directory Synch
description: Discussing Directory Synchronization in a Hybrid deployment of Windows Hello for Business description: Discussing Directory Synchronization in a Hybrid deployment of Windows Hello for Business
keywords: identity, PIN, biometric, Hello, passport, WHFB, dirsync, connect keywords: identity, PIN, biometric, Hello, passport, WHFB, dirsync, connect
ms.prod: w10 ms.prod: w10
@ -13,11 +13,11 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 10/23/2017 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business: Directory Synchronization # Configure Hybrid Azure AD joined Windows Hello for Business: Directory Synchronization
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-pki.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configuring Hybrid Windows Hello for Business - Public Key Infrastructure (PKI) title: Configuring Hybrid Azure AD joined Windows Hello for Business - Public Key Infrastructure (PKI)
description: Discussing the configuration of the Public Key Infrastructure (PKI) in a Hybrid deployment of Windows Hello for Business description: Discussing the configuration of the Public Key Infrastructure (PKI) in a Hybrid deployment of Windows Hello for Business
keywords: identity, PIN, biometric, Hello, passport, WHFB, PKI keywords: identity, PIN, biometric, Hello, passport, WHFB, PKI
ms.prod: w10 ms.prod: w10
@ -13,11 +13,11 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 01/14/2021 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business: Public Key Infrastructure # Configure Hybrid Azure AD joined Windows Hello for Business: Public Key Infrastructure
**Applies to** **Applies to**

6
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-policy.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configuring Hybrid Windows Hello for Business - Group Policy title: Configuring Hybrid Azure AD joined Windows Hello for Business - Group Policy
description: Discussing the configuration of Group Policy in a Hybrid deployment of Windows Hello for Business description: Discussing the configuration of Group Policy in a Hybrid deployment of Windows Hello for Business
keywords: identity, PIN, biometric, Hello, passport, WHFB keywords: identity, PIN, biometric, Hello, passport, WHFB
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business: Group Policy # Configure Hybrid Azure AD joined Windows Hello for Business: Group Policy
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

4
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings.md
View File

@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Windows Hello for Business # Configure Hybrid Azure AD joined Windows Hello for Business
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md
View File

@ -1,5 +1,5 @@
--- ---
title: Windows Hello for Business Key Trust New Installation title: Windows Hello for Business Hybrid Azure AD joined Key Trust New Installation
description: Learn how to configure a hybrid key trust deployment of Windows Hello for Business for systems with no previous installations. description: Learn how to configure a hybrid key trust deployment of Windows Hello for Business for systems with no previous installations.
keywords: identity, PIN, biometric, Hello, passport, WHFB keywords: identity, PIN, biometric, Hello, passport, WHFB
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Windows Hello for Business Key Trust New Installation # Windows Hello for Business Hybrid Azure AD joined Key Trust New Installation
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-devreg.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Device Registration for Hybrid key trust Windows Hello for Business title: Configure Device Registration for Hybrid Azure AD joined key trust Windows Hello for Business
description: Azure Device Registration for Hybrid Certificate Key Deployment (Windows Hello for Business) description: Azure Device Registration for Hybrid Certificate Key Deployment (Windows Hello for Business)
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust, device, registration keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust, device, registration
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Device Registration for Hybrid key trust Windows Hello for Business # Configure Device Registration for Hybrid Azure AD joined key trust Windows Hello for Business
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-dirsync.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Directory Synchronization for Hybrid key trust Windows Hello for Business title: Configure Directory Synchronization for Hybrid Azure AD joined key trust Windows Hello for Business
description: Azure Directory Synchronization for Hybrid Certificate Key Deployment (Windows Hello for Business) description: Azure Directory Synchronization for Hybrid Certificate Key Deployment (Windows Hello for Business)
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust, directory, synchronization, AADConnect keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust, directory, synchronization, AADConnect
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Directory Synchronization for Hybrid key trust Windows Hello for Business # Configure Directory Synchronization for Hybrid Azure AD joined key trust Windows Hello for Business
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

8
windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md
View File

@ -1,5 +1,5 @@
--- ---
title: Hybrid Key trust Windows Hello for Business Prerequisites (Windows Hello for Business) title: Hybrid Azure AD joined Key trust Windows Hello for Business Prerequisites (Windows Hello for Business)
description: Learn about the prerequisites for hybrid Windows Hello for Business deployments using key trust and what the next steps are in the deployment process. description: Learn about the prerequisites for hybrid Windows Hello for Business deployments using key trust and what the next steps are in the deployment process.
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/20/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Hybrid Key trust Windows Hello for Business Prerequisites # Hybrid Azure AD joined Key trust Windows Hello for Business Prerequisites
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later
@ -74,7 +74,7 @@ The minimum required Enterprise certificate authority that can be used with Wind
* The certificate Enhanced Key Usage section must contain Client Authentication (1.3.6.1.5.5.7.3.2), Server Authentication (1.3.6.1.5.5.7.3.1), and KDC Authentication (1.3.6.1.5.2.3.5). * The certificate Enhanced Key Usage section must contain Client Authentication (1.3.6.1.5.5.7.3.2), Server Authentication (1.3.6.1.5.5.7.3.1), and KDC Authentication (1.3.6.1.5.2.3.5).
* The certificate Subject Alternative Name section must contain the Domain Name System (DNS) name. * The certificate Subject Alternative Name section must contain the Domain Name System (DNS) name.
* The certificate template must have an extension that has the value "DomainController", encoded as a [BMPstring](/windows/win32/seccertenroll/about-bmpstring). If you are using Windows Server Enterprise Certificate Authority, this extension is already included in the domain controller certificate template. * The certificate template must have an extension that has the value "DomainController", encoded as a [BMPstring](/windows/win32/seccertenroll/about-bmpstring). If you are using Windows Server Enterprise Certificate Authority, this extension is already included in the domain controller certificate template.
* The domain controller certificate must be installed in the local computer's certificate store. See [Configure Hybrid Windows Hello for Business: Public Key Infrastructure](./hello-hybrid-cert-whfb-settings-pki.md) for details. * The domain controller certificate must be installed in the local computer's certificate store. See [Configure Hybrid Windows Hello for Business: Public Key Infrastructure](./hello-hybrid-key-whfb-settings-pki.md) for details.
> [!IMPORTANT] > [!IMPORTANT]

8
windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-provision.md
View File

@ -1,5 +1,5 @@
--- ---
title: Hybrid Windows Hello for Business key trust Provisioning (Windows Hello for Business) title: Hybrid Azure AD joined Windows Hello for Business key trust Provisioning (Windows Hello for Business)
description: Learn about provisioning for hybrid key trust deployments of Windows Hello for Business and learn where to find the hybrid key trust deployment guide. description: Learn about provisioning for hybrid key trust deployments of Windows Hello for Business and learn where to find the hybrid key trust deployment guide.
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/20/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Hybrid Windows Hello for Business Provisioning # Hybrid Azure AD joined Windows Hello for Business Key Trust Provisioning
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later
@ -68,4 +68,4 @@ The remainder of the provisioning includes Windows Hello for Business requesting
4. [Configure Directory Synchronization](hello-hybrid-key-trust-dirsync.md) 4. [Configure Directory Synchronization](hello-hybrid-key-trust-dirsync.md)
5. [Configure Azure Device Registration](hello-hybrid-key-trust-devreg.md) 5. [Configure Azure Device Registration](hello-hybrid-key-trust-devreg.md)
6. [Configure Windows Hello for Business settings](hello-hybrid-key-whfb-settings.md) 6. [Configure Windows Hello for Business settings](hello-hybrid-key-whfb-settings.md)
7. Sign-in and Provision(*You are here*) 7. Sign-in and Provision(*You are here*)

6
windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-ad.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configuring Hybrid key trust Windows Hello for Business - Active Directory (AD) title: Configuring Hybrid Azure AD joined key trust Windows Hello for Business - Active Directory (AD)
description: Configuring Hybrid key trust Windows Hello for Business - Active Directory (AD) description: Configuring Hybrid key trust Windows Hello for Business - Active Directory (AD)
keywords: identity, PIN, biometric, Hello, passport, WHFB, ad, key trust, key-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, ad, key trust, key-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/20/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configuring Hybrid key trust Windows Hello for Business: Active Directory # Configuring Hybrid Azure AD joined key trust Windows Hello for Business: Active Directory
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

6
windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-dir-sync.md
View File

@ -1,5 +1,5 @@
--- ---
title: Hybrid Windows Hello for Business - Directory Synchronization title: Hybrid Azure AD joined Windows Hello for Business - Directory Synchronization
description: How to configure Hybrid key trust Windows Hello for Business - Directory Synchronization description: How to configure Hybrid key trust Windows Hello for Business - Directory Synchronization
keywords: identity, PIN, biometric, Hello, passport, WHFB, dirsync, connect, Windows Hello, AD Connect, key trust, key-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, dirsync, connect, Windows Hello, AD Connect, key trust, key-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business: Directory Synchronization # Configure Hybrid Azure AD joined Windows Hello for Business: Directory Synchronization
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

20
windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-pki.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Hybrid key trust Windows Hello for Business title: Configure Hybrid Azure AD joined key trust Windows Hello for Business
description: Configuring Hybrid key trust Windows Hello for Business - Public Key Infrastructure (PKI) description: Configuring Hybrid key trust Windows Hello for Business - Public Key Infrastructure (PKI)
keywords: identity, PIN, biometric, Hello, passport, WHFB, PKI, Windows Hello, key trust, key-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, PKI, Windows Hello, key trust, key-trust
ms.prod: w10 ms.prod: w10
@ -13,11 +13,11 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 01/14/2021 ms.date: 04/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business: Public Key Infrastructure # Configure Hybrid Azure AD joined Windows Hello for Business: Public Key Infrastructure
**Applies to** **Applies to**
@ -50,7 +50,8 @@ Sign-in a certificate authority or management workstations with _Domain Admin_ e
3. In the **Certificate Template Console**, right-click the **Kerberos Authentication** template in the details pane and click **Duplicate Template**. 3. In the **Certificate Template Console**, right-click the **Kerberos Authentication** template in the details pane and click **Duplicate Template**.
4. On the **Compatibility** tab, clear the **Show resulting changes** check box. Select **Windows Server 2008 R2** from the **Certification Authority** list. Select **Windows 7.Server 2008 R2** from the **Certification Recipient** list. 4. On the **Compatibility** tab, clear the **Show resulting changes** check box. Select **Windows Server 2008 R2** from the **Certification Authority** list. Select **Windows 7.Server 2008 R2** from the **Certification Recipient** list.
5. On the **General** tab, type **Domain Controller Authentication (Kerberos)** in Template display name. Adjust the validity and renewal period to meet your enterprise's needs. 5. On the **General** tab, type **Domain Controller Authentication (Kerberos)** in Template display name. Adjust the validity and renewal period to meet your enterprise's needs.
**Note**If you use different template names, you'll need to remember and substitute these names in different portions of the lab. > [!NOTE]
> If you use different template names, you'll need to remember and substitute these names in different portions of the lab.
6. On the **Subject Name** tab, select the **Build from this Active Directory information** button if it is not already selected. Select **None** from the **Subject name format** list. Select **DNS name** from the **Include this information in alternate subject** list. Clear all other items. 6. On the **Subject Name** tab, select the **Build from this Active Directory information** button if it is not already selected. Select **None** from the **Subject name format** list. Select **DNS name** from the **Include this information in alternate subject** list. Clear all other items.
7. On the **Cryptography** tab, select **Key Storage Provider** from the **Provider Category** list. Select **RSA** from the **Algorithm name** list. Type **2048** in the **Minimum key size** text box. Select **SHA256** from the **Request hash** list. Click **OK**. 7. On the **Cryptography** tab, select **Key Storage Provider** from the **Provider Category** list. Select **RSA** from the **Algorithm name** list. Type **2048** in the **Minimum key size** text box. Select **SHA256** from the **Request hash** list. Click **OK**.
8. Close the console. 8. Close the console.
@ -81,11 +82,12 @@ Sign-in a certificate authority or management workstations with _Enterprise Admi
The certificate template is configured to supersede all the certificate templates provided in the certificate templates superseded templates list. However, the certificate template and the superseding of certificate templates is not active until you publish the certificate template to one or more certificate authorities. The certificate template is configured to supersede all the certificate templates provided in the certificate templates superseded templates list. However, the certificate template and the superseding of certificate templates is not active until you publish the certificate template to one or more certificate authorities.
> [!NOTE] > [!NOTE]
> A domain controller's certificate must chain to a certificate in the NTAuth store in Active Directory. By default, online "Enterprise" Active Directory Certificate Authority certificates are added to the NTAuth store at installation time. If you are using a third-party CA, this is not done by default. If the domain controller certificate does not chain to a trusted CA in the NTAuth store, user authentication will fail. > The domain controller's certificate must chain to a root in the NTAuth store. By default, the Active Directory Certificate Authority's root certificate is added to the NTAuth store. If you are using a third-party CA, this may not be done by default. If the domain controller certificate does not chain to a root in the NTAuth store, user authentication will fail.
> >you can view
> You can view an AD forest's NTAuth store (NTAuthCertificates) using PKIVIEW.MSC from an ADCS CA. Open PKIView.msc, then click the Action menu -> Manage AD Containers. To see all certificates in the NTAuth store, run **Certutil -viewstore -enterprise NTAuth** from the command-line interface (Cmd.exe). >
>'''powershell
### Publish Certificate Templates to a Certificate Authority >Certutil -view
>Publish Certificate Templates to a Certificate Authority
The certificate authority may only issue certificates for certificate templates that are published to that certificate authority. If you have more than one certificate authority and you want that certificate authority to issue certificates based on a specific certificate template, then you must publish the certificate template to all certificate authorities that are expected to issue the certificate. The certificate authority may only issue certificates for certificate templates that are published to that certificate authority. If you have more than one certificate authority and you want that certificate authority to issue certificates based on a specific certificate template, then you must publish the certificate template to all certificate authorities that are expected to issue the certificate.

6
windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Hybrid Windows Hello for Business - Group Policy title: Configure Hybrid Azure AD joined Windows Hello for Business - Group Policy
description: Configuring Hybrid key trust Windows Hello for Business - Group Policy description: Configuring Hybrid key trust Windows Hello for Business - Group Policy
keywords: identity, PIN, biometric, Hello, passport, WHFB, Windows Hello, key trust, key-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, Windows Hello, key trust, key-trust
ms.prod: w10 ms.prod: w10
@ -13,10 +13,10 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/20/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business: Group Policy # Configure Hybrid Azure AD joined Windows Hello for Business: Group Policy
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later

9
windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Hybrid Windows Hello for Business key trust Settings title: Configure Hybrid Azure AD joined Windows Hello for Business key trust Settings
description: Begin the process of configuring your hybrid key trust environment for Windows Hello for Business. Start with your Active Directory configuration. description: Begin the process of configuring your hybrid key trust environment for Windows Hello for Business. Start with your Active Directory configuration.
keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, certificate-trust
ms.prod: w10 ms.prod: w10
@ -13,18 +13,17 @@ manager: dansimp
ms.collection: M365-identity-device-management ms.collection: M365-identity-device-management
ms.topic: article ms.topic: article
localizationpriority: medium localizationpriority: medium
ms.date: 08/19/2018 ms.date: 4/30/2021
ms.reviewer: ms.reviewer:
--- ---
# Configure Hybrid Windows Hello for Business key trust settings # Configure Hybrid Azure AD joined Windows Hello for Business key trust settings
**Applies to** **Applies to**
- Windows 10, version 1703 or later - Windows 10, version 1703 or later
- Hybrid deployment - Hybrid deployment
- Key trust - Key trust
You are ready to configure your hybrid Azure AD joined key trust environment for Windows Hello for Business.
You are ready to configure your hybrid key trust environment for Windows Hello for Business.
> [!IMPORTANT] > [!IMPORTANT]
> Ensure your environment meets all the [prerequisites](hello-hybrid-key-trust-prereqs.md) before proceeding. Review the [New Installation baseline](hello-hybrid-key-new-install.md) section of this deployment document to learn how to prepare your environment for your Windows Hello for Business deployment. > Ensure your environment meets all the [prerequisites](hello-hybrid-key-trust-prereqs.md) before proceeding. Review the [New Installation baseline](hello-hybrid-key-new-install.md) section of this deployment document to learn how to prepare your environment for your Windows Hello for Business deployment.