deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 06:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #815 from MicrosoftDocs/master

Browse Source 
updating v-jowirt with Master
This commit is contained in:
Daniel Simpson 2019-08-01 12:38:52 -07:00 committed by GitHub
commit fd31dec3d8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
475 changed files with 7139 additions and 4044 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

110
.openpublishing.redirection.json
View File

@ -14156,6 +14156,116 @@
"redirect_document_id": true "redirect_document_id": true
}, },
{ {
"source_path": "windows/client-management/mdm/create-a-custom-configuration-service-provider.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": true
},
{
"source_path": "windows/client-management/mdm/design-a-custom-windows-csp.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/iconfigserviceprovider2.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/iconfigserviceprovider2configmanagernotification.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/iconfigserviceprovider2getnode.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnode.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodeadd.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodeclear.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodecopy.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodedeletechild.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodedeleteproperty.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodeexecute.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodegetchildnodenames.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodegetproperty.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodegetpropertyidentifiers.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodegetvalue.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodemove.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodesetproperty.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodesetvalue.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspnodetransactioning.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/icspvalidate.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/client-management/mdm/samples-for-writing-a-custom-configuration-service-provider.md",
"redirect_url": "/windows/client-management/mdm/configuration-service-provider-reference",
"redirect_document_id": false
},
{
"source_path": "windows/keep-secure/collect-wip-audit-event-logs.md", "source_path": "windows/keep-secure/collect-wip-audit-event-logs.md",
"redirect_url": "/windows/threat-protection/windows-information-protection/collect-wip-audit-event-logs", "redirect_url": "/windows/threat-protection/windows-information-protection/collect-wip-audit-event-logs",
"redirect_document_id": true "redirect_document_id": true

4
browsers/edge/includes/configure-kiosk-mode-supported-values-include.md
View File

@ -11,7 +11,7 @@ ms.topic: include
| | | | | |
|----------|------| |----------|------|
|**Single-app**<p><a href="/images/Picture1.png" alt="Full-sized view single-app digital/interactive signage" target="_blank">![thumbnail](../images/Picture1-sm.png)</a><p>**Digital/interactive signage**<p>Displays a specific site in full-screen mode, running Microsoft Edge InPrivate protecting user data.<ul><li>**Digital signage** does not require user interaction.<p>***Example.*** Use digital signage for things like a rotating advertisement or menu.<p></li><li>**Interactive signage**, on the other hand, requires user interaction within the page but doesn’t allow for any other uses, such as browsing the internet.<p>***Example.*** Use interactive signage for things like a building business directory or restaurant order/pay station.</li></ul><p>**Policy setting** = Not configured (0 default)<p> | <p>&nbsp;<p><a href="/images/Picture2.png" alt="Full-sized view single-app public browsing" target="_blank">![thumbnail](../images/Picture2-sm.png)</a> <p><strong>Public browsing</strong><p>Runs a limited multi-tab version of Microsoft Edge, protecting user data. Microsoft Edge is the only app users can use on the device, preventing them from customizing Microsoft Edge. Users can only browse publically or end their browsing session.<p>The single-app public browsing mode is the only kiosk mode that has an <strong>End session</strong> button. Microsoft Edge also resets the session after a specified time of user inactivity. Both restart Microsoft Edge and clear the user’s session.<p><em><strong>Example.</strong></em> A public library or hotel concierge desk are two examples of public browsing that provides access to Microsoft Edge and other apps. <p><strong>Policy setting</strong> = Enabled (1) | |**Single-app**<p><a href="../images/Picture1.png" alt="Full-sized view single-app digital/interactive signage" target="_blank">![thumbnail](../images/Picture1-sm.png)</a><p>**Digital/interactive signage**<p>Displays a specific site in full-screen mode, running Microsoft Edge InPrivate protecting user data.<ul><li>**Digital signage** does not require user interaction.<p>***Example.*** Use digital signage for things like a rotating advertisement or menu.<p></li><li>**Interactive signage**, on the other hand, requires user interaction within the page but doesn’t allow for any other uses, such as browsing the internet.<p>***Example.*** Use interactive signage for things like a building business directory or restaurant order/pay station.</li></ul><p>**Policy setting** = Not configured (0 default)<p> | <p>&nbsp;<p><a href="../images/Picture2.png" alt="Full-sized view single-app public browsing" target="_blank">![thumbnail](../images/Picture2-sm.png)</a> <p><strong>Public browsing</strong><p>Runs a limited multi-tab version of Microsoft Edge, protecting user data. Microsoft Edge is the only app users can use on the device, preventing them from customizing Microsoft Edge. Users can only browse publically or end their browsing session.<p>The single-app public browsing mode is the only kiosk mode that has an <strong>End session</strong> button. Microsoft Edge also resets the session after a specified time of user inactivity. Both restart Microsoft Edge and clear the user’s session.<p><em><strong>Example.</strong></em> A public library or hotel concierge desk are two examples of public browsing that provides access to Microsoft Edge and other apps. <p><strong>Policy setting</strong> = Enabled (1) |
| **Multi-app**<p><a href="/images/Picture5.png" alt="Full-sized view multi-app normal browsing" target="_blank">![thumbnail](../images/Picture5-sm.png)</a><p>**Normal browsing**<p>Runs a full-version of Microsoft Edge with all browsing features and preserves the user data and state between sessions.<p>Some features may not work depending on what other apps you have configured in assigned access. For example, installing extensions or books from the Microsoft store are not allowed if the store is not available. Also, if Internet Explorer 11 is set up in assigned access, you can enable [EnterpriseModeSiteList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.<p>**Policy setting** = Not configured (0 default) | <p>&nbsp;<p><a href="/images/Picture6.png" alt="Full-sized view multi-app public browsing" target="_blank">![thumbnail](../images/Picture6-sm.png)</a><p><strong>Public browsing</strong><p>Runs a multi-tab version of Microsoft Edge InPrivate with a tailored experience for kiosks that runs in full-screen mode. Users can open and close Microsoft Edge and launch other apps if allowed by assigned access. Instead of an End session button to clear their browsing session, the user closes Microsoft Edge normally.<p>In this configuration, Microsoft Edge can interact with other applications. For example, if Internet Explorer 11 is set up in multi-app assigned access, you can enable [EnterpriseModeSiteList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support. <p><em><strong>Example.</strong></em> A public library or hotel concierge desk are two examples of public browsing that provides access to Microsoft Edge and other apps.<p><strong>Policy setting</strong> = Enabled (1) | | **Multi-app**<p><a href="../images/Picture5.png" alt="Full-sized view multi-app normal browsing" target="_blank">![thumbnail](../images/Picture5-sm.png)</a><p>**Normal browsing**<p>Runs a full-version of Microsoft Edge with all browsing features and preserves the user data and state between sessions.<p>Some features may not work depending on what other apps you have configured in assigned access. For example, installing extensions or books from the Microsoft store are not allowed if the store is not available. Also, if Internet Explorer 11 is set up in assigned access, you can enable [EnterpriseModeSiteList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support.<p>**Policy setting** = Not configured (0 default) | <p>&nbsp;<p><a href="../images/Picture6.png" alt="Full-sized view multi-app public browsing" target="_blank">![thumbnail](../images/Picture6-sm.png)</a><p><strong>Public browsing</strong><p>Runs a multi-tab version of Microsoft Edge InPrivate with a tailored experience for kiosks that runs in full-screen mode. Users can open and close Microsoft Edge and launch other apps if allowed by assigned access. Instead of an End session button to clear their browsing session, the user closes Microsoft Edge normally.<p>In this configuration, Microsoft Edge can interact with other applications. For example, if Internet Explorer 11 is set up in multi-app assigned access, you can enable [EnterpriseModeSiteList](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) to automatically switch users to Internet Explorer 11 for sites that need backward compatibility support. <p><em><strong>Example.</strong></em> A public library or hotel concierge desk are two examples of public browsing that provides access to Microsoft Edge and other apps.<p><strong>Policy setting</strong> = Enabled (1) |
--- ---

2
browsers/edge/includes/prevent-turning-off-required-extensions-include.md
View File

@ -20,7 +20,7 @@ ms.topic: include
| Group Policy | Description | | Group Policy | Description |
|---------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |---------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Disabled or not configured<br>**(default)** | Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. | | Disabled or not configured<br>**(default)** | Allowed. Users can uninstall extensions. If you previously enabled this policy and you decide to disable it, the list of extension PFNs defined in this policy get ignored. |
| Enabled | Provide a semi-colon delimited list of extension PFNs. For example, adding the following OneNote Web Clipper and Office Online extension prevents users from turning it off:<p><p>*Microsoft.OneNoteWebClipper8wekyb3d8bbwe;Microsoft.OfficeOnline8wekyb3d8bbwe* <p>After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune.<p>Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the [Allow Developer Tools](../group-policies/developer-settings-gp.md#allow-developer-tools) policy, then this policy does not prevent users from debugging and altering the logic on an extension. | | Enabled | Provide a semi-colon delimited list of extension PFNs. For example, adding the following OneNote Web Clipper and Office extension prevents users from turning it off:<p><p>*Microsoft.OneNoteWebClipper8wekyb3d8bbwe;Microsoft.OfficeOnline8wekyb3d8bbwe* <p>After defining the list of extensions, you deploy them through any available enterprise deployment channel, such as Microsoft Intune.<p>Removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the [Allow Developer Tools](../group-policies/developer-settings-gp.md#allow-developer-tools) policy, then this policy does not prevent users from debugging and altering the logic on an extension. |
--- ---

6
devices/hololens/hololens-cortana.md
View File

@ -31,13 +31,13 @@ Here are some things you can try saying (remember to say "Hey Cortana" first):
- Restart. - Restart.
- Go to sleep. - Go to sleep.
- Mute. - Mute.
- Launch <app name>. - Launch `<app name>`.
- Move <app name> here (gaze at the spot you want the app to move to). - Move `<app name>` here (gaze at the spot you want the app to move to).
- Go to Start. - Go to Start.
- Take a picture. - Take a picture.
- Start recording. (Starts recording a video.) - Start recording. (Starts recording a video.)
- Stop recording. (Stops recording a video.) - Stop recording. (Stops recording a video.)
- Call <contact>. (Requires Skype.) - Call `<contact>`. (Requires Skype.)
- What time is it? - What time is it?
- Show me the latest NBA scores. - Show me the latest NBA scores.
- How much battery do I have left? - How much battery do I have left?

75
devices/hololens/hololens-setup.md
View File

@ -1,37 +1,43 @@
--- ---
title: Set up HoloLens (HoloLens) title: Set up a new HoloLens
description: The first time you set up HoloLens, you'll need a Wi-Fi network and either a Microsoft or Azure Active Directory account. description: This guide walks through first time set up. You'll need a Wi-Fi network and either a Microsoft (MSA) or Azure Active Directory (AAD) account.
ms.prod: hololens ms.prod: hololens
ms.sitesec: library ms.sitesec: library
author: dansimp author: scooley
ms.author: dansimp ms.author: scooley
ms.topic: article ms.topic: quickstart
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 07/27/2017 ms.date: 07/14/2019
ms.reviewer:
manager: dansimp
--- ---
# Set up HoloLens # Set up HoloLens for the first time
Before you get started setting up your HoloLens, make sure you have a Wi-Fi network and a Microsoft account or an Azure Active Directory (Azure AD) account. Follow along to set up a HoloLens for the first time. At the end of this quickstart, you'll be able to use HoloLens and navigate HoloLens settings on-device.
## Network connectivity requirements This is a high level unboxing guide to become familiar with HoloLens.
See [Set up HoloLens in the enterprise](hololens-requirements.md) to configure HoloLens for scale enterprise deployment and ongoing device management.
The first time you use your HoloLens, you'll be guided through connecting to a Wi-Fi network. You need to connect HoloLens to a Wi-Fi network with Internet connectivity so that the user account can be authenticated. ## Prerequisites
- It can be an open Wi-Fi or password-protected Wi-Fi network. - Internet access.
- The Wi-Fi network cannot require certificates to connect. - Wi-Fi is the easiest way to do first set up on both HoloLens and HoloLens 2. It can be an open Wi-Fi or password-protected Wi-Fi network; the Wi-Fi network does not need to provide access to enterprise resources or intranet sites.
- The Wi-Fi network does not need to provide access to enterprise resources or intranet sites. - HoloLens 2 can connect to the internet via ethernet and a USB-C adapter.
- a user account - Microsoft (MSA) or Azure Active Directory (AAD)
## HoloLens setup ## Prepare for first-boot
The HoloLens setup process combines a quick tutorial on using HoloLens with the steps needed to connect to the network and add an account. Become familiar with the HoloLens hardware and prepare to turn your HoloLens on for the first time.
1. Be sure your HoloLens is [charged](https://support.microsoft.com/help/12627), then [adjust it](https://support.microsoft.com/help/12632) for a comfortable fit. 1. Be sure your HoloLens is [charged](https://support.microsoft.com/help/12627)
2. [Turn on HoloLens](https://support.microsoft.com/help/12642). You will be guided through a calibration procedure and how to perform [the gestures](https://support.microsoft.com/help/12644/hololens-use-gestures) that you will use to operate HoloLens. 1. [Adjust fit](https://support.microsoft.com/help/12632) for a comfortable fit.
3. Next, you'll be guided through connecting to a Wi-Fi network. 1. [Turn on HoloLens](https://support.microsoft.com/help/12642). You will be guided through a calibration procedure and how to perform [the gestures](https://support.microsoft.com/help/12644/hololens-use-gestures) that you will use to operate HoloLens.
4. After HoloLens connects to the Wi-Fi network, you select between **My work or school owns it** and **I own it**.
## Set up your HoloLens
Set up your HoloLens and your user account.
1. Connect to the internet (select Wi-Fi).
1. Sign in to your user account. You'll choose between **My work or school owns it** and **I own it**.
- When you choose **My work or school owns it**, you sign in with an Azure AD account. If your organization uses Azure AD Premium and has configured automatic MDM enrollment, HoloLens will be enrolled in MDM. If your organization does not use Azure AD Premium, automatic MDM enrollment isn't available, so you will need to [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app). - When you choose **My work or school owns it**, you sign in with an Azure AD account. If your organization uses Azure AD Premium and has configured automatic MDM enrollment, HoloLens will be enrolled in MDM. If your organization does not use Azure AD Premium, automatic MDM enrollment isn't available, so you will need to [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
1. Enter your organizational account. 1. Enter your organizational account.
2. Accept privacy statement. 2. Accept privacy statement.
@ -40,7 +46,30 @@ The HoloLens setup process combines a quick tutorial on using HoloLens with the
- When you choose **I own it**, you sign in with a Microsoft account. After setup is complete, you can [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app). - When you choose **I own it**, you sign in with a Microsoft account. After setup is complete, you can [enroll HoloLens in device management manually](hololens-enroll-mdm.md#enroll-through-settings-app).
1. Enter your Microsoft account. 1. Enter your Microsoft account.
2. Enter your password. If your Microsoft account requires [two-step verification (2FA)](https://blogs.technet.microsoft.com/microsoft_blog/2013/04/17/microsoft-account-gets-more-secure/), complete the verification process. 2. Enter your password. If your Microsoft account requires [two-step verification (2FA)](https://blogs.technet.microsoft.com/microsoft_blog/2013/04/17/microsoft-account-gets-more-secure/), complete the verification process.
5. The device sets your time zone based on information obtained from the Wi-Fi network. 1. The device sets your time zone based on information obtained from the Wi-Fi network.
6. Next, you learn how to perform the bloom gesture and how to select and place the Start screen. After you place the Start screen, setup is complete and you can begin using HoloLens. 1. Follow the first-start guides to learn how to interact with holograms, control the HoloLens with your voice, and access the start menu.
Congratulations! Setup is complete and you can begin using HoloLens.
## Explore HoloLens
### Check out on-device settings and desktop
HoloLens doesn't have an on-device command line. With that in mind, the settings section in HoloLens plays an important role in diagnosing problems on-device. Understanding the information available to HoloLens users will pay dividends when troubleshooting or configuring the device.
Open settings by opening the start menu and clicking on the **Settings** in the top bar. You can also ask Cortana to open settings.
Follow [this guide](https://docs.microsoft.com/windows/mixed-reality/navigating-the-windows-mixed-reality-home) to navigate around the HoloLens home.
### Connect bluetooth devices
Connecting a bluetooth keyboard makes typing on HoloLens as efficient as a Windows PC.
[Connect a bluetooth keyboard or clicker](https://support.microsoft.com/en-us/help/12636).
## Next steps
Start planning for HoloLens at scale with HoloLens' enterprise management features.
> [!div class="nextstepaction"]
> [HoloLens in the enterprise](hololens-requirements.md)

BIN
devices/hololens/images/hololens2-side-render.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 3.8 MiB

57
devices/hololens/index.md
View File

@ -1,46 +1,51 @@
--- ---
title: Microsoft HoloLens (HoloLens) title: Microsoft HoloLens (HoloLens)
description: HoloLens provides extra features designed for business in the Commercial Suite. description: Landing page for HoloLens commercial and enterprise management.
ms.prod: hololens ms.prod: hololens
ms.sitesec: library ms.sitesec: library
author: jdeckerms author: scooley
ms.author: jdecker ms.author: scooley
ms.topic: article ms.topic: article
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 07/27/2018 ms.date: 07/14/2019
--- ---
# Microsoft HoloLens # Microsoft HoloLens
<table><tbody> <table><tbody>
<tr><td style="border: 0px;width: 75%;valign= top"><p>Microsoft HoloLens is the first fully self-contained holographic computer running Windows 10.</p><p> Microsoft HoloLens is available in the <strong>Development Edition</strong>, which runs Windows Holographic (an edition of Windows 10 designed for HoloLens), and in the <strong>Commercial Suite</strong>, which runs Windows Holographic for Business when you apply the Enterprise license file to the device.</p></td><td align="left" style="border: 0px"><img src="images/hololens.png" alt="Hololens"/></td></tr> <tr><td style="border: 0px;width: 75%;valign= top">
<p>Microsoft HoloLens is the first fully self-contained holographic computer running Windows 10.</p>
<p>Now, with the introduction of HoloLens 2, every device provides commercial ready management enhanced by the reliability, security, and scalability of cloud and AI services from Microsoft.</p>
</td><td align="left" style="border: 0px"><img alt="HoloLens 2 side view" src="./images/hololens2-side-render.png"/></td></tr>
</tbody></table> </tbody></table>
## In this section ## Guides in this section
| Guide | Description |
| --- | --- |
| [Get started with HoloLens](hololens-setup.md) | Set up HoloLens for the first time. |
| [Set up HoloLens in the enterprise](hololens-requirements.md) | Configure HoloLens for scale enterprise deployment and ongoing device management. |
| [Install and manage applications on HoloLens](hololens-install-apps.md) |Install and manage important applications on HoloLens at scale. |
| [Recover and troubleshoot HoloLens issues](https://support.microsoft.com/products/hololens) | Learn how to gather logs from HoloLens, recover a misbehaving device, or reset HoloLens when necessary. |
| [Get support](https://support.microsoft.com/products/hololens) |Connect with Microsoft support resources for HoloLens in enterprise. |
## Quick reference by topic
| Topic | Description | | Topic | Description |
| --- | --- | | --- | --- |
| [What's new in Microsoft HoloLens](hololens-whats-new.md) | Discover the new features in the latest update. | | [What's new in Microsoft HoloLens](hololens-whats-new.md) | Discover new features in the latest updates. |
| [HoloLens in the enterprise: requirements](hololens-requirements.md) | Lists requirements for general use, Wi-Fi, and device management |
| [Set up HoloLens](hololens-setup.md) | How to set up HoloLens for the first time |
[Install localized version of HoloLens](hololens-install-localized.md) | Install the Chinese or Japanese version of HoloLens
| [Unlock Windows Holographic for Business features](hololens-upgrade-enterprise.md) | How to upgrade your Development Edition HoloLens to Windows Holographic for Business |
| [Enroll HoloLens in MDM](hololens-enroll-mdm.md) | Manage multiple HoloLens devices simultaneously using solutions like Microsoft Intune |
| [Manage updates to HoloLens](hololens-updates.md) | Use mobile device management (MDM) policies to configure settings for updates. |
| [Set up HoloLens in kiosk mode](hololens-kiosk.md) | Enable kiosk mode for HoloLens, which limits the user's ability to launch new apps or change the running app |
[Share HoloLens with multiple people](hololens-multiple-users.md) | Multiple users can shared a HoloLens device by using their Azure Active Directory accounts. |
| [Configure HoloLens using a provisioning package](hololens-provisioning.md) | Provisioning packages make it easy for IT administrators to configure HoloLens devices without imaging | | [Configure HoloLens using a provisioning package](hololens-provisioning.md) | Provisioning packages make it easy for IT administrators to configure HoloLens devices without imaging |
| [Install apps on HoloLens](hololens-install-apps.md) | Use Microsoft Store for Business, mobile device management (MDM), or the Windows Device Portal to install apps on HoloLens | | [HoloLens MDM support](hololens-enroll-mdm.md) | Manage multiple HoloLens devices simultaneously using Mobile Device Management (MDM) solutions like Microsoft Intune. |
| [Enable Bitlocker device encryption for HoloLens](hololens-encryption.md) | Learn how to use Bitlocker device encryption to protect files and information stored on the HoloLens | | [HoloLens update management](hololens-updates.md) | Use mobile device management (MDM) policies to configure settings for updates. |
| [Change history for Microsoft HoloLens documentation](change-history-hololens.md) | See new and updated topics in the HoloLens documentation library. | | [HoloLens user management](hololens-multiple-users.md) | Multiple users can shared a HoloLens device by using their Azure Active Directory accounts. |
| [HoloLens application access management](hololens-kiosk.md) | Manage application access for different user groups. |
| [Enable Bitlocker device encryption for HoloLens](hololens-encryption.md) | Learn how to use Bitlocker device encryption to protect files and information stored on the HoloLens. |
| [Install localized version of HoloLens](hololens-install-localized.md) | Configure HoloLens for different locale. |
## Related resources ## Related resources
- [Help for using HoloLens](https://support.microsoft.com/products/hololens) * [Documentation for Holographic app development](https://developer.microsoft.com/windows/mixed-reality/development)
* [HoloLens Commercial Suite](https://www.microsoft.com/microsoft-hololens/hololens-commercial)
- [Documentation for Holographic app development](https://developer.microsoft.com/windows/mixed-reality/development) * [HoloLens release notes](https://developer.microsoft.com/en-us/windows/mixed-reality/release_notes)
- [HoloLens Commercial Suite](https://www.microsoft.com/microsoft-hololens/hololens-commercial)
- [HoloLens release notes](https://developer.microsoft.com/en-us/windows/mixed-reality/release_notes)

3
devices/surface-hub/TOC.md
View File

@ -21,9 +21,10 @@
### [Configure Easy Authentication for Surface Hub 2S](surface-hub-2s-phone-authenticate.md) ### [Configure Easy Authentication for Surface Hub 2S](surface-hub-2s-phone-authenticate.md)
## Deploy ## Deploy
### [Surface Hub 2S adoption toolkit](surface-hub-2s-adoption-kit.md)
### [First time setup for Surface Hub 2S](surface-hub-2s-setup.md) ### [First time setup for Surface Hub 2S](surface-hub-2s-setup.md)
### [Connect devices to Surface Hub 2S](surface-hub-2s-connect.md)
### [Surface Hub 2S deployment checklist](surface-hub-2s-deploy-checklist.md) ### [Surface Hub 2S deployment checklist](surface-hub-2s-deploy-checklist.md)
### [Surface Hub 2S adoption toolkit](surface-hub-2s-adoption-kit.md)
### [Create Surface Hub 2S device account](surface-hub-2s-account.md) ### [Create Surface Hub 2S device account](surface-hub-2s-account.md)
### [Create provisioning packages for Surface Hub 2S](surface-hub-2s-deploy.md) ### [Create provisioning packages for Surface Hub 2S](surface-hub-2s-deploy.md)
### [Deploy apps to Surface Hub 2S using Intune](surface-hub-2s-deploy-apps-intune.md) ### [Deploy apps to Surface Hub 2S using Intune](surface-hub-2s-deploy-apps-intune.md)

4
devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md
View File

@ -534,7 +534,7 @@ if ($status.Count -gt 0)
elseif ($v[0] -eq "F") elseif ($v[0] -eq "F")
{ {
$color = "red" $color = "red"
$v += " Go to http://aka.ms/shubtshoot" $v += " Go to https://aka.ms/shubtshoot"
} }
Write-Host -NoNewline $k -ForegroundColor $color Write-Host -NoNewline $k -ForegroundColor $color
@ -978,7 +978,7 @@ if ($status.Count -gt 0)
elseif ($v[0] -eq "F") elseif ($v[0] -eq "F")
{ {
$color = "red" $color = "red"
$v += " Go to http://aka.ms/shubtshoot for help" $v += " Go to https://aka.ms/shubtshoot for help"
} }
Write-Host -NoNewline $k -ForegroundColor $color Write-Host -NoNewline $k -ForegroundColor $color

18
devices/surface-hub/create-a-device-account-using-office-365.md
View File

@ -4,7 +4,7 @@ description: If you prefer to use a graphical user interface, you can create a d
ms.assetid: D11BCDC4-DABA-4B9A-9ECB-58E02CC8218C ms.assetid: D11BCDC4-DABA-4B9A-9ECB-58E02CC8218C
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp
keywords: create device account, Office 365 UI, Exchange Admin center, Office 365 admin center, Skype for Business, mobile device mailbox policy keywords: create device account, Office 365 UI, Exchange Admin center, Microsoft 365 admin center, Skype for Business, mobile device mailbox policy
ms.prod: surface-hub ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: dansimp author: dansimp
@ -22,22 +22,22 @@ If you prefer to use a graphical user interface, you can create a device account
## <a href="" id="create-device-acct-o365"></a>Create a device account using Office 365 ## <a href="" id="create-device-acct-o365"></a>Create a device account using Office 365
1. [Create the account in the Office 365 Admin Center](#create-device-acct-o365-admin-ctr). 1. [Create the account in the Microsoft 365 Admin Center](#create-device-acct-o365-admin-ctr).
2. [Create a mobile device mailbox (ActiveSync) policy from the Microsoft Exchange Admin Center](#create-device-acct-o365-mbx-policy). 2. [Create a mobile device mailbox (ActiveSync) policy from the Microsoft Exchange Admin Center](#create-device-acct-o365-mbx-policy).
3. [Use PowerShell to complete device account creation](#create-device-acct-o365-complete-acct). 3. [Use PowerShell to complete device account creation](#create-device-acct-o365-complete-acct).
4. [Use PowerShell to configure Exchange properties of the account](#create-device-acct-o365-configure-exch-prop). 4. [Use PowerShell to configure Exchange properties of the account](#create-device-acct-o365-configure-exch-prop).
5. [Enable the account with Skype for Business](#create-device-acct-o365-skype-for-business). 5. [Enable the account with Skype for Business](#create-device-acct-o365-skype-for-business).
### <a href="" id="create-device-acct-o365-admin-ctr"></a>Create the account in the Office 365 Admin Center ### <a href="" id="create-device-acct-o365-admin-ctr"></a>Create the account in the admin center
1. Sign in to Office 365 by visiting http://portal.office.com 1. Sign in to Office 365 by visiting http://portal.office.com
2. Provide the admin credentials for your Office 365 tenant. This will take you to your Office 365 Admin Center. 2. Provide the admin credentials for your Office 365 tenant. This will take you to your Microsoft 365 Admin Center.
![Office 365 admin center.](images/setupdeviceaccto365-02.png) ![Microsoft 365 admin center.](images/setupdeviceaccto365-02.png)
3. In the Office 365 Admin Center, navigate to **Resources** in the left panel, and then click **Rooms & equipment**. 3. In the admin center, navigate to **Resources** in the left panel, and then click **Rooms & equipment**.
![Rooms & equipment option in Office 365 admin center](images/room-equipment.png) ![Rooms & equipment option in admin center](images/room-equipment.png)
4. Click **Add** to create a new Room account. Enter a display name and email address for the account, and then click **Add**. 4. Click **Add** to create a new Room account. Enter a display name and email address for the account, and then click **Add**.
@ -49,9 +49,9 @@ If you prefer to use a graphical user interface, you can create a device account
### <a href="" id="create-device-acct-o365-mbx-policy"></a>Create a mobile device mailbox (ActiveSync) policy from the Exchange Admin Center ### <a href="" id="create-device-acct-o365-mbx-policy"></a>Create a mobile device mailbox (ActiveSync) policy from the Exchange Admin Center
1. In the Office 365 Admin Center’s left panel, click **ADMIN**, and then click **Exchange**. 1. In the admin center’s left panel, click **ADMIN**, and then click **Exchange**.
![Office 365 admin center, showing exchange active users.](images/setupdeviceaccto365-08.png) ![admin center, showing exchange active users.](images/setupdeviceaccto365-08.png)
2. This will open another tab on your browser to take you to the Exchange Admin Center, where you can create and set the Mailbox Setting for Surface Hub. 2. This will open another tab on your browser to take you to the Exchange Admin Center, where you can create and set the Mailbox Setting for Surface Hub.

2
devices/surface-hub/differences-between-surface-hub-and-windows-10-enterprise.md
View File

@ -127,7 +127,7 @@ The administrative features in Windows 10 Enterprise, such as the Microsoft Mana
### Remote management and monitoring ### Remote management and monitoring
Surface Hub supports remote management through mobile device management (MDM) solutions such as [Microsoft Intune](https://docs.microsoft.com/en-us/intune/) and monitoring through [Azure Monitor](https://azure.microsoft.com/services/monitor/). Surface Hub supports remote management through mobile device management (MDM) solutions such as [Microsoft Intune](https://docs.microsoft.com/intune/) and monitoring through [Azure Monitor](https://azure.microsoft.com/services/monitor/).
*Organization policies that this may affect:* <br> Surface Hub doesn't support installing Win32 agents required by most traditional PC management and monitoring tools, such as System Center Operations Manager. *Organization policies that this may affect:* <br> Surface Hub doesn't support installing Win32 agents required by most traditional PC management and monitoring tools, such as System Center Operations Manager.

4
devices/surface-hub/docfx.json
View File

@ -14,7 +14,9 @@
"resource": [ "resource": [
{ {
"files": [ "files": [
"**/images/**" "**/images/**",
"**/*.pptx",
"**/*.pdf"
], ],
"exclude": [ "exclude": [
"**/obj/**" "**/obj/**"

0
devices/surface-hub/downloads/Guide-SurfaceHub 2S-Navigation.pptx → devices/surface-hub/downloads/Guide-SurfaceHub2S-Navigation.pptx
View File

0
devices/surface-hub/downloads/Guide-Surface Hub 2S-Office365.pptx → devices/surface-hub/downloads/Guide-SurfaceHub2S-Office365.pptx
View File

0
devices/surface-hub/downloads/Training Guide-SurfaceHub2S-HelpDesk.pdf → devices/surface-hub/downloads/TrainingGuide-SurfaceHub2S-HelpDesk.pdf
View File

2
devices/surface-hub/hybrid-deployment-surface-hub-device-accounts.md
View File

@ -59,7 +59,7 @@ Use this procedure if you use Exchange on-premises.
> >
>msExchRecipientTypeDetails = 8589934592 >msExchRecipientTypeDetails = 8589934592
3. After you've created the account, run a directory synchronization. When it's complete, go to the users page in your Office 365 admin center and verify that the account created in the previous steps has merged to online. 3. After you've created the account, run a directory synchronization. When it's complete, go to the users page in your Microsoft 365 admin center and verify that the account created in the previous steps has merged to online.
4. Connect to Microsoft Exchange Online and set some properties for the account in Office 365. 4. Connect to Microsoft Exchange Online and set some properties for the account in Office 365.

1
devices/surface-hub/install-apps-on-surface-hub.md
View File

@ -12,6 +12,7 @@ ms.author: dansimp
ms.topic: article ms.topic: article
ms.date: 10/23/2018 ms.date: 10/23/2018
ms.localizationpriority: medium ms.localizationpriority: medium
audience: ITPro
--- ---
# Install apps on your Microsoft Surface Hub # Install apps on your Microsoft Surface Hub

2
devices/surface-hub/surface-hub-2s-account.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -52,6 +53,7 @@ Create the account using the Microsoft 365 admin center or by using PowerShell.
Instead of using the Microsoft Admin Center portal, you can create the account using PowerShell. Instead of using the Microsoft Admin Center portal, you can create the account using PowerShell.
### Connect to Exchange Online PowerShell ### Connect to Exchange Online PowerShell
``` ```
$365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential (Get-Credential) -Authentication Basic –AllowRedirection $ImportResults = Import-PSSession $365Session $365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential (Get-Credential) -Authentication Basic –AllowRedirection $ImportResults = Import-PSSession $365Session
``` ```

51
devices/surface-hub/surface-hub-2s-adoption-kit.md
View File

@ -6,36 +6,47 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 07/08/2019 ms.date: 07/18/2019
ms.localizationpriority: Normal ms.localizationpriority: Normal
--- ---
# Surface Hub 2S adoption toolkit # Surface Hub 2S adoption toolkit
Microsoft has developed downloadable materials that you can make available for your users to aid in adoption of Surface Hub 2S. Microsoft has developed downloadable materials that you can make available for your users to aid in adoption of Surface Hub 2S.
## Training guides ## Training guides
- Surface Hub adoption toolkit
- Training guide – end user - [Surface Hub adoption toolkit](downloads/SurfaceHubAdoptionToolKit.pdf)
- Training guide – power user - [Training guide – end user](downloads/TrainingGuide-SurfaceHub2S-EndUser.pdf)
- Training guide – help desk - [Training guide – power user](downloads/TrainingGuide-SurfaceHub2S-PowerUser.pdf)
- Training guide – Microsoft Teams desktop - [Training guide – help desk](downloads/TrainingGuide-SurfaceHub2S-HelpDesk.pdf)
- [Training guide – Microsoft Teams desktop](downloads/Guide-SurfaceHub2S-Teams.pptx)
[Download all training guides](http://download.microsoft.com/download/2/2/3/2234F70E-E65A-4790-93DF-F4C373A75B8E/SurfaceHub2S-TrainerGuides-July2019.zip)
[Download all training guides](http://download.microsoft.com/download/2/2/3/2234F70E-E65A-4790-93DF-F4C373A75B8E/SurfaceHub2S-TrainerGuides-July2019.zip)
## End user guides ## End user guides
- Guide to Navigation on Surface Hub our
- Guide to Office 365 on Surface Hub - [Guide to Navigation on Surface Hub](downloads/Guide-SurfaceHub2S-Navigation.pptx)
- Guide to Microsoft Whiteboard on Surface Hub - [Guide to Office 365 on Surface Hub](downloads/Guide-SurfaceHub2S-Office365.pptx)
- Guide to Microsoft Teams on Surface Hub - [Guide to Microsoft Whiteboard on Surface Hub](downloads/Guide-SurfaceHub2S-Whiteboard.pptx)
- [Guide to Microsoft Teams on Surface Hub](downloads/Guide-SurfaceHub2S-Teams.pptx)
## Quick reference cards ## Quick reference cards
- Connect your PC
- Join a Teams Meeting - [Connect your PC](downloads/QRCConnectYourPC.pdf)
- Manage a Teams meeting - [Join a Teams Meeting](downloads/QRCJoinTeamsMeeting.pdf)
- Navigation basics - [Manage a Teams meeting](downloads/QRCManageTeamsMeeting.pdf)
- Schedule a Teams meeting - [Navigation basics](downloads/QRCNavigationBasics.pdf)
- Start a new Teams meeting - [Schedule a Teams meeting](downloads/QRCScheduleTeamsMeeting.pdf)
- Share or send a file - [Start a new Teams meeting](downloads/QRCStartNewTeamsMeeting.pdf)
- Sign in to view meetings and files - [Share or send a file](downloads/QRCShareSendFile.pdf)
- Whiteboard advanced - [Sign in to view meetings and files](downloads/QRCSignInToViewMeetingsFiles.pdf)
- Whiteboard tools - [Whiteboard advanced](downloads/QRCWhiteboardAdvanced.pdf)
- [Whiteboard tools](downloads/QRCWhiteboardTools.pdf)
[Download all user guides and quick reference cards](http://download.microsoft.com/download/E/7/F/E7FC6611-BB55-43E1-AF36-7BD5CE6E0FE0/SurfaceHub2S-EndUserGuides-July2019.zip)

15
devices/surface-hub/surface-hub-2s-change-history.md
View File

@ -7,6 +7,7 @@ ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
audience: Admin audience: Admin
ms.manager: laurawi
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
ms.localizationpriority: Normal ms.localizationpriority: Normal
@ -16,6 +17,20 @@ ms.localizationpriority: Normal
This topic summarizes new and updated content in the Surface Hub 2S documentation library. This topic summarizes new and updated content in the Surface Hub 2S documentation library.
## August 2019
Changes | Description
|:--- |:---
|Connect devices to Surface Hub 2S| Updated with guidance for connecting to a second display.
## July 2019
Changes | Description
|:--- |:--- |
| Reset and recovery for Surface Hub 2S | Added link to Surface recovery website that enables customers to download a recovery image for Surface Hub 2S |
| Surface Hub 2S tech specs | Updated power consumption data |
| Surface Hub 2S Adoption Kit | New |
## June 2019 ## June 2019
Changes | Description Changes | Description

104
devices/surface-hub/surface-hub-2s-connect.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -13,82 +14,113 @@ ms.localizationpriority: Normal
--- ---
# Connect devices to Surface Hub 2S # Connect devices to Surface Hub 2S
Surface Hub 2S lets you connect external devices, mirror the display on Surface Hub 2S to another device, and connect a wide variety of third-party peripherals including video conference cameras, conference phones, and room system devices. Surface Hub 2S lets you connect external devices, mirror the display on Surface Hub 2S to another device, and connect a wide variety of third-party peripherals including video conference cameras, conference phones, and room system devices.
## Connect external PCs and related devices
You can display content from your devices to Surface Hub 2S. If the source device is Windows-based, that device can also provide TouchBack and InkBack, which takes video and audio from the connected device and presents them on Surface Hub 2S. If Surface Hub 2S encounters a High-Bandwidth Digital Content Protection (HDCP) signal, such as a Blu-ray DVD player, the source is displayed as a black image. You can display content from your devices to Surface Hub 2S. If the source device is Windows-based, that device can also provide TouchBack and InkBack, which takes video and audio from the connected device and presents them on Surface Hub 2S. If Surface Hub 2S encounters a High-Bandwidth Digital Content Protection (HDCP) signal, such as a Blu-ray DVD player, the source is displayed as a black image.
> [!NOTE] > [!NOTE]
> Surface Hub 2S uses the video input selected until a new connection is made, the existing connection is disrupted, or the Connect App is closed. > Surface Hub 2S uses the video input selected until a new connection is made, the existing connection is disrupted, or the Connect app is closed.
## Recommended wired configurations for connecting to Surface Hub 2S ## Recommended wired configurations
In general, it’s recommended to use native cable connections whenever possible such as USB-C to USB-C or HDMI to HDMI. Other combinations such as MiniDP to HDMI or MiniDP to USB-C will also work. In general, it’s recommended to use native cable connections whenever possible such as USB-C to USB-C or HDMI to HDMI. Other combinations such as MiniDP to HDMI or MiniDP to USB-C will also work.
|**Mode**|**Connection**|**Functionality**|**Comments**| | **Connection** | **Functionality** | **Description**|
|:---- |:---------- |:------------ |:-------- | | --- | --- | ---|
| Wired “Connect” Application | USB-C (via compute module) | Video, audio, TouchBack/InkBack into Surface Hub 2S.| Provides video, audio, and TouchBack/InkBack on a single cable. | | USB-C <br>(via compute module) | Video-in<br> Video-out<br> Audio-in<br> Audio-out <br><br>TouchBack and InkBack | Provides video, audio, and TouchBack/InkBack on a single cable.<br><br>**NOTE:** Some configuration is required to optimize the video-out experience. Refer to the section below: [Mirroring Surface Hub 2S display on another device](#). |
| | HDMI + USB-C | HDMI-in for Audio/Video <br> USB-C for TouchBack/InkBack | USB-C supports TouchBack/InkBack with the HDMI A/V connection <br> <br>Use USB-C to USB-A to connect to legacy computers <br> <br> *NOTE: For best results, connect HDMI before connecting USB-C cable. If the computer you are using for HDMI is not compatible with TouchBack and InkBack, you won't need a USB-C cable.* | | HDMI + USB-C | HDMI-in for audio and video<br><br>USB-C for TouchBack and InkBack | USB-C supports TouchBack and InkBack with the HDMI A/V connection.<br><br>Use USB-C to USB-A to connect to legacy computers.<br><br>**NOTE:** For best results, connect HDMI before connecting a USB-C cable. If the computer you're using for HDMI is not compatible with TouchBack and InkBack, you won't need a USB-C cable. |
| “Source” selection experience <br> (bypasses the OS, full screen requires source selection with keypad button) | USB-C (port in compute module) | Video, Audio into Surface Hub 2S | Single cable needed for A/V <br> Touchback/InkBack not supported <br> HDCP enabled | | USB-C <br> (via compute module) | Video-in <br>Audio-in | Single cable needed for A/V<br><br>TouchBack and InkBack not supported<br><br>HDCP enabled |
| | HDMI (in port) | Video, Audio into Surface Hub 2S | Single cable needed for A/V <br> TouchBack/InkBack not supported <br> HDCP enabled | | HDMI (in port) | Video, Audio into Surface Hub 2S | Single cable needed for A/V<br><br>TouchBack and InkBack not supported<br><br>HDCP enabled |
| MiniDP 1.2 output | Video-out such as mirroring to a larger projector. | Single cable needed for A/V |
When you connect a guest computer to Surface Hub 2S via the wired connect USB-C port, several USB devices are discovered and configured. These peripheral devices are created for TouchBack and InkBack. As shown in the table below, the peripheral devices can be viewed in Device Manager, which will show duplicate names for some devices. When you connect a guest computer to Surface Hub 2S via the USB-C port, several USB devices are discovered and configured. These peripheral devices are created for TouchBack and InkBack. As shown in the following table, the peripheral devices can be viewed in Device Manager, which will show duplicate names for some devices.
|**Peripheral**|**Listing in Device Manager**| | **Device Manager reference** |**Peripheral**| **Listing in Device Manager** |
|:---------- |:------------------------- | | ---------------------------- |------------- | ------------------------------|
| Human interface devices | HID-compliant consumer control device<br>HID-compliant pen<br>HID-compliant pen (duplicate item)<br>HID-compliant pen (duplicate item)<br>HID-compliant touch screen<br>USB Input Device<br>USB Input Device (duplicate item) | | Human interface devices | HID-compliant consumer control device<br>HID-compliant pen<br>HID-compliant pen (duplicate item)<br>HID-compliant pen (duplicate item)<br>HID-compliant touch screen<br>USB Input Device<br>USB Input Device (duplicate item) |
| Keyboards | Standard PS/2 keyboard | | Keyboards | Standard PS/2 keyboard |
| Mice and other pointing devices | HID-compliant mouse | | Mice and other pointing devices | HID-compliant mouse |
| USB controllers | Generic USB hub<br>USB composite device | | USB controllers | Generic USB hub<br>USB composite device |
### Connecting video-in to Surface Hub 2S ## Connecting video-in to Surface Hub 2S
Your choice of video cable will be determined by what is available from your source input. Surface Hub 2S has two choices of video input: USB-C and HDMI. See the following chart for available resolutions. You can input video to Surface Hub 2S using USB-C or HDMI, as indicated in the following table.
### Surface Hub 2S video-in settings
| **Signal Type** | **Resolution** | **Frame rate** | **HDMI** | **USB-C** | | **Signal Type** | **Resolution** | **Frame rate** | **HDMI** | **USB-C** |
|:----------- |:----------- |:---------- |:---- |:----- | | --------------- | -------------- | -------------- | -------- | --------- |
| PC | 640 x 480 | 59.94/60 | X | X | | PC | 640 x 480 | 60 | X | X |
| PC | 720 x 480 | 59.94/60 | X | X | | PC | 720 x 480 | 60 | X | X |
| PC | 1024 x 768 | 60 | X | X | | PC | 1024 x 768 | 60 | X | X |
| PC | 1920 x 1080 | 60 | X | X | | PC | 1920 x 1080 | 60 | X | X |
| PC | 3840x2560 | 60 | X | X | | PC | 3840x2560 | 30 | X | X |
| HDTV | 720p | 59.94/60 | X | X | | HDTV | 720p | 60 | X | X |
| HDTV | 1080p | 59.94/60 | X | X | | HDTV | 1080p | 60 | X | X |
| UHD | 3840x2560 | 60 | X | X | | 4K UHD | 3840x2560 | 30 | X | X |
> [!NOTE]
> The 4K UHD resolution (3840×2560) is only supported when connecting to ports on the compute module. It is not supported on the “guest” USB ports located on the left, top, and right sides of the device.
> [!NOTE]
> Video from a connected external PC may appear smaller when displayed on Surface Hub 2S.
## Mirroring Surface Hub 2S display on another device ## Mirroring Surface Hub 2S display on another device
Surface Hub 2S includes a Video Out port for mirroring visual content from Surface Hub 2S to another display. You can output video to another display using either USB-C or MiniDP, as indicated in the following table.
|**MODE**|**Connection**|**Functionality**|**Comments**| ### Surface Hub 2S video-out settings
|:---- |:---------- |:------------- |:-------- |
| Display out | MiniDP output port | Display and audio out (support for duplicate mode only) | Requires external keyboard <br> Win+P and select Duplicate mode <br> Supports audio out (configurable via settings) |
### Selecting cables | **Signal Type** | **Resolution** | **Frame rate** | **USB-C** | **MiniDP** |
| --------------- | -------------- | -------------- | --------- | ---------- |
| PC | 640 x 480 | 60 | X | X |
| PC | 720 x 480 | 60 | X | X |
| PC | 1024 x 768 | 60 | X | X |
| PC | 1920 x 1080 | 60 | X | X |
| PC | 3840x2560 | 60 | X | X |
| HDTV | 720p | 60 | X | X |
| HDTV | 1080p | 60 | X | X |
| 4K UHD | 3840x2560 | 60 | X | X |
DisplayPort cables are certified for to 3 meters in length. If a long cable is necessary, HDMI is recommended due to the wide availability of cost-effective, long-haul cables with the added benefit of installing repeaters if needed.
Surface Hub 2S includes a MiniDP video-out port for projecting visual content from Surface Hub 2S to another display. If you plan to use Surface Hub 2S to project to another display, note the following recommendations:
- **Keyboard required.** Before you begin, you’ll need to connect either a wired or Bluetooth-enabled external keyboard to Surface Hub 2S. Note that unlike the original Surface Hub, a keyboard for Surface Hub 2S is sold separately and is not included in the shipping package.<br><br>
- **Set duplicate mode.** Surface Hub 2S supports video-out in duplicate mode only. However, you will still need to manually configure the display mode when you connect for the first time:
1. Enter the **Windows logo key** + **P**, which opens the Project pane on the right side of Surface Hub 2S, and then select **Duplicate** mode.
2. When you’re finished with your Surface Hub 2S session, select **End Session**. This ensures that the duplicate setting is saved for the next session.<br><br>
- **Plan for different aspect ratios.** Like other Surface devices, Surface Hub 2S uses a 3:2 display aspect ratio (the relationship between the width and the height of the display). Projecting Surface Hub 2S onto displays with different aspect ratios is supported. Note however that because Surface Hub 2S duplicates the display, the MiniDP output will also only display in a 3:2 aspect ratio, which may result in letterboxing or curtaining depending on the aspect ratio of the receiving display.
> [!NOTE]
> if your second monitor uses a 16:9 aspect ratio (the predominant ratio for most TV monitors), black bars may appear on the left and right sides of the mirrored display. If this occurs, you may wish to inform your users that there is no need to adjust the second display.
## Selecting cables
Note the following recommendations:
- **USB.** USB 3.1 Gen 2 cables.
- **MiniDP.** DisplayPort cables certified for up to 3 meters in length.
- **HDMI.** If a long cable is necessary, HDMI is recommended due to the wide availability of cost-effective, long-haul cables with the ability to install repeaters if needed.
> [!NOTE] > [!NOTE]
> Most DisplayPort sources will automatically switch to HDMI signaling if HDMI is detected. > Most DisplayPort sources will automatically switch to HDMI signaling if HDMI is detected.
## Wirelessly connect to Surface Hub 2S ## Wirelessly connect to Surface Hub 2S
Windows 10 natively supports Miracast, which lets you wireless connect to Surface Hub 2S. Windows 10 natively supports Miracast, which lets you wireless connect to Surface Hub 2S.<br><br>
### To connect using Miracast ### To connect using Miracast:
1. On your Windows 10 device, enter **Win** + **K**. 1. On your Windows 10 device, enter **Windows logo key** + **K**.
2. In the Connect window, look for the name of your Surface Hub 2S in the list of nearby devices. You can find the name of your Surface Hub 2S in the bottom left corner of the display. 2. In the Connect window, look for the name of your Surface Hub 2S in the list of nearby devices. You can find the name of your Surface Hub 2S in the bottom left corner of the display.
3. If required, your system administrator may have enabled the PIN setting for Miracast connections on your Surface Hub which means that the first time you connect to that Surface Hub, a PIN number is displayed on the screen. 3. Enter a PIN if your system administrator has enabled the PIN setting for Miracast connections. This requires you to enter a PIN number when you connect to Surface Hub 2S for the first time.
> [!NOTE] > [!NOTE]
> If you’re a local administrator on Surface Hub 2S, you can configure PIN requirements via **Surface app > Settings.** >If you do not see the name of the Surface Hub 2S device as expected, it’s possible the previous session was prematurely closed. If so, sign into Surface Hub 2S directly to end the previous session and then connect from your external device.
## Connecting peripherals to Surface Hub 2S ## Connecting peripherals to Surface Hub 2S
## Bluetooth accessories ### Bluetooth accessories
You can connect the following accessories to Surface Hub-2S using Bluetooth: You can connect the following accessories to Surface Hub-2S using Bluetooth:
@ -98,4 +130,4 @@ You can connect the following accessories to Surface Hub-2S using Bluetooth:
- Speakers - Speakers
> [!NOTE] > [!NOTE]
> After you connect a Bluetooth headset or speaker, you might need to change the default microphone and speaker settings. For more information, see [Local management for Surface Hub settings](local-management-surface-hub-settings.md). > After you connect a Bluetooth headset or speaker, you might need to change the default microphone and speaker settings. For more information, see [**Local management for Surface Hub settings**](https://docs.microsoft.com/en-us/surface-hub/local-management-surface-hub-settings).

1
devices/surface-hub/surface-hub-2s-custom-install.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

1
devices/surface-hub/surface-hub-2s-deploy-apps-intune.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

1
devices/surface-hub/surface-hub-2s-deploy-checklist.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

1
devices/surface-hub/surface-hub-2s-deploy.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

2
devices/surface-hub/surface-hub-2s-install-mount.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -33,4 +34,3 @@ If you’re not using licensed accessories, see [Customize wall mount of Surface
| Get someone to help you lift and mount your Surface Hub. Make sure to hold and lift the Surface Hub from the bottom. | ![* Remove the instructional label before mounting *](images/sh2-setup-3.png) <br> | | Get someone to help you lift and mount your Surface Hub. Make sure to hold and lift the Surface Hub from the bottom. | ![* Remove the instructional label before mounting *](images/sh2-setup-3.png) <br> |
| 4. **Attach accessories and power on** | | | 4. **Attach accessories and power on** | |
| Install accessories and attach power cable as shown. See guides on the screen cling. Remove cling wrap from the screen. Press the power button to power on. | ![* Attach accessories and power on *](images/sh2-setup-4.png) <br> | | Install accessories and attach power cable as shown. See guides on the screen cling. Remove cling wrap from the screen. Press the power button to power on. | ![* Attach accessories and power on *](images/sh2-setup-4.png) <br> |

5
devices/surface-hub/surface-hub-2s-manage-intune.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -47,9 +48,9 @@ To ensure optimal video and audio quality on Surface Hub 2S, add the following Q
|**Name**|**Description**|**OMA-URI**|**Type**|**Value**| |**Name**|**Description**|**OMA-URI**|**Type**|**Value**|
|:------ |:------------- |:--------- |:------ |:------- | |:------ |:------------- |:--------- |:------ |:------- |
|**Audio Ports**| Audio Port range | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | String | 50000–50019 | |**Audio Ports**| Audio Port range | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/SourcePortMatchCondition | String | 50000-50019 |
|**Audio DSCP**| Audio ports marking | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | Integer | 46 | |**Audio DSCP**| Audio ports marking | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubAudio/DSCPAction | Integer | 46 |
|**Video Ports**| Video Port range | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | String | 50020–50039 | |**Video Ports**| Video Port range | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/SourcePortMatchCondition | String | 50020-50039 |
|**Video DSCP**| Video ports marking | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | Integer | 34 | |**Video DSCP**| Video ports marking | ./Device/Vendor/MSFT/NetworkQoSPolicy/HubVideo/DSCPAction | Integer | 34 |
> [!NOTE] > [!NOTE]

1
devices/surface-hub/surface-hub-2s-manage-passwords.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

1
devices/surface-hub/surface-hub-2s-onprem-powershell.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

10
devices/surface-hub/surface-hub-2s-onscreen-display.md
View File

@ -6,15 +6,17 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 07/09/2019 ms.date: 07/09/2019
ms.localizationpriority: Normal ms.localizationpriority: Normal
--- ---
# Adjust Surface Hub 2S brightness, volume, and input # Adjust Surface Hub 2S brightness, volume, and input
Surface Hub 2S provides an on-screen display for volume, brightness, and input control. The Source button functions as a toggle key to switch between the volume, brightness, and input control menus. Surface Hub 2S provides an on-screen display for volume, brightness, and input control. The Source button functions as a toggle key to switch between the volume, brightness, and input control menus.
**To show the on-screen display:** ## To show the on-screen display
- Press and hold the **Source** button for 4 seconds. - Press and hold the **Source** button for 4 seconds.
@ -22,16 +24,16 @@ Surface Hub 2S provides an on-screen display for volume, brightness, and input c
When the on-screen display is visible, use one or more buttons to reach desired settings. When the on-screen display is visible, use one or more buttons to reach desired settings.
**To adjust volume:** ## To adjust volume
- Use the **Volume up/down** button to increase or decrease volume. - Use the **Volume up/down** button to increase or decrease volume.
**To adjust brightness:** ## To adjust brightness
1. Press the **Source** button again to switch to the brightness menu. 1. Press the **Source** button again to switch to the brightness menu.
2. Use the **Volume up/down** button to increase or decrease brightness. 2. Use the **Volume up/down** button to increase or decrease brightness.
**To adjust input:** ## To adjust input
1. Press the **Source** button twice to switch to the Source menu. 1. Press the **Source** button twice to switch to the Source menu.
2. Use the **Volume up/down** button to switch between PC, HDMI, and USB-C inputs. 2. Use the **Volume up/down** button to switch between PC, HDMI, and USB-C inputs.

5
devices/surface-hub/surface-hub-2s-pack-components.md
View File

@ -4,8 +4,9 @@ description: "Instructions for packing Surface Hub 2S components, replacing the
keywords: pack, replace components, camera, compute cartridge keywords: pack, replace components, camera, compute cartridge
ms.prod: surface-hub ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: Teresa-Motiv author: robmazz
ms.author: v-tea ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 07/1/2019 ms.date: 07/1/2019

3
devices/surface-hub/surface-hub-2s-phone-authenticate.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -39,4 +40,4 @@ Password-less phone sign-in simplifies signing-in to your meetings and files on
3. If prompted, enter the PIN or biometric ID on your phone to complete sign-in. 3. If prompted, enter the PIN or biometric ID on your phone to complete sign-in.
## Learn more ## Learn more
For more information, see [Password-less phone sign-in with the Microsoft Authenticator app](https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-phone-sign-in). For more information, see [Password-less phone sign-in with the Microsoft Authenticator app](https://docs.microsoft.com/azure/active-directory/authentication/howto-authentication-phone-sign-in).

2
devices/surface-hub/surface-hub-2s-port-keypad-overview.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -40,4 +41,3 @@ The figure below shows the location of ports and physical buttons on a keypad at
| 11 | **Power** | Power device on/off. <br> Use also to navigate display menus and select items. | n/a | | 11 | **Power** | Power device on/off. <br> Use also to navigate display menus and select items. | n/a |
![Rear facing view of wireless, audio, & related components](images/hub2s-rear.png) ![Rear facing view of wireless, audio, & related components](images/hub2s-rear.png)

3
devices/surface-hub/surface-hub-2s-prepare-environment.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -44,6 +45,6 @@ If you affiliate Surface Hub 2S with on-premises Active Directory Domain Service
## Azure Active Directory ## Azure Active Directory
When choosing to affiliate your Surface Hub 2S with Azure AD, any user in the Global Admins Security Group can sign in to the Settings app on Surface Hub 2S. Alternatively, you can configure the Device Administrator role to sign in to the Settings app. For more information, see [Administrator role permissions in Azure Active Directory](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#device-administrators). Currently, no other group can be delegated to sign in to the Settings app on Surface Hub 2S. When choosing to affiliate your Surface Hub 2S with Azure AD, any user in the Global Admins Security Group can sign in to the Settings app on Surface Hub 2S. Alternatively, you can configure the Device Administrator role to sign in to the Settings app. For more information, see [Administrator role permissions in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/users-groups-roles/directory-assign-admin-roles#device-administrators). Currently, no other group can be delegated to sign in to the Settings app on Surface Hub 2S.
If you enabled Intune Automatic Enrollment for your organization, Surface Hub 2S will automatically enroll itself with Intune. The device’s Bitlocker key is automatically saved in Azure AD. When affiliating Surface Hub 2S with Azure AD, single sign-on and Easy Authentication will not work. If you enabled Intune Automatic Enrollment for your organization, Surface Hub 2S will automatically enroll itself with Intune. The device’s Bitlocker key is automatically saved in Azure AD. When affiliating Surface Hub 2S with Azure AD, single sign-on and Easy Authentication will not work.

1
devices/surface-hub/surface-hub-2s-quick-start.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

3
devices/surface-hub/surface-hub-2s-recover-reset.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019
@ -37,7 +38,7 @@ New in Surface Hub 2S, you can now reinstall the device using a recovery image.
Surface Hub 2S lets you reinstall the device using a recovery image, which allows you to reinstall the device to factory settings if you lost the Bitlocker key or no longer have admin credentials to the Settings app. Surface Hub 2S lets you reinstall the device using a recovery image, which allows you to reinstall the device to factory settings if you lost the Bitlocker key or no longer have admin credentials to the Settings app.
1. Begin with a USB 3.0 drive with 8 GB or 16 GB of storage, formatted as FAT32. 1. Begin with a USB 3.0 drive with 8 GB or 16 GB of storage, formatted as FAT32.
2. Download recovery image from the Surface Recovery website onto the USB drive and connect it to any USB-C or USB A port on Surface Hub 2S. 2. Download recovery image from the [Surface Recovery website](https://support.microsoft.com/en-us/surfacerecoveryimage?devicetype=surfacehub2s) onto the USB drive and connect it to any USB-C or USB A port on Surface Hub 2S.
3. Turn off the device. While holding down the Volume down button, press the Power button. Keep holding both buttons until you see the Windows logo. Release the Power button but continue to hold the Volume until the Install UI begins. 3. Turn off the device. While holding down the Volume down button, press the Power button. Keep holding both buttons until you see the Windows logo. Release the Power button but continue to hold the Volume until the Install UI begins.
![*Use Volume down and power buttons to initiate recovery*](images/sh2-keypad.png) <br> ![*Use Volume down and power buttons to initiate recovery*](images/sh2-keypad.png) <br>

1
devices/surface-hub/surface-hub-2s-secure-with-uefi-semm.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

6
devices/surface-hub/surface-hub-2s-setup.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 07/03/2019 ms.date: 07/03/2019
@ -43,7 +44,7 @@ When you first start Surface Hub 2S, the device automatically enters first time
## Configuring device admin accounts ## Configuring device admin accounts
You can only set up device admins during first time Setup. For more information, refer to [Surface Hub 2S device affiliation](https://docs.microsoft.com/en-us/surface-hub/surface-hub-2s-prepare-environment#device-affiliation). You can only set up device admins during first time Setup. For more information, refer to [Surface Hub 2S device affiliation](https://docs.microsoft.com/surface-hub/surface-hub-2s-prepare-environment#device-affiliation).
In the **Setup admins for this device** window, select one of the following options: Active Directory Domain Services, Azure Active Directory, or Local admin. In the **Setup admins for this device** window, select one of the following options: Active Directory Domain Services, Azure Active Directory, or Local admin.
@ -91,10 +92,9 @@ If you insert a USB thumb drive with a provisioning package into one of the USB
![* Choose provisioning package to use*](images/sh2-run13.png) <br> ![* Choose provisioning package to use*](images/sh2-run13.png) <br>
3. If you created a multiple devices CSV file, you will be able to choose a device configuration. For more information, refer to [Create provisioning packages for Surface Hub 2S](https://docs.microsoft.com/en-us/surface-hub/surface-hub-2s-deploy#provisioning-multiple-devices-csv-file). 3. If you created a multiple devices CSV file, you will be able to choose a device configuration. For more information, refer to [Create provisioning packages for Surface Hub 2S](https://docs.microsoft.com/surface-hub/surface-hub-2s-deploy#provisioning-multiple-devices-csv-file).
![* Select a device account and friendly name from your configuration file*](images/sh2-run14.png) <br> ![* Select a device account and friendly name from your configuration file*](images/sh2-run14.png) <br>
4. Follow the instructions to complete first time Setup. 4. Follow the instructions to complete first time Setup.

1
devices/surface-hub/surface-hub-2s-site-planning.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

1
devices/surface-hub/surface-hub-2s-site-readiness-guide.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

8
devices/surface-hub/surface-hub-2s-techspecs.md
View File

@ -5,6 +5,7 @@ keywords: separate values with commas
ms.prod: surface-hub ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
manager: laurawi
ms.author: robmazz ms.author: robmazz
audience: Admin audience: Admin
ms.topic: article ms.topic: article
@ -17,7 +18,9 @@ ms.localizationpriority: Normal
|**Item**|**Details**| |**Item**|**Details**|
|:------ |:--------- | |:------ |:--------- |
|**Dimensions**| 29.2" x 43.2" x 3.0” (741 mm x 1097 mm x 76 mm) | |**Dimensions**| 29.2" x 43.2" x 3.0” (741 mm x 1097 mm x 76 mm) |
|**Shipping dimensions**| 47.64" x 36.89" x 9.92" (1,210 mm x 937 mm x 252 mm)|
|**Weight**| 61.6 lbs. (28 kg) | |**Weight**| 61.6 lbs. (28 kg) |
|**Shipping Weight**| 81.08 lbs. (36.77 kg) |
|**Resolution**| 3840 x 2560 | |**Resolution**| 3840 x 2560 |
|**Display**| PixelSense Display, 3:2 aspect ratio, 10-bit color, 15.5 mm border, anti-glare, IPS LCD | |**Display**| PixelSense Display, 3:2 aspect ratio, 10-bit color, 15.5 mm border, anti-glare, IPS LCD |
|**Processor**| Quad-core 8th Generation Intel Core i5 processor, 8 GB RAM, 128 GB SSD <sup>1</sup> | |**Processor**| Quad-core 8th Generation Intel Core i5 processor, 8 GB RAM, 128 GB SSD <sup>1</sup> |
@ -31,6 +34,11 @@ ms.localizationpriority: Normal
|**Exterior**| Casing: Precision machined aluminum with mineral-composite resin <br> Color: Platinum <br> Physical Buttons: Power, Volume, Source | |**Exterior**| Casing: Precision machined aluminum with mineral-composite resin <br> Color: Platinum <br> Physical Buttons: Power, Volume, Source |
|**What’s in the box**| One Surface Hub 2S <br> One Surface Hub 2 Pen <br> One Surface Hub 2 Camera <br> 2.5 m AC Power Cable <br> Quick Start Guide | |**What’s in the box**| One Surface Hub 2S <br> One Surface Hub 2 Pen <br> One Surface Hub 2 Camera <br> 2.5 m AC Power Cable <br> Quick Start Guide |
|**Warranty**| 1-year limited hardware warranty | |**Warranty**| 1-year limited hardware warranty |
|**BTU**| 1518 BTU/hr |
|**Input Voltage**| 50/60Hz 110/230v nominal, 90-265v max |
|**Input power, operating**| 445 W (495 W Surge Load) |
|**Input Current**| 5.46 A |
|**Input Power, standby**| 5 W max |
> [!NOTE] > [!NOTE]
> <sup>1</sup> System software uses significant storage space. Available storage is subject to change based on system software updates and apps usage. 1 GB= 1 billion bytes. See Surface.com/Storage for more details. <br> <sup>2</sup> Software license required for some features. Sold separately.<br> > <sup>1</sup> System software uses significant storage space. Available storage is subject to change based on system software updates and apps usage. 1 GB= 1 billion bytes. See Surface.com/Storage for more details. <br> <sup>2</sup> Software license required for some features. Sold separately.<br>

1
devices/surface-hub/surface-hub-2s-unpack.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

1
devices/surface-hub/surface-hub-2s-whats-new.md
View File

@ -6,6 +6,7 @@ ms.prod: surface-hub
ms.sitesec: library ms.sitesec: library
author: robmazz author: robmazz
ms.author: robmazz ms.author: robmazz
manager: laurawi
audience: Admin audience: Admin
ms.topic: article ms.topic: article
ms.date: 06/20/2019 ms.date: 06/20/2019

8
devices/surface/surface-enterprise-management-mode.md
View File

@ -226,8 +226,16 @@ create a reset package using PowerShell to reset SEMM.
## Version History ## Version History
### Version 2.43.136.0
* Support to enable/disable simulatenous multithreating
* Separate options for WiFi and Bluetooth for some devices
* Battery Limit removed for Surface Studio
### Version 2.26.136.0 ### Version 2.26.136.0
* Add support to Surface Studio 2 * Add support to Surface Studio 2
* Battery Limit feature
### Version 2.21.136.0 ### Version 2.21.136.0
* Add support to Surface Pro 6 * Add support to Surface Pro 6

4
education/get-started/enable-microsoft-teams.md
View File

@ -19,12 +19,12 @@ manager: dansimp
Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. Because it's built on Office 365, schools benefit from integration with their familiar Office apps and services. Your institution can use Microsoft Teams to create collaborative classrooms, connect in professional learning communities, and communicate with school staff all from a single experience in Office 365 for Education. Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. Because it's built on Office 365, schools benefit from integration with their familiar Office apps and services. Your institution can use Microsoft Teams to create collaborative classrooms, connect in professional learning communities, and communicate with school staff all from a single experience in Office 365 for Education.
To get started, IT administrators need to use the Office 365 Admin Center to enable Microsoft Teams for your school. To get started, IT administrators need to use the Microsoft 365 Admin Center to enable Microsoft Teams for your school.
## Enable Microsoft Teams for your school ## Enable Microsoft Teams for your school
1. Sign in to <a href="https://portal.office.com" target="_blank">Office 365</a> with your work or school account. 1. Sign in to <a href="https://portal.office.com" target="_blank">Office 365</a> with your work or school account.
2. Click **Admin** to go to the Office 365 admin center. 2. Click **Admin** to go to the admin center.
3. Go to **Settings > Services & add-ins**. 3. Go to **Settings > Services & add-ins**.
4. On the **Services & add-ins** page, select **Microsoft Teams**. 4. On the **Services & add-ins** page, select **Microsoft Teams**.

8
education/get-started/finish-setup-and-other-tasks.md
View File

@ -109,7 +109,7 @@ When a device is owned by the school, you may need to have a single person addin
Follow the steps in this section to enable a single person to add many devices to your cloud infrastructure. Follow the steps in this section to enable a single person to add many devices to your cloud infrastructure.
1. Sign in to the <a href="https://portal.office.com" target="_blank">Office 365 admin center</a>. 1. Sign in to the <a href="https://portal.office.com" target="_blank">admin center</a>.
2. Configure the device settings for the school's Active Directory. To do this, go to the new Azure portal, <a href="https://portal.azure.com" target="_blank">https://portal.azure.com</a>. 2. Configure the device settings for the school's Active Directory. To do this, go to the new Azure portal, <a href="https://portal.azure.com" target="_blank">https://portal.azure.com</a>.
3. Select **Azure Active Directory > Users and groups > Device settings**. 3. Select **Azure Active Directory > Users and groups > Device settings**.
@ -125,7 +125,7 @@ When students move from using one device to another, they may need to have their
Follow the steps in this section to ensure that settings for the each user follow them when they move from one device to another. Follow the steps in this section to ensure that settings for the each user follow them when they move from one device to another.
1. Sign in to the <a href="https://portal.office.com" target="_blank">Office 365 admin center</a>. 1. Sign in to the <a href="https://portal.office.com" target="_blank">admin center</a>.
2. Go to the new Azure portal, <a href="https://portal.azure.com" target="_blank">https://portal.azure.com</a>. 2. Go to the new Azure portal, <a href="https://portal.azure.com" target="_blank">https://portal.azure.com</a>.
3. Select **Azure Active Directory > Users and groups > Device settings**. 3. Select **Azure Active Directory > Users and groups > Device settings**.
4. Find the setting **Users may sync settings and enterprise app data** and change the value to **All**. 4. Find the setting **Users may sync settings and enterprise app data** and change the value to **All**.
@ -142,12 +142,12 @@ Now that your basic cloud infrastructure is up and running, it's time to complet
## Enable Microsoft Teams for your school ## Enable Microsoft Teams for your school
Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. Because it's built on Office 365, schools benefit from integration with their familiar Office apps and services. Your institution can use Microsoft Teams to create collaborative classrooms, connect in professional learning communities, and communicate with school staff all from a single experience in Office 365 for Education. Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. Because it's built on Office 365, schools benefit from integration with their familiar Office apps and services. Your institution can use Microsoft Teams to create collaborative classrooms, connect in professional learning communities, and communicate with school staff all from a single experience in Office 365 for Education.
To get started, IT administrators need to use the Office 365 Admin Center to enable Microsoft Teams for your school. To get started, IT administrators need to use the Microsoft 365 Admin Center to enable Microsoft Teams for your school.
**To enable Microsoft Teams for your school** **To enable Microsoft Teams for your school**
1. Sign in to <a href="https://portal.office.com" target="_blank">Office 365</a> with your work or school account. 1. Sign in to <a href="https://portal.office.com" target="_blank">Office 365</a> with your work or school account.
2. Click **Admin** to go to the Office 365 admin center. 2. Click **Admin** to go to the admin center.
3. Go to **Settings > Services & add-ins**. 3. Go to **Settings > Services & add-ins**.
4. On the **Services & add-ins** page, select **Microsoft Teams**. 4. On the **Services & add-ins** page, select **Microsoft Teams**.

18
education/get-started/inclusive-classroom-it-admin.md
View File

@ -29,12 +29,12 @@ You will also learn how to deploy apps using Microsoft Intune, turn on or off Ea
| Reading features | Available in which apps | Office 2016 MSI | Office 2019 | Office 365 ProPlus Monthly (C2R) | Office 365 ProPlus Semi Annual (C2R) | Office 365 ProPlus Annual (C2R) | | Reading features | Available in which apps | Office 2016 MSI | Office 2019 | Office 365 ProPlus Monthly (C2R) | Office 365 ProPlus Semi Annual (C2R) | Office 365 ProPlus Annual (C2R) |
|-------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------| |-------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------|
| Read aloud with simultaneous highlighting | <ul><li>OneNote 2016 (add-in), OneNote Online, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word 2016, Word Online, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | <p style="text-align: center;">X</p> <p style="text-align: center;"><p style="text-align: center;">(N/A for Word for iOS, Word Online, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word for iOS, Word Online, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Outlook PC)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps or Outlook PC)</p> | | Read aloud with simultaneous highlighting | <ul><li>OneNote 2016 (add-in), OneNote in a browser, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word 2016, Word in a browser, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | <p style="text-align: center;">X</p> <p style="text-align: center;"><p style="text-align: center;">(N/A for Word for iOS, Word in a browser, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word for iOS, Word in a browser, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Outlook PC)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps or Outlook PC)</p> |
| Adjustable text spacing and font size | <ul><li>OneNote 2016 (add-in), OneNote Online, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word 2016, Word Online, Word Mac, Word for iPad</li><li>Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | <p style="text-align: center;">X</p> <p style="text-align: center;"><p style="text-align: center;">(N/A for Word for iOS, Word Online, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word for iOS, Word Online, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | | Adjustable text spacing and font size | <ul><li>OneNote 2016 (add-in), OneNote in a browser, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word 2016, Word in a browser, Word Mac, Word for iPad</li><li>Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | <p style="text-align: center;">X</p> <p style="text-align: center;"><p style="text-align: center;">(N/A for Word for iOS, Word in a browser, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word for iOS, Word in a browser, Outlook Web Access, or Office Lens)</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> |
| Syllabification | <ul><li>OneNote 2016 (add-in), OneNote Online, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word Online</li><li>Outlook Web Access</li></ul> | | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word for iOS, Word Online, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word iOS)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word iOS)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps or Word iOS)</p> | | Syllabification | <ul><li>OneNote 2016 (add-in), OneNote in a browser, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word in a browser</li><li>Outlook Web Access</li></ul> | | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word for iOS, Word in a browser, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word iOS)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word iOS)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps or Word iOS)</p> |
| Parts of speech identification | <ul><li>OneNote 2016 (add-in), OneNote Online, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word 2016, Word Online, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word Online, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word Online, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | | Parts of speech identification | <ul><li>OneNote 2016 (add-in), OneNote in a browser, OneNote for Windows 10, OneNote for iPad, OneNote Mac</li><li>Word 2016, Word in a browser, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word in a browser, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word in a browser, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> |
| Line focus mode | <ul><li>Word 2016, Word Online, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word Online, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | | Line focus mode | <ul><li>Word 2016, Word in a browser, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word in a browser, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> |
| Picture Dictionary | <ul><li>Word 2016, Word Online, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word Online, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | | Picture Dictionary | <ul><li>Word 2016, Word in a browser, Word Mac, Word for iOS</li><li>Outlook 2016, Outlook Web Access</li><li>Office Lens on iOS, Android</li></ul> | | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for Word in a browser, Outlook Web Access)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> | <p style="text-align: center;">X</p> <p style="text-align: center;">(N/A for any OneNote apps)</p> |
</br> </br>
@ -42,11 +42,11 @@ You will also learn how to deploy apps using Microsoft Intune, turn on or off Ea
| Writing and proofing features | Available in which apps | Office 2016 MSI | Office 2019 | Office 365 ProPlus Monthly (C2R) | Office 365 ProPlus Semi Annual (C2R) | Office 365 ProPlus Annual (C2R) | | Writing and proofing features | Available in which apps | Office 2016 MSI | Office 2019 | Office 365 ProPlus Monthly (C2R) | Office 365 ProPlus Semi Annual (C2R) | Office 365 ProPlus Annual (C2R) |
|----------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------|--------------------------------------|--------------------------------------|--------------------------------------|--------------------------------------|---------------------------------| |----------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------|--------------------------------------|--------------------------------------|--------------------------------------|--------------------------------------|---------------------------------|
| Dictation | <ul><li>OneNote 2016, OneNote for Windows 10</li><li>Word 2016</li><li>Outlook 2016</li><li>PowerPoint 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | | Dictation | <ul><li>OneNote 2016, OneNote for Windows 10</li><li>Word 2016</li><li>Outlook 2016</li><li>PowerPoint 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | |
| Spelling suggestions for phonetic misspellings | <ul><li>Word 2016, Word Online, Word for Mac</li><li>Outlook 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | Spelling suggestions for phonetic misspellings | <ul><li>Word 2016, Word in a browser, Word for Mac</li><li>Outlook 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | |
| Synonyms alongside spelling suggestions that can be read aloud | <ul><li>Word 2016</li><li>Outlook 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | Synonyms alongside spelling suggestions that can be read aloud | <ul><li>Word 2016</li><li>Outlook 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | |
| Grammar checks | <ul><li>Word 2016, Word Online, Word for Mac</li><li>Outlook 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | | Grammar checks | <ul><li>Word 2016, Word in a browser, Word for Mac</li><li>Outlook 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | |
| Customizable writing critiques | <ul><li>Word 2016, Word for Mac</li><li>Outlook 2016</li></ul> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | | Customizable writing critiques | <ul><li>Word 2016, Word for Mac</li><li>Outlook 2016</li></ul> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | |
| Tell me what you want to do | <ul><li>Office 2016</li><li>Office Online</li><li>Office on iOS, Android, Windows 10</li></ul> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | Tell me what you want to do | <ul><li>Office 2016</li><li>Office in a browser</li><li>Office on iOS, Android, Windows 10</li></ul> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | |
| Editor | <ul><li>Word 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | | | Editor | <ul><li>Word 2016</li></ul> | | <p style="text-align: center;">X</p> | <p style="text-align: center;">X</p> | | |
</br> </br>

BIN
education/images/MSC17_cloud_005.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 122 KiB

BIN
education/images/MSC17_cloud_012_merged.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 96 KiB

63
education/index.md
View File

@ -32,7 +32,7 @@ ms.prod: w10
<div class="card"> <div class="card">
<div class="cardImageOuter"> <div class="cardImageOuter">
<div class="cardImage bgdAccent1"> <div class="cardImage bgdAccent1">
<img src="https://docs.microsoft.com/media/hubs/microsoft365/M365-education.svg" alt="" /> <img src="images/MSC17_cloud_012_merged.png" alt="" />
</div> </div>
</div> </div>
<div class="cardText"> <div class="cardText">
@ -51,7 +51,7 @@ ms.prod: w10
<div class="card"> <div class="card">
<div class="cardImageOuter"> <div class="cardImageOuter">
<div class="cardImage bgdAccent1"> <div class="cardImage bgdAccent1">
<img src="https://docs.microsoft.com/media/hubs/education/education-pro-get-started.svg" alt="" /> <img src="images/MSC17_cloud_005.png" alt="" />
</div> </div>
</div> </div>
<div class="cardText"> <div class="cardText">
@ -63,65 +63,6 @@ ms.prod: w10
</div> </div>
</a> </a>
</li> </li>
<li>
</li>
<li>
<a href="/microsoft-365/education/index?branch=m365-integration#pivot=itpro&amp;panel=itpro-scd" target="_blank">
<div class="cardSize">
<div class="cardPadding">
<div class="card">
<div class="cardImageOuter">
<div class="cardImage bgdAccent1">
<img src="https://docs.microsoft.com/media/hubs/education/education-pro-office365.svg" alt="" />
</div>
</div>
<div class="cardText">
<h3>1. M365 EDU deployment</h3>
<p>Get started by creating your Office 365 tenant, setting up a cloud infrastructure for your school, and creating, managing, and syncing user accounts.</p>
</div>
</div>
</div>
</div>
</a>
</li>
<li>
<a href="/microsoft-365/education/index?branch=m365-integration#pivot=itpro&amp;panel=itpro-sdm" target="_blank">
<div class="cardSize">
<div class="cardPadding">
<div class="card">
<div class="cardImageOuter">
<div class="cardImage bgdAccent1">
<img src="https://docs.microsoft.com/media/hubs/education/education-pro-usb.svg" alt="" />
</div>
</div>
<div class="cardText">
<h3>2. Device Management</h3>
<p>Improve student learning outcomes through connected classrooms and engaging new technologies with streamlined device management.</p>
</div>
</div>
</div>
</div>
</a>
</li>
<li>
<a href="/microsoft-365/education/deploy/post-deployment-next-steps" target="_blank">
<div class="cardSize">
<div class="cardPadding">
<div class="card">
<div class="cardImageOuter">
<div class="cardImage bgdAccent1">
<img src="https://docs.microsoft.com/media/hubs/education/education-ms-teams.svg" alt="" />
</div>
</div>
<div class="cardText">
<h3>3. Post Deployment Next Steps</h3>
<p>Migrate to Sharepoint Server Hybrid or Sharepoint Online, and Exchange Server Hybrid or Exchange Online. Configure settings in your Admin portals.</p>
</div>
</div>
</div>
</div>
</a>
</li>
</ul> </ul>
</li> </li>
</ul> </ul>

4
education/trial-in-a-box/educator-tib-get-started.md
View File

@ -78,7 +78,7 @@ Learning Tools and the Immersive Reader can be used in the Microsoft Edge browse
4. Select the **Immersive Reader** button. 4. Select the **Immersive Reader** button.
![Word Online's Immersive Reader](images/word_online_immersive_reader.png) ![Word's Immersive Reader](images/word_online_immersive_reader.png)
5. Press the **Play** button to hear text read aloud. 5. Press the **Play** button to hear text read aloud.
@ -86,7 +86,7 @@ Learning Tools and the Immersive Reader can be used in the Microsoft Edge browse
| Text to Speech | Text Preferences | Grammar Options | Line Focus | | Text to Speech | Text Preferences | Grammar Options | Line Focus |
| :------------: | :--------------: | :-------------: | :--------: | | :------------: | :--------------: | :-------------: | :--------: |
| ![Word Online Text to Speech](images/wordonline_tts.png) | ![Word Online Text Preferences](images/wordonline_text_preferences.png) | ![Word Online Grammar Options](images/wordonline_grammar_options.png) | ![Word Online Line Focus](images/wordonline_line_focus.png) | | ![Word Text to Speech](images/wordonline_tts.png) | ![Word Text Preferences](images/wordonline_text_preferences.png) | ![Word Grammar Options](images/wordonline_grammar_options.png) | ![Word Line Focus](images/wordonline_line_focus.png) |
</br> </br>
</br> </br>

2
education/trial-in-a-box/itadmin-tib-get-started.md
View File

@ -257,7 +257,7 @@ Follow these instructions to confirm if you configured your tenant correctly and
3. If you added **Office 365 for Windows 10 S (Education Preview)** to the package and provisioned **Device B** with it, you need to click on one of the Office apps in the **Start** menu to complete app registration. 3. If you added **Office 365 for Windows 10 S (Education Preview)** to the package and provisioned **Device B** with it, you need to click on one of the Office apps in the **Start** menu to complete app registration.
* [Verify the device is Azure AD joined](https://docs.microsoft.com/education/get-started/finish-setup-and-other-tasks#verify-the-device-is-azure-ad-joined) - Confirm that your devices are being managed in Intune for Education. * [Verify the device is Azure AD joined](https://docs.microsoft.com/education/get-started/finish-setup-and-other-tasks#verify-the-device-is-azure-ad-joined) - Confirm that your devices are being managed in Intune for Education.
* [Add more users](https://docs.microsoft.com/education/get-started/finish-setup-and-other-tasks#add-more-users) - Go to the Office 365 admin center to add more users. * [Add more users](https://docs.microsoft.com/education/get-started/finish-setup-and-other-tasks#add-more-users) - Go to the Microsoft 365 admin center to add more users.
* Get app updates (including updates for Office 365 for Windows 10 S) * Get app updates (including updates for Office 365 for Windows 10 S)
1. Open the **Start** menu and go to the **Microsoft Store**. 1. Open the **Start** menu and go to the **Microsoft Store**.
2. From the **Microsoft Store**, click **...** (See more) and select **Downloads and updates**. 2. From the **Microsoft Store**, click **...** (See more) and select **Downloads and updates**.

2
education/trial-in-a-box/support-options.md
View File

@ -31,7 +31,7 @@ For more information about checking for updates, and how to optionally turn on a
## 2. Confirm your admin contact information is current ## 2. Confirm your admin contact information is current
1. Go to the <a href="https://portal.office.com/adminportal/home" target="_blank">Office 365 admin center</a> and sign in with your Office 365 admin credentials. 1. Go to the <a href="https://portal.office.com/adminportal/home" target="_blank">admin center</a> and sign in with your Office 365 admin credentials.
2. In the admin center dashboard, select your profile on the upper righthand corner and select **My account** from the options. 2. In the admin center dashboard, select your profile on the upper righthand corner and select **My account** from the options.
3. Select **Personal info** and then edit **Contact details** to update your phone, primary email address, and alternate email address. 3. Select **Personal info** and then edit **Contact details** to update your phone, primary email address, and alternate email address.

6
education/windows/deploy-windows-10-in-a-school-district.md
View File

@ -615,7 +615,7 @@ Now that you have created your new Office 365 Education subscription, add the do
#### To add additional domains and subdomains #### To add additional domains and subdomains
1. In the Office 365 admin center, in the list view, click **DOMAINS**. 1. In the admin center, in the list view, click **DOMAINS**.
2. In the details pane, above the list of domains, on the menu bar, click **Add domain**. 2. In the details pane, above the list of domains, on the menu bar, click **Add domain**.
@ -867,7 +867,7 @@ Now that you have created your new Office 365 Education subscription, you need t
>**Note**&nbsp;&nbsp;If your institution has AD DS, don’t create security accounts in Office 365. Instead, create the security groups in AD DS, and then use Azure AD integration to synchronize the security groups with your Office 365 tenant. >**Note**&nbsp;&nbsp;If your institution has AD DS, don’t create security accounts in Office 365. Instead, create the security groups in AD DS, and then use Azure AD integration to synchronize the security groups with your Office 365 tenant.
You can use the Office 365 admin center to add individual Office 365 accounts manually—a reasonable process when you’re adding only a few users. If you have many users, however, you can automate the process by creating a list of those users, and then use that list to create user accounts (that is, bulk-add users). You can use the Microsoft 365 admin center to add individual Office 365 accounts manually—a reasonable process when you’re adding only a few users. If you have many users, however, you can automate the process by creating a list of those users, and then use that list to create user accounts (that is, bulk-add users).
The bulk-add process assigns the same Office 365 Education license plan to all users on the list. Therefore, you must create a separate list for each license plan you recorded in Table 9. Depending on the number of faculty members who need to use the classroom, you may want to add the faculty Office 365 accounts manually; however, use the bulk-add process to add student accounts. The bulk-add process assigns the same Office 365 Education license plan to all users on the list. Therefore, you must create a separate list for each license plan you recorded in Table 9. Depending on the number of faculty members who need to use the classroom, you may want to add the faculty Office 365 accounts manually; however, use the bulk-add process to add student accounts.
@ -1808,7 +1808,7 @@ For more information about how to:
For more information about how to: For more information about how to:
<ul> <ul>
<li>Create or modify security groups, see <a href="https://support.office.com/en-us/article/Create-an-Office-365-Group-in-the-admin-center-74a1ef8b-3844-4d08-9980-9f8f7a36000f?ui=en-US&amp;rs=en-001&amp;ad=US" data-raw-source="[Create an Office 365 Group in the admin center](https://support.office.com/en-us/article/Create-an-Office-365-Group-in-the-admin-center-74a1ef8b-3844-4d08-9980-9f8f7a36000f?ui=en-US&amp;rs=en-001&amp;ad=US)">Create an Office 365 Group in the admin center</a>.</li> <li>Create or modify security groups, see <a href="https://support.office.com/en-us/article/Create-an-Office-365-Group-in-the-admin-center-74a1ef8b-3844-4d08-9980-9f8f7a36000f?ui=en-US&amp;rs=en-001&amp;ad=US" data-raw-source="[Create an Office 365 Group in the admin center](https://support.office.com/en-us/article/Create-an-Office-365-Group-in-the-admin-center-74a1ef8b-3844-4d08-9980-9f8f7a36000f?ui=en-US&amp;rs=en-001&amp;ad=US)">Create an Office 365 Group in the admin center</a>.</li>
<li>Manage group membership, see <a href="https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a" data-raw-source="[Manage Group membership in the Office 365 admin center](https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a)">Manage Group membership in the Office 365 admin center</a>.</li> <li>Manage group membership, see <a href="https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a" data-raw-source="[Manage Group membership in the admin center](https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a)">Manage Group membership in the admin center</a>.</li>
</ul> </ul>
</td> </td>
<td></td> <td></td>

8
education/windows/deploy-windows-10-in-a-school.md
View File

@ -249,7 +249,7 @@ Now that you have created your new Office 365 Education subscription, add the do
#### To add additional domains and subdomains #### To add additional domains and subdomains
1. In the Office 365 admin center, in the list view, click **DOMAINS**. 1. In the admin center, in the list view, click **DOMAINS**.
2. In the details pane, above the list of domains, on the menu bar, click **Add domain**. 2. In the details pane, above the list of domains, on the menu bar, click **Add domain**.
3. In the Add a New Domain in Office 365 Wizard, on the **Verify domain wizard** page, click **Let’s get started**. 3. In the Add a New Domain in Office 365 Wizard, on the **Verify domain wizard** page, click **Let’s get started**.
4. On the **Verify domain** wizard page, in the **Enter a domain you already own** box, type your domain name, and then click **Next**. 4. On the **Verify domain** wizard page, in the **Enter a domain you already own** box, type your domain name, and then click **Next**.
@ -490,7 +490,7 @@ You can bulk-import user and group accounts directly into Office 365, reducing t
Now that you have created your new Office 365 Education subscription, you need to create user accounts. You can add user accounts for the teachers, other faculty, and students who will use the classroom. Now that you have created your new Office 365 Education subscription, you need to create user accounts. You can add user accounts for the teachers, other faculty, and students who will use the classroom.
You can use the Office 365 admin center to add individual Office 365 accounts manually—a reasonable process when you’re adding only a few users. If you have many users, however, you can automate the process by creating a list of those users, and then use that list to create user accounts (that is, bulk-add users). You can use the Microsoft 365 admin center to add individual Office 365 accounts manually—a reasonable process when you’re adding only a few users. If you have many users, however, you can automate the process by creating a list of those users, and then use that list to create user accounts (that is, bulk-add users).
The bulk-add process assigns the same Office 365 Education license plan to all users on the list. Therefore, you must create a separate list for each license plan you recorded in Table 2. Depending on the number of faculty members who need to use the classroom, you may want to add the faculty Office 365 accounts manually; however, use the bulk-add process to add student accounts. The bulk-add process assigns the same Office 365 Education license plan to all users on the list. Therefore, you must create a separate list for each license plan you recorded in Table 2. Depending on the number of faculty members who need to use the classroom, you may want to add the faculty Office 365 accounts manually; however, use the bulk-add process to add student accounts.
@ -1239,8 +1239,8 @@ For more information about how to:
<td>Create or modify security groups and manage group membership in Office 365.<br/><br/> <td>Create or modify security groups and manage group membership in Office 365.<br/><br/>
For more information about how to: For more information about how to:
<ul> <ul>
<li>Create or modify security groups, see <a href="https://support.office.com/en-us/article/View-create-and-delete-groups-in-the-Office-365-admin-center-a6360120-2fc4-46af-b105-6a04dc5461c7" data-raw-source="[View, create, and delete Groups in the Office 365 admin center](https://support.office.com/en-us/article/View-create-and-delete-groups-in-the-Office-365-admin-center-a6360120-2fc4-46af-b105-6a04dc5461c7)">View, create, and delete Groups in the Office 365 admin center</a>.</li> <li>Create or modify security groups, see <a href="https://support.office.com/en-us/article/View-create-and-delete-groups-in-the-Office-365-admin-center-a6360120-2fc4-46af-b105-6a04dc5461c7" data-raw-source="[View, create, and delete Groups in the admin center](https://support.office.com/en-us/article/View-create-and-delete-groups-in-the-Office-365-admin-center-a6360120-2fc4-46af-b105-6a04dc5461c7)">View, create, and delete Groups in the admin center</a>.</li>
<li>Manage group membership, see <a href="https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a" data-raw-source="[Manage Group membership in the Office 365 admin center](https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a)">Manage Group membership in the Office 365 admin center</a>.</li> <li>Manage group membership, see <a href="https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a" data-raw-source="[Manage Group membership in the admin center](https://support.office.com/en-us/article/Manage-Group-membership-in-the-Office-365-admin-center-e186d224-a324-4afa-8300-0e4fc0c3000a)">Manage Group membership in the admin center</a>.</li>
</ul> </ul>
</td> </td>

1
it-client

@ -1 +0,0 @@
Subproject commit 61e0a21977430f3c0eef1c32e398999dc090c332

25
mdop/appv-v5/how-to-install-the-publishing-server-on-a-remote-computer.md
View File

@ -51,21 +51,16 @@ Use the following procedure to install the publishing server on a separate compu
9. To verify if the publishing server is running correctly, you should import a package to the management server, entitle the package to an AD group, and publish the package. Using an internet browser, open the following URL: <strong>http://publishingserver:pubport</strong>. If the server is running correctly information similar to the following will be displayed: 9. To verify if the publishing server is running correctly, you should import a package to the management server, entitle the package to an AD group, and publish the package. Using an internet browser, open the following URL: <strong>http://publishingserver:pubport</strong>. If the server is running correctly information similar to the following will be displayed:
`<Publishing Protocol="1.0">` ```xml
<Publishing Protocol="1.0">
` <Packages>` <Packages>
<Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" VersionId="5d03c08f-51dc-4026-8cf9-15ebe3d65a72" PackageUrl="\\server\share\file.appv" />
` <Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" VersionId="5d03c08f-51dc-4026-8cf9-15ebe3d65a72" PackageUrl="\\server\share\file.appv" />` </Packages>
<NoGroup>
` </Packages>` <Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" />
</NoGroup>
` <NoGroup>` </Publishing>
```
` <Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" />`
` </NoGroup>`
`</Publishing>`
**Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv).

25
mdop/appv-v5/how-to-install-the-publishing-server-on-a-remote-computer51.md
View File

@ -51,21 +51,16 @@ Use the following procedure to install the publishing server on a separate compu
9. To verify if the publishing server is running correctly, you should import a package to the management server, entitle the package to an AD group, and publish the package. Using an internet browser, open the following URL: <strong>http://publishingserver:pubport</strong>. If the server is running correctly information similar to the following will be displayed: 9. To verify if the publishing server is running correctly, you should import a package to the management server, entitle the package to an AD group, and publish the package. Using an internet browser, open the following URL: <strong>http://publishingserver:pubport</strong>. If the server is running correctly information similar to the following will be displayed:
`<Publishing Protocol="1.0">` ```xml
<Publishing Protocol="1.0">
` <Packages>` <Packages>
<Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" VersionId="5d03c08f-51dc-4026-8cf9-15ebe3d65a72" PackageUrl="\\server\share\file.appv" />
` <Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" VersionId="5d03c08f-51dc-4026-8cf9-15ebe3d65a72" PackageUrl="\\server\share\file.appv" />` </Packages>
<NoGroup>
` </Packages>` <Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" />
</NoGroup>
` <NoGroup>` </Publishing>
```
` <Package PackageId="28115343-06e2-44dc-a327-3a0b9b868bda" />`
` </NoGroup>`
`</Publishing>`
**Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv).

130
mdop/mbam-v1/how-to-move-mbam-10-features-to-another-computer.md
View File

@ -88,49 +88,55 @@ You can use the following procedure to move the MBAM Recovery and Hardware Datab
Modify the MBAM Recovery and Hardware Database to use the full recovery mode. Modify the MBAM Recovery and Hardware Database to use the full recovery mode.
`USE master;` ```sql
USE master;
`GO` GO
`ALTER DATABASE "MBAM Recovery and Hardware"` ALTER DATABASE "MBAM Recovery and Hardware"
` SET RECOVERY FULL;` SET RECOVERY FULL;
`GO` GO
```
Create MBAM Recovery and Hardware Database Data and MBAM Recovery logical backup devices. Create MBAM Recovery and Hardware Database Data and MBAM Recovery logical backup devices.
`USE master` ```sql
USE master
`GO` GO
`EXEC sp_addumpdevice 'disk', 'MBAM Recovery and Hardware Database Data Device',` EXEC sp_addumpdevice 'disk', 'MBAM Recovery and Hardware Database Data Device',
`'Z:\MBAM Recovery and Hardware Database Data.bak';` 'Z:\MBAM Recovery and Hardware Database Data.bak';
`GO` GO
```
Back up the full MBAM Recovery and Hardware database. Back up the full MBAM Recovery and Hardware database.
`BACKUP DATABASE [MBAM Recovery and Hardware] TO [MBAM Recovery and Hardware Database Data Device];` ```sql
BACKUP DATABASE [MBAM Recovery and Hardware] TO [MBAM Recovery and Hardware Database Data Device];
`GO` GO
`BACKUP CERTIFICATE [MBAM Recovery Encryption Certificate]` BACKUP CERTIFICATE [MBAM Recovery Encryption Certificate]
`TO FILE = 'Z:\SQLServerInstanceCertificateFile'` TO FILE = 'Z:\SQLServerInstanceCertificateFile'
`WITH PRIVATE KEY` WITH PRIVATE KEY
`(` (
` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
` ENCRYPTION BY PASSWORD = '$PASSWORD$'` ENCRYPTION BY PASSWORD = '$PASSWORD$'
`);` );
`GO` GO
```
**Note** **Note**
Replace the values from the preceding example with those that match your environment: Replace the values from the preceding example with those that match your environment:
@ -181,43 +187,51 @@ You can use the following procedure to move the MBAM Recovery and Hardware Datab
4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script: 4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
`-- Restore MBAM Recovery and Hardware Database. ` ```sql
-- Restore MBAM Recovery and Hardware Database.
`USE master` USE master
`GO` GO
```
Drop the certificate created by MBAM Setup. Drop the certificate created by MBAM Setup.
`DROP CERTIFICATE [MBAM Recovery Encryption Certificate]` ```sql
DROP CERTIFICATE [MBAM Recovery Encryption Certificate]
`GO` GO
```
Add certificate Add certificate
`CREATE CERTIFICATE [MBAM Recovery Encryption Certificate]` ```sql
CREATE CERTIFICATE [MBAM Recovery Encryption Certificate]
`FROM FILE = 'Z: \SQLServerInstanceCertificateFile'` FROM FILE = 'Z: \SQLServerInstanceCertificateFile'
`WITH PRIVATE KEY` WITH PRIVATE KEY
`(` (
` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
` DECRYPTION BY PASSWORD = '$PASSWORD$'` DECRYPTION BY PASSWORD = '$PASSWORD$'
`);` );
`GO` GO
```
Restore the MBAM Recovery and Hardware database data and the log files. Restore the MBAM Recovery and Hardware database data and the log files.
`RESTORE DATABASE [MBAM Recovery and Hardware]` ```sql
RESTORE DATABASE [MBAM Recovery and Hardware]
` FROM DISK = 'Z:\MBAM Recovery and Hardware Database Data.bak'` FROM DISK = 'Z:\MBAM Recovery and Hardware Database Data.bak'
` WITH REPLACE` WITH REPLACE
```
**Note** **Note**
Replace the values from the preceding example with those that match your environment: Replace the values from the preceding example with those that match your environment:
@ -354,35 +368,37 @@ If you choose to move the MBAM Compliance Status Database feature from one compu
2. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script: 2. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script:
`-- Modify the MBAM Compliance Status Database to use the full recovery model.` ```sql
-- Modify the MBAM Compliance Status Database to use the full recovery model.
`USE master;` USE master;
`GO` GO
`ALTER DATABASE "MBAM Compliance Status"` ALTER DATABASE "MBAM Compliance Status"
` SET RECOVERY FULL;` SET RECOVERY FULL;
`GO` GO
`-- Create MBAM Compliance Status Data logical backup devices.` -- Create MBAM Compliance Status Data logical backup devices.
`USE master` USE master
`GO` GO
`EXEC sp_addumpdevice 'disk', 'MBAM Compliance Status Database Data Device',` EXEC sp_addumpdevice 'disk', 'MBAM Compliance Status Database Data Device',
`'Z: \MBAM Compliance Status Database Data.bak';` 'Z: \MBAM Compliance Status Database Data.bak';
`GO` GO
-- Back up the full MBAM Recovery and Hardware database. -- Back up the full MBAM Recovery and Hardware database.
`BACKUP DATABASE [MBAM Compliance Status] TO [MBAM Compliance Status Database Data Device];` BACKUP DATABASE [MBAM Compliance Status] TO [MBAM Compliance Status Database Data Device];
`GO` GO
```
3. Run the SQL file with a command that is similar to the following one, by using the SQL Server PowerShell: 3. Run the SQL file with a command that is similar to the following one, by using the SQL Server PowerShell:
@ -422,19 +438,21 @@ If you choose to move the MBAM Compliance Status Database feature from one compu
3. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script: 3. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script:
`-- Create MBAM Compliance Status Database Data logical backup devices. ` ```sql
-- Create MBAM Compliance Status Database Data logical backup devices.
`Use master` Use master
`GO` GO
-- Restore the MBAM Compliance Status database data files. -- Restore the MBAM Compliance Status database data files.
`RESTORE DATABASE [MBAM Compliance Status Database]` RESTORE DATABASE [MBAM Compliance Status Database]
` FROM DISK = 'C:\test\MBAM Compliance Status Database Data.bak'` FROM DISK = 'C:\test\MBAM Compliance Status Database Data.bak'
` WITH REPLACE` WITH REPLACE
```
4. Run the SQL File with a command that is similar to the following one, by using the SQL Server PowerShell: 4. Run the SQL File with a command that is similar to the following one, by using the SQL Server PowerShell:

120
mdop/mbam-v2/how-to-move-mbam-20-features-to-another-computer-mbam-2.md
View File

@ -88,49 +88,51 @@ To move the Recovery Database from one computer to another (for example, from Se
Modify the MBAM Recovery Database to use the full recovery mode. Modify the MBAM Recovery Database to use the full recovery mode.
`USE master;` ```sql
USE master;
`GO` GO
`ALTER DATABASE "MBAM Recovery and Hardware"` ALTER DATABASE "MBAM Recovery and Hardware"
` SET RECOVERY FULL;` SET RECOVERY FULL;
`GO` GO
-- Create MBAM Recovery Database Data and MBAM Recovery logical backup devices. -- Create MBAM Recovery Database Data and MBAM Recovery logical backup devices.
`USE master` USE master
`GO` GO
`EXEC sp_addumpdevice 'disk', 'MBAM Recovery and Hardware Database Data Device',` EXEC sp_addumpdevice 'disk', 'MBAM Recovery and Hardware Database Data Device',
`'Z:\MBAM Recovery Database Data.bak';` 'Z:\MBAM Recovery Database Data.bak';
`GO` GO
-- Back up the full MBAM Recovery Database. -- Back up the full MBAM Recovery Database.
`BACKUP DATABASE [MBAM Recovery and Hardware] TO [MBAM Recovery and Hardware Database Data Device];` BACKUP DATABASE [MBAM Recovery and Hardware] TO [MBAM Recovery and Hardware Database Data Device];
`GO` GO
`BACKUP CERTIFICATE [MBAM Recovery Encryption Certificate]` BACKUP CERTIFICATE [MBAM Recovery Encryption Certificate]
`TO FILE = 'Z:\SQLServerInstanceCertificateFile'` TO FILE = 'Z:\SQLServerInstanceCertificateFile'
`WITH PRIVATE KEY` WITH PRIVATE KEY
`(` (
` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
` ENCRYPTION BY PASSWORD = '$PASSWORD$'` ENCRYPTION BY PASSWORD = '$PASSWORD$'
`);` );
`GO` GO
```
**Note** **Note**
Replace the following values in the example above with those that match your environment: Replace the following values in the example above with those that match your environment:
@ -183,43 +185,45 @@ To move the Recovery Database from one computer to another (for example, from Se
4. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script: 4. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script:
`-- Restore MBAM Recovery Database. ` ```sql
-- Restore MBAM Recovery Database.
`USE master` USE master
`GO` GO
-- Drop certificate created by MBAM Setup. -- Drop certificate created by MBAM Setup.
`DROP CERTIFICATE [MBAM Recovery Encryption Certificate]` DROP CERTIFICATE [MBAM Recovery Encryption Certificate]
`GO` GO
--Add certificate --Add certificate
`CREATE CERTIFICATE [MBAM Recovery Encryption Certificate]` CREATE CERTIFICATE [MBAM Recovery Encryption Certificate]
`FROM FILE = 'Z: \SQLServerInstanceCertificateFile'` FROM FILE = 'Z: \SQLServerInstanceCertificateFile'
`WITH PRIVATE KEY` WITH PRIVATE KEY
`(` (
` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',` FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
` DECRYPTION BY PASSWORD = '$PASSWORD$'` DECRYPTION BY PASSWORD = '$PASSWORD$'
`);` );
`GO` GO
-- Restore the MBAM Recovery Database data and log files. -- Restore the MBAM Recovery Database data and log files.
`RESTORE DATABASE [MBAM Recovery and Hardware]` RESTORE DATABASE [MBAM Recovery and Hardware]
` FROM DISK = 'Z:\MBAM Recovery Database Data.bak'` FROM DISK = 'Z:\MBAM Recovery Database Data.bak'
` WITH REPLACE` WITH REPLACE
```
**Note** **Note**
Replace the following values in the example above with those that match your environment: Replace the following values in the example above with those that match your environment:
@ -362,35 +366,37 @@ If you want to move the MBAM Compliance and Audit Database from one computer to
2. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script: 2. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script:
`-- Modify the MBAM Compliance Status Database to use the full recovery model.` ```sql
-- Modify the MBAM Compliance Status Database to use the full recovery model.
`USE master;` USE master;
`GO` GO
`ALTER DATABASE "MBAM Compliance Status"` ALTER DATABASE "MBAM Compliance Status"
` SET RECOVERY FULL;` SET RECOVERY FULL;
`GO` GO
`-- Create MBAM Compliance Status Data logical backup devices.` -- Create MBAM Compliance Status Data logical backup devices.
`USE master` USE master
`GO` GO
`EXEC sp_addumpdevice 'disk', 'MBAM Compliance Status Database Data Device',` EXEC sp_addumpdevice 'disk', 'MBAM Compliance Status Database Data Device',
`'Z: \MBAM Compliance Status Database Data.bak';` 'Z: \MBAM Compliance Status Database Data.bak';
`GO` GO
-- Back up the full MBAM Recovery database. -- Back up the full MBAM Recovery database.
`BACKUP DATABASE [MBAM Compliance Status] TO [MBAM Compliance Status Database Data Device];` BACKUP DATABASE [MBAM Compliance Status] TO [MBAM Compliance Status Database Data Device];
`GO` GO
```
3. Run the SQL file by using a Windows PowerShell command line that is similar to the following: 3. Run the SQL file by using a Windows PowerShell command line that is similar to the following:
@ -430,19 +436,21 @@ If you want to move the MBAM Compliance and Audit Database from one computer to
3. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script: 3. To automate this procedure, create a SQL file (.sql) that contains the following-SQL script:
`-- Create MBAM Compliance Status Database Data logical backup devices. ` ```sql
-- Create MBAM Compliance Status Database Data logical backup devices.
`Use master` Use master
`GO` GO
-- Restore the MBAM Compliance Status database data files. -- Restore the MBAM Compliance Status database data files.
`RESTORE DATABASE [MBAM Compliance Status]` RESTORE DATABASE [MBAM Compliance Status]
` FROM DISK = 'C:\test\MBAM Compliance Status Database Data.bak'` FROM DISK = 'C:\test\MBAM Compliance Status Database Data.bak'
` WITH REPLACE` WITH REPLACE
```
4. Run the SQL File by using a Windows PowerShell command line that is similar to the following: 4. Run the SQL File by using a Windows PowerShell command line that is similar to the following:

1
mdop/mbam-v25/TOC.md
View File

@ -83,6 +83,7 @@
#### [Monitoring Web Service Request Performance Counters](monitoring-web-service-request-performance-counters.md) #### [Monitoring Web Service Request Performance Counters](monitoring-web-service-request-performance-counters.md)
### [Using Windows PowerShell to Administer MBAM 2.5](using-windows-powershell-to-administer-mbam-25.md) ### [Using Windows PowerShell to Administer MBAM 2.5](using-windows-powershell-to-administer-mbam-25.md)
## [Troubleshooting MBAM 2.5](troubleshooting-mbam-25.md) ## [Troubleshooting MBAM 2.5](troubleshooting-mbam-25.md)
## [Applying hotfixes on MBAM 2.5 SP1](apply-hotfix-for-mbam-25-sp1.md)
## [Technical Reference for MBAM 2.5](technical-reference-for-mbam-25.md) ## [Technical Reference for MBAM 2.5](technical-reference-for-mbam-25.md)
### [Client Event Logs](client-event-logs.md) ### [Client Event Logs](client-event-logs.md)
### [Server Event Logs](server-event-logs.md) ### [Server Event Logs](server-event-logs.md)

38
mdop/uev-v2/application-template-schema-reference-for-ue-v-2x-both-uevv2.md
View File

@ -240,7 +240,7 @@ Version identifies the version of the settings location template for administrat
**Hint:** You can save notes about version changes using XML comment tags `<!-- -->`, for example: **Hint:** You can save notes about version changes using XML comment tags `<!-- -->`, for example:
``` syntax ```xml
<!-- <!--
Version History Version History
@ -279,7 +279,7 @@ Author identifies the creator of the settings location template. Two optional ch
Processes contains at least one `<Process>` element, which in turn contains the following child elements: **Filename**, **Architecture**, **ProductName**, **FileDescription**, **ProductVersion**, and **FileVersion**. The Filename child element is mandatory and the others are optional. A fully populated element contains tags similar to this example: Processes contains at least one `<Process>` element, which in turn contains the following child elements: **Filename**, **Architecture**, **ProductName**, **FileDescription**, **ProductVersion**, and **FileVersion**. The Filename child element is mandatory and the others are optional. A fully populated element contains tags similar to this example:
``` syntax ```xml
<Process> <Process>
<Filename>MyApplication.exe</Filename> <Filename>MyApplication.exe</Filename>
<Architecture>Win64</Architecture> <Architecture>Win64</Architecture>
@ -354,7 +354,7 @@ UE-V does not support ARM processors in this version.
ProductName is an optional element used to identify a product for administrative purposes or reporting. ProductName differs from Filename in that there are no regular expression restrictions on its value. This allows for more easily understood descriptions of a process where the executable name may not be obvious. For example: ProductName is an optional element used to identify a product for administrative purposes or reporting. ProductName differs from Filename in that there are no regular expression restrictions on its value. This allows for more easily understood descriptions of a process where the executable name may not be obvious. For example:
``` syntax ```xml
<Process> <Process>
<Filename>MyApplication.exe</Filename> <Filename>MyApplication.exe</Filename>
<ProductName>My Application 6.x by Contoso.com</ProductName> <ProductName>My Application 6.x by Contoso.com</ProductName>
@ -374,9 +374,8 @@ FileDescription is an optional tag that allows for an administrative description
For example, in a suited application, it might be useful to provide reminders about the function of two executables (MyApplication.exe and MyApplicationHelper.exe), as shown here: For example, in a suited application, it might be useful to provide reminders about the function of two executables (MyApplication.exe and MyApplicationHelper.exe), as shown here:
``` syntax ```xml
<Processes> <Processes>
<Process> <Process>
<Filename>MyApplication.exe</Filename> <Filename>MyApplication.exe</Filename>
<FileDescription>My Application Main Engine</ FileDescription> <FileDescription>My Application Main Engine</ FileDescription>
@ -408,7 +407,7 @@ The product and file version elements may be left unspecified. Doing so makes th
Product version: 1.0 specified in the UE-V Generator produces the following XML: Product version: 1.0 specified in the UE-V Generator produces the following XML:
``` syntax ```xml
<ProductVersion> <ProductVersion>
<Major Minimum="1" Maximum="1" /> <Major Minimum="1" Maximum="1" />
<Minor Minimum="0" Maximum="0" /> <Minor Minimum="0" Maximum="0" />
@ -419,7 +418,7 @@ Product version: 1.0 specified in the UE-V Generator produces the following XML:
File version: 5.0.2.1000 specified in the UE-V Generator produces the following XML: File version: 5.0.2.1000 specified in the UE-V Generator produces the following XML:
``` syntax ```xml
<FileVersion> <FileVersion>
<Major Minimum="5" Maximum="5" /> <Major Minimum="5" Maximum="5" />
<Minor Minimum="0" Maximum="0" /> <Minor Minimum="0" Maximum="0" />
@ -432,7 +431,7 @@ File version: 5.0.2.1000 specified in the UE-V Generator produces the following
Only the Minimum attribute is present. Maximum must be included in a range as well. Only the Minimum attribute is present. Maximum must be included in a range as well.
``` syntax ```xml
<ProductVersion> <ProductVersion>
<Major Minimum="2" /> <Major Minimum="2" />
</ProductVersion> </ProductVersion>
@ -442,7 +441,7 @@ Only the Minimum attribute is present. Maximum must be included in a range as we
Only the Minor element is present. Major must be included as well. Only the Minor element is present. Major must be included as well.
``` syntax ```xml
<ProductVersion> <ProductVersion>
<Minor Minimum="0" Maximum="0" /> <Minor Minimum="0" Maximum="0" />
</ProductVersion> </ProductVersion>
@ -462,7 +461,7 @@ Including a FileVersion element for an application allows for more granular fine
The child elements and syntax rules for FileVersion are identical to those of ProductVersion. The child elements and syntax rules for FileVersion are identical to those of ProductVersion.
``` syntax ```xml
<Process> <Process>
<Filename>MSACCESS.EXE</Filename> <Filename>MSACCESS.EXE</Filename>
<Architecture>Win32</Architecture> <Architecture>Win32</Architecture>
@ -1177,7 +1176,7 @@ Version identifies the version of the settings location template for administrat
**Hint:** You can save notes about version changes using XML comment tags `<!-- -->`, for example: **Hint:** You can save notes about version changes using XML comment tags `<!-- -->`, for example:
``` syntax ```xml
<!-- <!--
Version History Version History
@ -1216,7 +1215,7 @@ Author identifies the creator of the settings location template. Two optional ch
Processes contains at least one `<Process>` element, which in turn contains the following child elements: **Filename**, **Architecture**, **ProductName**, **FileDescription**, **ProductVersion**, and **FileVersion**. The Filename child element is mandatory and the others are optional. A fully populated element contains tags similar to this example: Processes contains at least one `<Process>` element, which in turn contains the following child elements: **Filename**, **Architecture**, **ProductName**, **FileDescription**, **ProductVersion**, and **FileVersion**. The Filename child element is mandatory and the others are optional. A fully populated element contains tags similar to this example:
``` syntax ```xml
<Process> <Process>
<Filename>MyApplication.exe</Filename> <Filename>MyApplication.exe</Filename>
<Architecture>Win64</Architecture> <Architecture>Win64</Architecture>
@ -1291,7 +1290,7 @@ UE-V does not support ARM processors in this version.
ProductName is an optional element used to identify a product for administrative purposes or reporting. ProductName differs from Filename in that there are no regular expression restrictions on its value. This allows for more easily understood descriptions of a process where the executable name may not be obvious. For example: ProductName is an optional element used to identify a product for administrative purposes or reporting. ProductName differs from Filename in that there are no regular expression restrictions on its value. This allows for more easily understood descriptions of a process where the executable name may not be obvious. For example:
``` syntax ```xml
<Process> <Process>
<Filename>MyApplication.exe</Filename> <Filename>MyApplication.exe</Filename>
<ProductName>My Application 6.x by Contoso.com</ProductName> <ProductName>My Application 6.x by Contoso.com</ProductName>
@ -1311,9 +1310,8 @@ FileDescription is an optional tag that allows for an administrative description
For example, in a suited application, it might be useful to provide reminders about the function of two executables (MyApplication.exe and MyApplicationHelper.exe), as shown here: For example, in a suited application, it might be useful to provide reminders about the function of two executables (MyApplication.exe and MyApplicationHelper.exe), as shown here:
``` syntax ```xml
<Processes> <Processes>
<Process> <Process>
<Filename>MyApplication.exe</Filename> <Filename>MyApplication.exe</Filename>
<FileDescription>My Application Main Engine</ FileDescription> <FileDescription>My Application Main Engine</ FileDescription>
@ -1345,7 +1343,7 @@ The product and file version elements may be left unspecified. Doing so makes th
Product version: 1.0 specified in the UE-V Generator produces the following XML: Product version: 1.0 specified in the UE-V Generator produces the following XML:
``` syntax ```xml
<ProductVersion> <ProductVersion>
<Major Minimum="1" Maximum="1" /> <Major Minimum="1" Maximum="1" />
<Minor Minimum="0" Maximum="0" /> <Minor Minimum="0" Maximum="0" />
@ -1356,7 +1354,7 @@ Product version: 1.0 specified in the UE-V Generator produces the following XML:
File version: 5.0.2.1000 specified in the UE-V Generator produces the following XML: File version: 5.0.2.1000 specified in the UE-V Generator produces the following XML:
``` syntax ```xml
<FileVersion> <FileVersion>
<Major Minimum="5" Maximum="5" /> <Major Minimum="5" Maximum="5" />
<Minor Minimum="0" Maximum="0" /> <Minor Minimum="0" Maximum="0" />
@ -1369,7 +1367,7 @@ File version: 5.0.2.1000 specified in the UE-V Generator produces the following
Only the Minimum attribute is present. Maximum must be included in a range as well. Only the Minimum attribute is present. Maximum must be included in a range as well.
``` syntax ```xml
<ProductVersion> <ProductVersion>
<Major Minimum="2" /> <Major Minimum="2" />
</ProductVersion> </ProductVersion>
@ -1379,7 +1377,7 @@ Only the Minimum attribute is present. Maximum must be included in a range as we
Only the Minor element is present. Major must be included as well. Only the Minor element is present. Major must be included as well.
``` syntax ```xml
<ProductVersion> <ProductVersion>
<Minor Minimum="0" Maximum="0" /> <Minor Minimum="0" Maximum="0" />
</ProductVersion> </ProductVersion>
@ -1399,7 +1397,7 @@ Including a FileVersion element for an application allows for more granular fine
The child elements and syntax rules for FileVersion are identical to those of ProductVersion. The child elements and syntax rules for FileVersion are identical to those of ProductVersion.
``` syntax ```xml
<Process> <Process>
<Filename>MSACCESS.EXE</Filename> <Filename>MSACCESS.EXE</Filename>
<Architecture>Win32</Architecture> <Architecture>Win32</Architecture>

24
smb/cloud-mode-business-setup.md
View File

@ -40,7 +40,7 @@ Go to the <a href="https://business.microsoft.com" target="_blank">Microsoft Bus
Here's a few things to keep in mind before you get started: Here's a few things to keep in mind before you get started:
- You'll need a registered domain to successfully go through the walkthrough. - You'll need a registered domain to successfully go through the walkthrough.
- If you already own a domain, you can add this during the Office 365 setup. - If you already own a domain, you can add this during the Office 365 setup.
- If you don't already own a domain, you'll have the option to purchase a domain from the Office 365 admin center. We'll show how to do this as part of the walkthrough. - If you don't already own a domain, you'll have the option to purchase a domain from the Microsoft 365 admin center. We'll show how to do this as part of the walkthrough.
- You'll need an email address to create your Office 365 tenant. - You'll need an email address to create your Office 365 tenant.
- We recommend that you use Internet Explorer for the entire walkthrough. Right click on Internet Explorer and then choose **Start InPrivate Browsing**. - We recommend that you use Internet Explorer for the entire walkthrough. Right click on Internet Explorer and then choose **Start InPrivate Browsing**.
@ -79,22 +79,22 @@ If this is the first time you're setting this up, and you'd like to see how it's
![Office 365 portal](images/office365_portal.png) ![Office 365 portal](images/office365_portal.png)
6. Select the **Admin** tile to go to the Office 365 admin center. 6. Select the **Admin** tile to go to the admin center.
7. In the admin center, click **Next** to see the highlights and welcome info for the admin center. When you're done, click **Go to setup** to complete the Office 365 setup. 7. In the admin center, click **Next** to see the highlights and welcome info for the admin center. When you're done, click **Go to setup** to complete the Office 365 setup.
This may take up to a half hour to complete. This may take up to a half hour to complete.
**Figure 3** - Office 365 admin center **Figure 3** - Admin center
![Office 365 admin center](images/office365_admin_portal.png) ![Microsoft 365 admin center](images/office365_admin_portal.png)
8. Go back to the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">Office 365 admin center</a> to add or buy a domain. 8. Go back to the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">admin center</a> to add or buy a domain.
1. Select the **Domains** option. 1. Select the **Domains** option.
**Figure 4** - Option to add or buy a domain **Figure 4** - Option to add or buy a domain
![Add or buy a domain in Office 365 admin center](images/office365_buy_domain.png) ![Add or buy a domain in admin center](images/office365_buy_domain.png)
2. In the **Home > Domains** page, you will see the Microsoft-provided domain, such as *fabrikamdesign.onmicrosoft.com*. 2. In the **Home > Domains** page, you will see the Microsoft-provided domain, such as *fabrikamdesign.onmicrosoft.com*.
@ -110,16 +110,16 @@ If this is the first time you're setting this up, and you'd like to see how it's
**Figure 6** - Domains **Figure 6** - Domains
![Verify your domains in Office 365 admin center](images/office365_additional_domain.png) ![Verify your domains in the admin center](images/office365_additional_domain.png)
### 1.2 Add users and assign product licenses ### 1.2 Add users and assign product licenses
Once you've set up Office and added your domain, it's time to add users so they have access to Office 365. People in your organization need an account before they can sign in and access Office 365. The easiest way to add users is to add them one at a time in the Office 365 admin center. Once you've set up Office and added your domain, it's time to add users so they have access to Office 365. People in your organization need an account before they can sign in and access Office 365. The easiest way to add users is to add them one at a time in the Microsoft 365 admin center.
When adding users, you can also assign admin privileges to certain users in your team. You'll also want to assign **Product licenses** to each user so that subscriptions can be assigned to the person. When adding users, you can also assign admin privileges to certain users in your team. You'll also want to assign **Product licenses** to each user so that subscriptions can be assigned to the person.
**To add users and assign product licenses** **To add users and assign product licenses**
1. In the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">Office 365 admin center</a>, select **Users > Active users**. 1. In the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">admin center</a>, select **Users > Active users**.
**Figure 7** - Add users **Figure 7** - Add users
@ -128,7 +128,7 @@ When adding users, you can also assign admin privileges to certain users in your
2. In the **Home > Active users** page, add users individually or in bulk. 2. In the **Home > Active users** page, add users individually or in bulk.
- To add users one at a time, select **+ Add a user**. - To add users one at a time, select **+ Add a user**.
If you select this option, you'll see the **New user** screen and you can add details about the new user including their name, user name, role, and so on. You also have the opportunity to assign **Product licenses**. For detailed step-by-step info on adding a user account, see *Add a user account in the Office 365 admin center* in <a href="https://support.office.com/en-us/article/Add-users-individually-or-in-bulk-to-Office-365-Admin-Help-1970f7d6-03b5-442f-b385-5880b9c256ec" target="_blank">Add users individually or in bulk to Office 365 - Admin Help</a>. If you select this option, you'll see the **New user** screen and you can add details about the new user including their name, user name, role, and so on. You also have the opportunity to assign **Product licenses**. For detailed step-by-step info on adding a user account, see *Add a user account in the admin center* in <a href="https://support.office.com/en-us/article/Add-users-individually-or-in-bulk-to-Office-365-Admin-Help-1970f7d6-03b5-442f-b385-5880b9c256ec" target="_blank">Add users individually or in bulk to Office 365 - Admin Help</a>.
**Figure 8** - Add an individual user **Figure 8** - Add an individual user
@ -153,7 +153,7 @@ Microsoft Intune provides mobile device management, app management, and PC manag
**To add Microsoft Intune to your tenant** **To add Microsoft Intune to your tenant**
1. In the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">Office 365 admin center</a>, select **Billing > Purchase services**. 1. In the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">admin center</a>, select **Billing > Purchase services**.
2. In the **Home > Purchase services** screen, search for **Microsoft Intune**. Hover over **Microsoft Intune** to see the options to start a free 30-day trial or to buy now. 2. In the **Home > Purchase services** screen, search for **Microsoft Intune**. Hover over **Microsoft Intune** to see the options to start a free 30-day trial or to buy now.
3. Confirm your order to enable access to Microsoft Intune. 3. Confirm your order to enable access to Microsoft Intune.
4. In the admin center, the Intune licenses will show as available and ready to be assigned to users. Select **Users > Active users** and then edit the product licenses assigned to the users to turn on **Intune A Direct**. 4. In the admin center, the Intune licenses will show as available and ready to be assigned to users. Select **Users > Active users** and then edit the product licenses assigned to the users to turn on **Intune A Direct**.
@ -176,7 +176,7 @@ Microsoft Azure is an open and flexible cloud platform that enables you to quick
**To add Azure AD to your domain** **To add Azure AD to your domain**
1. In the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">Office 365 admin center</a>, select **Admin centers > Azure AD**. 1. In the <a href="https://portal.office.com/adminportal/home#/homepage" target="_blank">admin center</a>, select **Admin centers > Azure AD**.
> [!NOTE] > [!NOTE]
> You will need Azure AD Premium to configure automatic MDM enrollment with Intune. > You will need Azure AD Premium to configure automatic MDM enrollment with Intune.

6
store-for-business/distribute-apps-from-your-private-store.md
View File

@ -43,13 +43,11 @@ Microsoft Store adds the app to **Products and services**. Click **Manage**, **A
<!--- ![Image showing Manage menu in Microsoft Store for Business.](images/wsfb-manageinventory.png) --> <!--- ![Image showing Manage menu in Microsoft Store for Business.](images/wsfb-manageinventory.png) -->
3. Use **Refine results** to search for online-licensed apps under **License type**. 3. Click on the application to open the application settings, then select **Private store availability**.
4. From the list of online-licensed apps, click the ellipses for the app you want, and then choose **Add to private store**. 4. Select **Everyone** to make application available for all people in your organization.
<!--- ![Image showing options from Action for each app in Inventory.](images/wsfb-inventoryaddprivatestore.png) --> <!--- ![Image showing options from Action for each app in Inventory.](images/wsfb-inventoryaddprivatestore.png) -->
The value under **Private store** for the app will change to pending. It will take approximately thirty-six hours before the app is available in the private store.
>[!Note] >[!Note]
> If you are working with a new Line-of-Business (LOB) app, you have to wait for the app to be available in **Products & services** before adding it to your private store. For more information, see [Working with line-of-business apps](working-with-line-of-business-apps.md). > If you are working with a new Line-of-Business (LOB) app, you have to wait for the app to be available in **Products & services** before adding it to your private store. For more information, see [Working with line-of-business apps](working-with-line-of-business-apps.md).

4
store-for-business/distribute-offline-apps.md
View File

@ -66,8 +66,8 @@ There are several items to download or create for offline-licensed apps. The app
1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com). 1. Sign in to the [Microsoft Store for Business](https://businessstore.microsoft.com/) or [Microsoft Store for Education](https://educationstore.microsoft.com).
2. Click **Manage**. 2. Click **Manage**.
3. Under **Shopping Experience**, set **Show offline apps** to **On**. 3. Click **Settings**.
4. Click **Shop for my group**. Search for the required inbox-app, select it, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory. 4. Click **Shop**. Search for the **Shopping experience** section, change the License type to **Offline**, and click **Get the app**, which will add the app to your inventory.
5. Click **Manage**. You now have access to download the appx bundle package metadata and license file. 5. Click **Manage**. You now have access to download the appx bundle package metadata and license file.
6. Go to **Products & services**, and select **Apps & software**. (The list may be empty, but it will auto-populate after some time.) 6. Go to **Products & services**, and select **Apps & software**. (The list may be empty, but it will auto-populate after some time.)

2
store-for-business/microsoft-store-for-business-overview.md
View File

@ -60,7 +60,7 @@ Microsoft Azure Active Directory (AD) accounts for your employees:
- Employees need Azure AD account when they access Store for Business content from Windows devices. - Employees need Azure AD account when they access Store for Business content from Windows devices.
- If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account - If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account
- For offline-licensed apps, Azure AD accounts are not required for employees. - For offline-licensed apps, Azure AD accounts are not required for employees.
- Admins can add or remove user accounts in the Office 365 admin center, even if you don’t have an Office 365 subscription. You can access the Office 365 admin portal directly from the Store for Business and Education. - Admins can add or remove user accounts in the Microsoft 365 admin center, even if you don’t have an Office 365 subscription. You can access the Office 365 admin portal directly from the Store for Business and Education.
For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611). For more information on Azure AD, see [About Office 365 and Azure Active Directory](https://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](https://go.microsoft.com/fwlink/p/?LinkId=708611).

5
windows/application-management/app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell.md
View File

@ -42,7 +42,7 @@ Before attempting this procedure, you should read and understand the information
2. To open a Windows PowerShell console, click **Start** and type **PowerShell**. Right-click **Windows PowerShell** and select **Run as Administrator**. 2. To open a Windows PowerShell console, click **Start** and type **PowerShell**. Right-click **Windows PowerShell** and select **Run as Administrator**.
``` syntax ```powershell
<# <#
.SYNOPSIS .SYNOPSIS
This Windows PowerShell script will take an array of account names and try to convert each of them to the corresponding SID in standard and hexadecimal formats. This Windows PowerShell script will take an array of account names and try to convert each of them to the corresponding SID in standard and hexadecimal formats.
@ -59,9 +59,6 @@ Before attempting this procedure, you should read and understand the information
.\ConvertToSID.ps1 $accountsArray | Write-Output -FilePath .\SIDs.txt -Width 200 .\ConvertToSID.ps1 $accountsArray | Write-Output -FilePath .\SIDs.txt -Width 200
#> #>
[]()
[]()
function ConvertSIDToHexFormat function ConvertSIDToHexFormat
{ {
   param([System.Security.Principal.SecurityIdentifier]$sidToConvert)    param([System.Security.Principal.SecurityIdentifier]$sidToConvert)

2
windows/client-management/mdm/TOC.md
View File

@ -55,6 +55,8 @@
### [AllJoynManagement CSP](alljoynmanagement-csp.md) ### [AllJoynManagement CSP](alljoynmanagement-csp.md)
#### [AllJoynManagement DDF](alljoynmanagement-ddf.md) #### [AllJoynManagement DDF](alljoynmanagement-ddf.md)
### [APPLICATION CSP](application-csp.md) ### [APPLICATION CSP](application-csp.md)
### [ApplicationControl CSP](applicationcontrol-csp.md)
#### [ApplicationControl DDF file](applicationcontrol-csp-ddf.md)
### [AppLocker CSP](applocker-csp.md) ### [AppLocker CSP](applocker-csp.md)
#### [AppLocker DDF file](applocker-ddf-file.md) #### [AppLocker DDF file](applocker-ddf-file.md)
#### [AppLocker XSD](applocker-xsd.md) #### [AppLocker XSD](applocker-xsd.md)

4
windows/client-management/mdm/activesync-csp.md
View File

@ -60,13 +60,13 @@ When managing over OMA DM, make sure to always use a unique GUID. Provisioning w
Braces { } are required around the GUID. In OMA Client Provisioning, you can type the braces. For example: Braces { } are required around the GUID. In OMA Client Provisioning, you can type the braces. For example:
``` syntax ```xml
<characteristic type="{C556E16F-56C4-4EDB-9C64-D9469EE1FBE0}"/> <characteristic type="{C556E16F-56C4-4EDB-9C64-D9469EE1FBE0}"/>
``` ```
For OMA DM, you must use the ASCII values of %7B and %7D for the opening and closing braces, respectively. For example, if the GUID is "C556E16F-56C4-4EDB-9C64-D9469EE1FBE0", type: For OMA DM, you must use the ASCII values of %7B and %7D for the opening and closing braces, respectively. For example, if the GUID is "C556E16F-56C4-4EDB-9C64-D9469EE1FBE0", type:
``` syntax ```xml
<Target> <Target>
<LocURI> <LocURI>
./Vendor/MSFT/ActiveSync/Accounts/%7BC556E16F-56C4-4EDB-9C64-D9469EE1FBE0%7D ./Vendor/MSFT/ActiveSync/Accounts/%7BC556E16F-56C4-4EDB-9C64-D9469EE1FBE0%7D

274
windows/client-management/mdm/applicationcontrol-csp-ddf.md Normal file
View File

@ -0,0 +1,274 @@
---
title: ApplicationControl CSP
description: ApplicationControl CSP
ms.author: dansimp@microsoft.com
ms.topic: article
ms.prod: w10
ms.technology: windows
author: ManikaDhiman
ms.date: 07/10/2019
---
# ApplicationControl CSP DDF
This topic shows the OMA DM device description framework (DDF) for the **ApplicationControl** configuration service provider. DDF files are used only with OMA DM provisioning XML.
Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download).
### ApplicationControl CSP
```xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE MgmtTree PUBLIC " -//OMA//DTD-DM-DDF 1.2//EN"
"http://www.openmobilealliance.org/tech/DTD/DM_DDF-V1_2.dtd"
[<?oma-dm-ddf-ver supported-versions="1.2"?>]>
<MgmtTree xmlns:MSFT="http://schemas.microsoft.com/MobileDevice/DM">
<VerDTD>1.2</VerDTD>
<Node>
<NodeName>ApplicationControl</NodeName>
<Path>./Vendor/MSFT</Path>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Root Node of the ApplicationControl CSP</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Permanent />
</Scope>
<DFType>
<DDFName></DDFName>
</DFType>
</DFProperties>
<Node>
<NodeName>Policies</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Beginning of a Subtree that contains all policies.</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Permanent />
</Scope>
<DFTitle>Policies</DFTitle>
<DFType>
<DDFName></DDFName>
</DFType>
</DFProperties>
<Node>
<NodeName></NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>The GUID of the Policy</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<ZeroOrMore />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>Policy GUID</DFTitle>
<DFType>
<DDFName></DDFName>
</DFType>
</DFProperties>
<Node>
<NodeName>Policy</NodeName>
<DFProperties>
<AccessType>
<Get />
<Add />
<Delete />
<Replace />
</AccessType>
<Description>The policy binary encoded as base64</Description>
<DFFormat>
<b64 />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>Policy</DFTitle>
<DFType>
<DDFName></DDFName>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>PolicyInfo</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Information Describing the Policy indicated by the GUID</Description>
<DFFormat>
<node />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>PolicyInfo</DFTitle>
<DFType>
<DDFName></DDFName>
</DFType>
</DFProperties>
<Node>
<NodeName>Version</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Version of the Policy indicated by the GUID, as a string. When parsing use a uint64 as the containing data type</Description>
<DFFormat>
<chr />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>Version</DFTitle>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>IsEffective</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Whether the Policy indicated by the GUID is Effective on the system (loaded by the enforcement engine and in effect)</Description>
<DFFormat>
<bool />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>IsEffective</DFTitle>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>IsDeployed</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Whether the Policy indicated by the GUID is deployed on the system (on the physical machine)</Description>
<DFFormat>
<bool />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>IsDeployed</DFTitle>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>IsAuthorized</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>Whether the Policy indicated by the GUID is authorized to be loaded by the enforcement engine on the system </Description>
<DFFormat>
<bool />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>IsAuthorized</DFTitle>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>Status</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>The Current Status of the Policy Indicated by the Policy GUID</Description>
<DFFormat>
<int />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>Status</DFTitle>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
<Node>
<NodeName>FriendlyName</NodeName>
<DFProperties>
<AccessType>
<Get />
</AccessType>
<Description>The FriendlyName of the Policy Indicated by the Policy GUID</Description>
<DFFormat>
<chr />
</DFFormat>
<Occurrence>
<One />
</Occurrence>
<Scope>
<Dynamic />
</Scope>
<DFTitle>FriendlyName</DFTitle>
<DFType>
<MIME>text/plain</MIME>
</DFType>
</DFProperties>
</Node>
</Node>
</Node>
</Node>
</Node>
</MgmtTree>
```

236
windows/client-management/mdm/applicationcontrol-csp.md Normal file
View File

@ -0,0 +1,236 @@
---
title: ApplicationControl CSP
description: ApplicationControl CSP
ms.author: dansimp@microsoft.com
ms.topic: article
ms.prod: w10
ms.technology: windows
author: ManikaDhiman
ms.date: 05/21/2019
---
# ApplicationControl CSP
Windows Defender Application Control (WDAC) policies can be managed from an MDM server through ApplicationControl configuration service provider (CSP). This CSP provides expanded diagnostic capabilities and support for [multiple policies](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies) (introduced in Windows 10, version 1903). It also provides support for rebootless policy deployment (introduced in Windows 10, version 1709). Unlike [AppLocker CSP](applocker-csp.md), ApplicationControl CSP correctly detects the presence of no-reboot option and consequently does not schedule a reboot.
Existing WDAC policies deployed using AppLocker CSP’s CodeIntegrity node can now be deployed using ApplicationControl CSP URI. Although WDAC policy deployment via AppLocker CSP will continue to be supported, all new feature work will be done in ApplicationControl CSP only.
ApplicationControl CSP was added in Windows 10, version 1903.
The following diagram shows ApplicationControl CSP in tree format.
![tree diagram for applicationcontrol csp](images/provisioning-csp-applicationcontrol.png)
<a href="" id="vendor-msft-applicationcontrol"></a>**./Vendor/MSFT/ApplicationControl**
Defines the root node for ApplicationControl CSP.
Scope is permanent. Supported operation is Get.
<a href="" id="applicationcontrol-policies"></a>**ApplicationControl/Policies**
An interior node that contains all the policies, each identified by their globally unique identifier (GUID).
Scope is permanent. Supported operation is Get.
<a href="" id="applicationcontrol-policies-policyguid"></a>**ApplicationControl/Policies/_Policy GUID_**
ApplicationControl CSP enforces that the “ID” segment of a given policy URI is the same GUID as the policy ID in the policy blob. Each *Policy GUID* node contains a Policy node and a corresponding PolicyInfo node.
Scope is dynamic. Supported operation is Get.
<a href="" id="applicationcontrol-policies-policyguid-policy"></a>**ApplicationControl/Policies/_Policy GUID_/Policy**
This node is the policy binary itself, which is encoded as base64.
Scope is dynamic. Supported operations are Get, Add, Delete, and Replace.
Value type is b64. Supported value is any well-formed WDAC policy, i.e. the base64-encoded content output by the ConvertFrom-CIPolicy cmdlet.
Default value is empty.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo**
An interior node that contains the nodes that describe the policy indicated by the GUID.
Scope is dynamic. Supported operation is Get.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo-version"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo/Version**
This node provides the version of the policy indicated by the GUID. Stored as a string, but when parsing use a uint64 as the containing data type.
Scope is dynamic. Supported operation is Get.
Value type is char.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo-iseffective"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo/IsEffective**
This node specifies whether a policy is actually loaded by the enforcement engine and is in effect on a system.
Scope is dynamic. Supported operation is Get.
Value type is bool. Supported values are as follows:
- True — Indicates that the policy is actually loaded by the enforcement engine and is in effect on a system.
- False — Indicates that the policy is not loaded by the enforcement engine and is not in effect on a system. This is the default.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo-isdeployed"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo/IsDeployed**
This node specifies whether a policy is deployed on the system and is present on the physical machine.
Scope is dynamic. Supported operation is Get.
Value type is bool. Supported values are as follows:
- True — Indicates that the policy is deployed on the system and is present on the physical machine.
- False — Indicates that the policy is not deployed on the system and is not present on the physical machine. This is the default.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo-isauthorized"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo/IsAuthorized**
This node specifies whether the policy is authorized to be loaded by the enforcement engine on the system. If not authorized, a policy cannot take effect on the system.
Scope is dynamic. Supported operation is Get.
Value type is bool. Supported values are as follows:
- True — Indicates that the policy is authorized to be loaded by the enforcement engine on the system.
- False — Indicates that the policy is not authorized to be loaded by the enforcement engine on the system. This is the default.
The following table provides the result of this policy based on different values of IsAuthorized, IsDeployed, and IsEffective nodes:
|IsAuthorized | IsDeployed | IsEffective | Resultant |
|------------ | ---------- | ----------- | --------- |
|True|True|True|Policy is currently running and in effect.|
|True|True|False|Policy requires a reboot to take effect.|
|True|False|True|Policy requires a reboot to unload from CI.|
|False|True|True|Not Reachable.|
|True|False|False|*Not Reachable.|
|False|True|False|*Not Reachable.|
|False|False|True|Not Reachable.|
|False|False|False|*Not Reachable.|
`*` denotes a valid intermediary state; however, if an MDM transaction results in this state configuration, the END_COMMAND_PROCESSING will result in a fail.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo-status"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo/Status**
This node specifies whether the deployment of the policy indicated by the GUID was successful.
Scope is dynamic. Supported operation is Get.
Value type is integer. Default value is 0 == OK.
<a href="" id="applicationcontrol-policies-policyguid-policyinfo-friendlyname"></a>**ApplicationControl/Policies/_Policy GUID_/PolicyInfo/FriendlyName**
This node provides the friendly name of the policy indicated by the policy GUID.
Scope is dynamic. Supported operation is Get.
Value type is char.
## Usage guidance
To use ApplicationControl CSP, you must:
- Know a generated policy’s GUID, which can be found in the policy xml as `<PolicyTypeID>`.
- Convert the policies to binary format using the ConvertFrom-CIPolicy cmdlet in order to be deployed. The binary policy may be signed or unsigned.
- Create a policy node (a Base64-encoded blob of the binary policy representation) using the [certutil -encode](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc732443(v=ws.11)#BKMK_encode) command line tool.
Here is a sample certutil invocation:
```
certutil -encode WinSiPolicy.p7b WinSiPolicy.cer
```
An alternative to using certutil would be to use the following PowerShell invocation:
```
[Convert]::ToBase64String($(Get-Content -Encoding Byte -ReadCount 0 -Path <bin file>))
```
If you are using hybrid MDM management with System Center Configuration Manager or using Intune, ensure that you are using Base64 as the Data type when using Custom OMA-URI
functionality to apply the Code Integrity policy.
### Deploy policies
To deploy a new base policy using the CSP, perform an ADD on **./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy** using the Base64-encoded policy node as {Data}. Refer to the the Format section in the Example 1 below.
To deploy base policy and supplemental policies:
- Perform an ADD on **./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy** using the Base64-encoded policy node as {Data} with the GUID and policy data for the base policy.
- Repeat for each base or supplemental policy (with its own GUID and data).
The following example shows the deployment of two base policies and a supplemental policy (which already specifies the base policy it supplements and does not need that reflected in the ADD).
**Example 1: Add first base policy**
```xml
<Add>
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/ApplicationControl/Policies/{Base1GUID}/Policy</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">b64</Format>
</Meta>
<Data> {Base1Data} </Data>
</Item>
</Add>
```
**Example 2: Add second base policy**
```xml
<Add>
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/ApplicationControl/Policies/{Base2GUID}/Policy</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">b64</Format>
</Meta>
<Data> {Base2Data} </Data>
</Item>
</Add>
```
**Example 3: Add supplemental policy**
```xml
<Add>
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/ApplicationControl/Policies/{Supplemental1GUID}/Policy</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">b64</Format>
</Meta>
<Data> {Supplemental1Data} </Data>
</Item>
</Add>
```
### Get policies
Perform a GET using a deployed policy’s GUID to interrogate/inspect the policy itself or information about it.
The following table displays the result of Get operation on different nodes:
|Nodes | Get Results|
|------------- | ------|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy|raw p7b|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/PolicyInfo/Version|Policy version|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/PolicyInfo/IsEffective|Is the policy in effect|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/PolicyInfo/IsDeployed|Is the policy on the system|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/PolicyInfo/IsAuthorized|Is the policy authorized on the system|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/PolicyInfo/Status|Was the deployment successful|
|./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/PolicyInfo/FriendlyName|Friendly name per the policy|
The following is an example of Get command:
```xml
<Get>
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/ApplicationControl/Policies/{PolicyGUID}/Policy</LocURI>
</Target>
</Item>
</Get>
```
### Delete policies
To delete an unsigned policy, perform a DELETE on **./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy**.
> [!Note]
> Only signed things should be able to update signed policies. Hence, performing a DELETE on **./Vendor/MSFT/ApplicationControl/Policies/_Policy GUID_/Policy** is not sufficient to delete a signed policy.
To delete a signed policy:
1. Replace it with a signed update allowing unsigned policy.
2. Deploy another update with unsigned policy.
3. Perform delete.
The following is an example of Delete command:
```xml
<Delete>
<CmdID>1</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/ApplicationControl/Policies/{PolicyGUID}/Policy</LocURI>
</Target>
</Item>
</Delete>
```

132
windows/client-management/mdm/assignedaccess-csp.md
View File

@ -14,6 +14,7 @@ ms.date: 09/18/2018
# AssignedAccess CSP # AssignedAccess CSP
**Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.**
The AssignedAccess configuration service provider (CSP) is used to set the device to run in kiosk mode. Once the CSP has been executed, then the next user login that is associated with the kiosk mode puts the device into the kiosk mode running the application specified in the CSP configuration. The AssignedAccess configuration service provider (CSP) is used to set the device to run in kiosk mode. Once the CSP has been executed, then the next user login that is associated with the kiosk mode puts the device into the kiosk mode running the application specified in the CSP configuration.
@ -134,7 +135,7 @@ Additionally, the Status payload includes the following fields:
Supported operation is Get. Supported operation is Get.
<a href="" id="assignedaccess-shelllauncher"></a>**./Device/Vendor/MSFT/AssignedAccess/ShellLauncher** <a href="" id="assignedaccess-shelllauncher"></a>**./Device/Vendor/MSFT/AssignedAccess/ShellLauncher**
Added in Windows 10,version 1803. This node accepts a ShellLauncherConfiguration xml as input. Click [link](#shelllauncherconfiguration-xsd) to see the schema. Shell Launcher V2 is introduced in Windows 10, version 1903 to support both UWP and Win32 apps as the custom shell. For more information, see [Shell Launcher](https://docs.microsoft.com/en-us/windows/configuration/kiosk-shelllauncher). Added in Windows 10,version 1803. This node accepts a ShellLauncherConfiguration xml as input. Click [link](#shelllauncherconfiguration-xsd) to see the schema. Shell Launcher V2 is introduced in Windows 10, version 1903 to support both UWP and Win32 apps as the custom shell. For more information, see [Shell Launcher](https://docs.microsoft.com/windows/configuration/kiosk-shelllauncher).
> [!Note] > [!Note]
> You cannot set both ShellLauncher and KioskModeApp at the same time on the device. > You cannot set both ShellLauncher and KioskModeApp at the same time on the device.
@ -246,6 +247,8 @@ KioskModeApp Replace
## AssignedAccessConfiguration XSD ## AssignedAccessConfiguration XSD
Below schema is for AssignedAccess Configuration up to Windows 10 1803 release.
```xml ```xml
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<xs:schema <xs:schema
@ -253,9 +256,14 @@ KioskModeApp Replace
xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config" xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
xmlns:default="http://schemas.microsoft.com/AssignedAccess/2017/config" xmlns:default="http://schemas.microsoft.com/AssignedAccess/2017/config"
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
targetNamespace="http://schemas.microsoft.com/AssignedAccess/2017/config" targetNamespace="http://schemas.microsoft.com/AssignedAccess/2017/config"
> >
<xs:import namespace="http://schemas.microsoft.com/AssignedAccess/201810/config"/>
<xs:import namespace="http://schemas.microsoft.com/AssignedAccess/2020/config"/>
<xs:complexType name="profile_list_t"> <xs:complexType name="profile_list_t">
<xs:sequence minOccurs="1" > <xs:sequence minOccurs="1" >
<xs:element name="Profile" type="profile_t" minOccurs="1" maxOccurs="unbounded"/> <xs:element name="Profile" type="profile_t" minOccurs="1" maxOccurs="unbounded"/>
@ -270,6 +278,7 @@ KioskModeApp Replace
<xs:choice> <xs:choice>
<xs:sequence minOccurs="1" maxOccurs="1"> <xs:sequence minOccurs="1" maxOccurs="1">
<xs:element name="AllAppsList" type="allappslist_t" minOccurs="1" maxOccurs="1"/> <xs:element name="AllAppsList" type="allappslist_t" minOccurs="1" maxOccurs="1"/>
<xs:element ref="rs5:FileExplorerNamespaceRestrictions" minOccurs="0" maxOccurs="1"/>
<xs:element name="StartLayout" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="StartLayout" type="xs:string" minOccurs="1" maxOccurs="1"/>
<xs:element name="Taskbar" type="taskbar_t" minOccurs="1" maxOccurs="1"/> <xs:element name="Taskbar" type="taskbar_t" minOccurs="1" maxOccurs="1"/>
</xs:sequence> </xs:sequence>
@ -286,6 +295,10 @@ KioskModeApp Replace
<xs:selector xpath="default:App"/> <xs:selector xpath="default:App"/>
<xs:field xpath="@AppUserModelId|@DesktopAppPath"/> <xs:field xpath="@AppUserModelId|@DesktopAppPath"/>
</xs:unique> </xs:unique>
<xs:unique name="OnlyOneAppCanHaveAutoLaunch">
<xs:selector xpath="default:App"/>
<xs:field xpath="@rs5:AutoLaunch"/>
</xs:unique>
</xs:element> </xs:element>
</xs:sequence> </xs:sequence>
</xs:complexType> </xs:complexType>
@ -304,8 +317,14 @@ KioskModeApp Replace
<xs:complexType name="app_t"> <xs:complexType name="app_t">
<xs:attribute name="AppUserModelId" type="xs:string"/> <xs:attribute name="AppUserModelId" type="xs:string"/>
<xs:attribute name="DesktopAppPath" type="xs:string"/> <xs:attribute name="DesktopAppPath" type="xs:string"/>
<xs:attributeGroup ref="autoLaunch_attributeGroup"/>
</xs:complexType> </xs:complexType>
<xs:attributeGroup name="autoLaunch_attributeGroup">
<xs:attribute ref="rs5:AutoLaunch"/>
<xs:attribute ref="rs5:AutoLaunchArguments" use="optional"/>
</xs:attributeGroup>
<xs:complexType name="taskbar_t"> <xs:complexType name="taskbar_t">
<xs:attribute name="ShowTaskbar" type="xs:boolean" use="required"/> <xs:attribute name="ShowTaskbar" type="xs:boolean" use="required"/>
</xs:complexType> </xs:complexType>
@ -322,7 +341,8 @@ KioskModeApp Replace
<xs:complexType name="config_list_t"> <xs:complexType name="config_list_t">
<xs:sequence minOccurs="1" > <xs:sequence minOccurs="1" >
<xs:element name="Config" type="config_t" minOccurs="1" maxOccurs="unbounded"/> <xs:element ref="v3:GlobalProfile" minOccurs="0" maxOccurs="1"/>
<xs:element name="Config" type="config_t" minOccurs="0" maxOccurs="unbounded"/>
</xs:sequence> </xs:sequence>
</xs:complexType> </xs:complexType>
@ -340,6 +360,7 @@ KioskModeApp Replace
<xs:complexType name="autologon_account_t"> <xs:complexType name="autologon_account_t">
<xs:attribute name="HiddenId" type="guid_t" fixed="{74331115-F68A-4DF9-8D2C-52BA2CE2ADB1}"/> <xs:attribute name="HiddenId" type="guid_t" fixed="{74331115-F68A-4DF9-8D2C-52BA2CE2ADB1}"/>
<xs:attribute ref="rs5:DisplayName" use="optional" />
</xs:complexType> </xs:complexType>
<xs:complexType name="group_t"> <xs:complexType name="group_t">
@ -365,6 +386,22 @@ KioskModeApp Replace
</xs:restriction> </xs:restriction>
</xs:simpleType> </xs:simpleType>
<xs:complexType name="fileExplorerNamespaceRestrictions_t">
<xs:sequence minOccurs="1">
<xs:element name="AllowedNamespace" type="allowedFileExplorerNamespace_t"/>
</xs:sequence>
</xs:complexType>
<xs:complexType name="allowedFileExplorerNamespace_t">
<xs:attribute name="Name" type="allowedFileExplorerNamespaceValues_t"/>
</xs:complexType>
<xs:simpleType name="allowedFileExplorerNamespaceValues_t">
<xs:restriction base="xs:string">
<xs:enumeration value="Downloads"/>
</xs:restriction>
</xs:simpleType>
<!--below is the definition of the config xml content--> <!--below is the definition of the config xml content-->
<xs:element name="AssignedAccessConfiguration"> <xs:element name="AssignedAccessConfiguration">
<xs:complexType> <xs:complexType>
@ -385,7 +422,94 @@ KioskModeApp Replace
</xs:complexType> </xs:complexType>
</xs:element> </xs:element>
</xs:schema> </xs:schema>
```
Here is the schema for new features introduced in Windows 10 1809 release
```xml
<?xml version="1.0" encoding="utf-8"?>
<xs:schema
elementFormDefault="qualified"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns="http://schemas.microsoft.com/AssignedAccess/201810/config"
xmlns:default="http://schemas.microsoft.com/AssignedAccess/201810/config"
xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
targetNamespace="http://schemas.microsoft.com/AssignedAccess/201810/config"
>
<xs:import namespace="http://schemas.microsoft.com/AssignedAccess/2020/config"/>
<xs:complexType name="fileExplorerNamespaceRestrictions_t">
<xs:choice>
<xs:sequence minOccurs="0">
<xs:element name="AllowedNamespace" type="allowedFileExplorerNamespace_t" minOccurs="0"/>
<xs:element ref="v3:AllowRemovableDrives" minOccurs="0" maxOccurs="1"/>
</xs:sequence>
<xs:element ref="v3:NoRestriction" minOccurs="0" maxOccurs="1" />
</xs:choice>
</xs:complexType>
<xs:complexType name="allowedFileExplorerNamespace_t">
<xs:attribute name="Name" type="allowedFileExplorerNamespaceValues_t" use="required"/>
</xs:complexType>
<xs:simpleType name="allowedFileExplorerNamespaceValues_t">
<xs:restriction base="xs:string">
<xs:enumeration value="Downloads"/>
</xs:restriction>
</xs:simpleType>
<xs:element name="FileExplorerNamespaceRestrictions" type="fileExplorerNamespaceRestrictions_t" />
<xs:attribute name="AutoLaunch" type="xs:boolean"/>
<xs:attribute name="AutoLaunchArguments" type="xs:string"/>
<xs:attribute name="DisplayName" type="xs:string"/>
</xs:schema>
```
Schema for Windows 10 prerelease
```xml
<?xml version="1.0" encoding="utf-8"?>
<xs:schema
elementFormDefault="qualified"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns="http://schemas.microsoft.com/AssignedAccess/2020/config"
xmlns:default="http://schemas.microsoft.com/AssignedAccess/2020/config"
xmlns:vc="http://www.w3.org/2007/XMLSchema-versioning"
vc:minVersion="1.1"
targetNamespace="http://schemas.microsoft.com/AssignedAccess/2020/config"
>
<xs:simpleType name="guid_t">
<xs:restriction base="xs:string">
<xs:pattern value="\{[0-9a-fA-F]{8}\-([0-9a-fA-F]{4}\-){3}[0-9a-fA-F]{12}\}"/>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="globalProfile_t">
<xs:attribute name="Id" type="guid_t" />
</xs:complexType>
<xs:element name="AllowRemovableDrives"/>
<xs:element name="NoRestriction" />
<xs:element name="GlobalProfile" type="globalProfile_t" />
</xs:schema>
```
To authorize a compatible configuration XML that includes 1809 or prerelease elements and attributes, always include the namespace of these add-on schemas, and decorate the attributes and elements accordingly with the namespace alias. e.g. to configure auto-launch feature which is added in 1809 release, use below sample, notice an alias r1809 is given to the 201810 namespace for 1809 release, and the alias is tagged on AutoLaunch and AutoLaunchArguments inline.
```xml
<AssignedAccessConfiguration
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
xmlns:r1809="http://schemas.microsoft.com/AssignedAccess/201810/config"
>
<Profiles>
<Profile Id="{9A2A490F-10F6-4764-974A-43B19E722C23}">
<AllAppsList>
<AllowedApps>
<App DesktopAppPath="%SystemRoot%\system32\notepad.exe" r1809:AutoLaunch="true" r1809:AutoLaunchArguments="1.txt"/>
``` ```
## Example AssignedAccessConfiguration XML ## Example AssignedAccessConfiguration XML
@ -796,7 +920,7 @@ StatusConfiguration Get
StatusConfiguration Replace On StatusConfiguration Replace On
```syntax ```xml
<SyncML xmlns='SYNCML:SYNCML1.2'> <SyncML xmlns='SYNCML:SYNCML1.2'>
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -1219,7 +1343,7 @@ ShellLauncherConfiguration Get
## AssignedAccessAlert XSD ## AssignedAccessAlert XSD
```syntax ```xml
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<xs:schema <xs:schema
elementFormDefault="qualified" elementFormDefault="qualified"

10
windows/client-management/mdm/certificatestore-csp.md
View File

@ -360,7 +360,7 @@ Supported operations are Add, Get, and Replace.
Add a root certificate to the MDM server. Add a root certificate to the MDM server.
``` syntax ```xml
<Add> <Add>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -379,7 +379,7 @@ Add a root certificate to the MDM server.
Get all installed client certificates. Get all installed client certificates.
``` syntax ```xml
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -394,7 +394,7 @@ Get all installed client certificates.
Delete a root certificate. Delete a root certificate.
``` syntax ```xml
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -409,7 +409,7 @@ Delete a root certificate.
Configure the device to enroll a client certificate through SCEP. Configure the device to enroll a client certificate through SCEP.
``` syntax ```xml
<Atomic> <Atomic>
<CmdID>100</CmdID> <CmdID>100</CmdID>
<Add> <Add>
@ -588,7 +588,7 @@ Configure the device to enroll a client certificate through SCEP.
Configure the device to automatically renew an MDM client certificate with the specified renew period and retry interval. Configure the device to automatically renew an MDM client certificate with the specified renew period and retry interval.
``` syntax ```xml
<Atomic> <Atomic>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Replace> <Replace>

8
windows/client-management/mdm/cm-cellularentries-csp.md
View File

@ -198,7 +198,7 @@ The following diagram shows the CM\_CellularEntries configuration service provid
To delete a connection, you must first delete any associated proxies and then delete the connection. The following example shows how to delete the proxy and then the connection. To delete a connection, you must first delete any associated proxies and then delete the connection. The following example shows how to delete the proxy and then the connection.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_ProxyEntries"> <characteristic type="CM_ProxyEntries">
<nocharacteristic type="GPRS_Proxy"/> <nocharacteristic type="GPRS_Proxy"/>
@ -214,7 +214,7 @@ To delete a connection, you must first delete any associated proxies and then de
Configuring a GPRS connection: Configuring a GPRS connection:
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
<characteristic type="GPRSConn"> <characteristic type="GPRSConn">
@ -231,7 +231,7 @@ Configuring a GPRS connection:
Configuring an LTE connection: Configuring an LTE connection:
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
<characteristic type="LteConn"> <characteristic type="LteConn">
@ -250,7 +250,7 @@ Configuring an LTE connection:
Configuring a CDMA connection: Configuring a CDMA connection:
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
<characteristic type="CDMAConn"> <characteristic type="CDMAConn">

8
windows/client-management/mdm/cmpolicy-csp.md
View File

@ -240,7 +240,7 @@ Specifies the type of connection being referenced. The following list describes
Adding an application-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider. Adding an application-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
@ -285,7 +285,7 @@ Adding an application-based mapping policy. In this example, the ConnectionId fo
Adding a host-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider. Adding a host-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
@ -334,7 +334,7 @@ Adding a host-based mapping policy. In this example, the ConnectionId for type C
Adding an application-based mapping policy: Adding an application-based mapping policy:
``` syntax ```xml
<SyncML> <SyncML>
<SyncBody> <SyncBody>
<Atomic> <Atomic>
@ -401,7 +401,7 @@ Adding an application-based mapping policy:
Adding a host-based mapping policy: Adding a host-based mapping policy:
``` syntax ```xml
<SyncML> <SyncML>
<SyncBody> <SyncBody>
<Atomic> <Atomic>

8
windows/client-management/mdm/cmpolicyenterprise-csp.md
View File

@ -240,7 +240,7 @@ Specifies the type of connection being referenced. The following list describes
Adding an application-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider. Adding an application-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
@ -285,7 +285,7 @@ Adding an application-based mapping policy. In this example, the ConnectionId fo
Adding a host-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider. Adding a host-based mapping policy. In this example, the ConnectionId for type CMST\_CONNECTION\_NAME is set to the name of the connection (“GPRSConn1”) that is configured with the CM\_CellularEntries configuration service provider.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
@ -334,7 +334,7 @@ Adding a host-based mapping policy. In this example, the ConnectionId for type C
Adding an application-based mapping policy: Adding an application-based mapping policy:
``` syntax ```xml
<SyncML> <SyncML>
<SyncBody> <SyncBody>
<Atomic> <Atomic>
@ -401,7 +401,7 @@ Adding an application-based mapping policy:
Adding a host-based mapping policy: Adding a host-based mapping policy:
``` syntax ```xml
<SyncML> <SyncML>
<SyncBody> <SyncBody>
<Atomic> <Atomic>

89
windows/client-management/mdm/configuration-service-provider-reference.md
View File

@ -23,7 +23,7 @@ For information about the bridge WMI provider classes that map to these CSPs, se
Additional lists: Additional lists:
- [List of CSPs supported in Windows Holographic](#hololens) - [List of CSPs supported in HoloLens devices](#hololens)
- [List of CSPs supported in Microsoft Surface Hub](#surfacehubcspsupport) - [List of CSPs supported in Microsoft Surface Hub](#surfacehubcspsupport)
- [List of CSPs supported in Windows 10 IoT Core](#iotcoresupport) - [List of CSPs supported in Windows 10 IoT Core](#iotcoresupport)
@ -172,6 +172,34 @@ Additional lists:
<!--EndSKU--> <!--EndSKU-->
<!--EndCSP--> <!--EndCSP-->
<!--StartCSP-->
[ApplicationControl CSP](applicationcontrol-csp.md)
<!--StartSKU-->
<table>
<tr>
<th>Home</th>
<th>Pro</th>
<th>Business</th>
<th>Enterprise</th>
<th>Education</th>
<th>Mobile</th>
<th>Mobile Enterprise</th>
</tr>
<tr>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
<td><img src="images/checkmark.png" alt="check mark" /><sup>6</sup></td>
</tr>
</table>
<!--EndSKU-->
<!--EndCSP-->
<!--StartCSP--> <!--StartCSP-->
[AppLocker CSP](applocker-csp.md) [AppLocker CSP](applocker-csp.md)
@ -2681,37 +2709,40 @@ You can download the DDF files for various CSPs from the links below:
- [Download all the DDF files for Windows 10, version 1607](https://download.microsoft.com/download/2/3/E/23E27D6B-6E23-4833-B143-915EDA3BDD44/Windows10_1607_DDF.zip) - [Download all the DDF files for Windows 10, version 1607](https://download.microsoft.com/download/2/3/E/23E27D6B-6E23-4833-B143-915EDA3BDD44/Windows10_1607_DDF.zip)
## <a href="" id="hololens"></a>CSPs supported in Windows Holographic ## <a href="" id="hololens"></a>CSPs supported in HoloLens devices
The following list shows the configuration service providers supported in Windows Holographic editions. The following list shows the CSPs supported in HoloLens devices:
| Configuration service provider | Windows Holographic edition | Windows Holographic for Business edition | | Configuration service provider | HoloLens (1st gen) Development Edition | HoloLens (1st gen) Commercial Suite | HoloLens 2 |
|--------|--------|------------| |------|--------|--------|--------|
| [AccountManagement CSP](accountmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | | [AccountManagement CSP](accountmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png)
| [Accounts CSP](accounts-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | [Accounts CSP](accounts-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [AppLocker CSP](applocker-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [ApplicationControl CSP](applicationcontrol-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) |
| [AssignedAccess CSP](assignedaccess-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | | [AppLocker CSP](applocker-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![cross mark](images/crossmark.png) |
| [CertificateStore CSP](certificatestore-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png)| | [AssignedAccess CSP](assignedaccess-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) |
| [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [CertificateStore CSP](certificatestore-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png)| ![check mark](images/checkmark.png) |
| [DevDetail CSP](devdetail-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [ClientCertificateInstall CSP](clientcertificateinstall-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [DeveloperSetup CSP](developersetup-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)2 (runtime provisioning via provisioning packages only; no MDM support)| | [DevDetail CSP](devdetail-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [DeviceStatus CSP](devicestatus-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [DeveloperSetup CSP](developersetup-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)2 (runtime provisioning via provisioning packages only; no MDM support)| ![check mark](images/checkmark.png) |
| [DevInfo CSP](devinfo-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DeviceManageability CSP](devicemanageability-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) |
| [DiagnosticLog CSP](diagnosticlog-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [DeviceStatus CSP](devicestatus-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [DMAcc CSP](dmacc-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DevInfo CSP](devinfo-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [DMClient CSP](dmclient-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DiagnosticLog CSP](diagnosticlog-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [DMAcc CSP](dmacc-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [NodeCache CSP](nodecache-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [DMClient CSP](dmclient-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
[PassportForWork CSP](passportforwork-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [EnterpriseModernAppManagement CSP](enterprisemodernappmanagement-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [Policy CSP](policy-configuration-service-provider.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [NetworkProxy CSP](networkproxy-csp.md) | ![cross mark](images/crossmark.png) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) |
| [RemoteFind CSP](remotefind-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | | [NodeCache CSP](nodecache-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [RemoteWipe CSP](remotewipe-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | [PassportForWork CSP](passportforwork-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [Policy CSP](policy-configuration-service-provider.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [Update CSP](update-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [RemoteFind CSP](remotefind-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) |
| [VPN2 CSP](vpnv2-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [RemoteWipe CSP](remotewipe-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png)4 | ![check mark](images/checkmark.png) |
| [WiFi CSP](wifi-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | | [RootCATrustedCertificates CSP](rootcacertificates-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [WindowsLicensing CSP](windowslicensing-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | | [Update CSP](update-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [VPNv2 CSP](vpnv2-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [WiFi CSP](wifi-csp.md) | ![cross mark](images/crossmark.png) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) |
| [WindowsLicensing CSP](windowslicensing-csp.md) | ![check mark](images/checkmark.png) | ![check mark](images/checkmark.png) | ![cross mark](images/crossmark.png) |
## <a href="" id="surfacehubcspsupport"></a>CSPs supported in Microsoft Surface Hub ## <a href="" id="surfacehubcspsupport"></a>CSPs supported in Microsoft Surface Hub

6
windows/client-management/mdm/customdeviceui-csp.md
View File

@ -38,7 +38,7 @@ Package Full Name of the App that needs be launched in the background. This can
**Set StartupAppID** **Set StartupAppID**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -60,7 +60,7 @@ Package Full Name of the App that needs be launched in the background. This can
**Get all background tasks** **Get all background tasks**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Get> <Get>
@ -78,7 +78,7 @@ Package Full Name of the App that needs be launched in the background. This can
**Add background task** **Add background task**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Add> <Add>

4
windows/client-management/mdm/device-update-management.md
View File

@ -648,7 +648,7 @@ If a machine has Microsoft Update enabled, any Microsoft Updates in these catego
Example Example
``` syntax ```xml
<Replace> <Replace>
<CmdID>$CmdID$</CmdID> <CmdID>$CmdID$</CmdID>
<Item> <Item>
@ -919,7 +919,7 @@ The following screenshots of the administrator console shows the list of update
Set auto update to notify and defer. Set auto update to notify and defer.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.1"> <SyncML xmlns="SYNCML:SYNCML1.1">
<SyncBody> <SyncBody>
<Replace xmlns=""> <Replace xmlns="">

4
windows/client-management/mdm/deviceinstanceservice-csp.md
View File

@ -70,7 +70,7 @@ The parent node to group SIM2 specific information in case of dual SIM mode.
The following sample shows how to query roaming status and phone number on the device. The following sample shows how to query roaming status and phone number on the device.
``` syntax ```xml
<Get> <Get>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -88,7 +88,7 @@ The following sample shows how to query roaming status and phone number on the d
Response from the phone. Response from the phone.
``` syntax ```xml
<Results> <Results>
<CmdID>3</CmdID> <CmdID>3</CmdID>
<MsgRef>1</MsgRef> <MsgRef>1</MsgRef>

2
windows/client-management/mdm/devicelock-csp.md
View File

@ -126,7 +126,7 @@ Required. This node has the same set of policy nodes as the **ProviderID** node.
Set device lock policies: Set device lock policies:
``` syntax ```xml
<Atomic> <Atomic>
<CmdID>13</CmdID> <CmdID>13</CmdID>
<Add> <Add>

4
windows/client-management/mdm/diagnosticlog-csp.md
View File

@ -420,7 +420,7 @@ Default value is 0 meaning no keyword.
Get provider **Keywords** Get provider **Keywords**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Get> <Get>
@ -440,7 +440,7 @@ Get provider **Keywords**
Set provider **Keywords** Set provider **Keywords**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>

2
windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md
View File

@ -105,7 +105,7 @@ After the previous package is sent, the unenrollment process begins.
When the server initiates disconnection, all undergoing sessions for the enrollment ID are aborted immediately to avoid deadlocks. The server will not get a response for the unenrollment, instead a generic alert notification is sent with messageid=1. When the server initiates disconnection, all undergoing sessions for the enrollment ID are aborted immediately to avoid deadlocks. The server will not get a response for the unenrollment, instead a generic alert notification is sent with messageid=1.
``` syntax ```xml
<Alert> <Alert>
<CmdID>4</CmdID> <CmdID>4</CmdID>
<Data>1226</Data> <Data>1226</Data>

8
windows/client-management/mdm/dmclient-csp.md
View File

@ -70,7 +70,7 @@ Supported operation is Get.
The following is a Get command example. The following is a Get command example.
``` syntax ```xml
<Get> <Get>
<CmdID>12</CmdID> <CmdID>12</CmdID>
<Item> <Item>
@ -173,7 +173,7 @@ To work around the timeout, you can use this setting to keep the session alive b
Here is an example of DM message sent by the device when it is in pending state: Here is an example of DM message sent by the device when it is in pending state:
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncHdr> <SyncHdr>
<VerDTD>1.2</VerDTD> <VerDTD>1.2</VerDTD>
@ -229,7 +229,7 @@ Added in Windows 10, version 1607. The list of management server URLs in the fo
``` syntax ```xml
<Replace> <Replace>
<CmdID>101</CmdID> <CmdID>101</CmdID>
<Item> <Item>
@ -770,7 +770,7 @@ Note that &lt;LocURI&gt;./Vendor/MSFT/DMClient/Unenroll&lt;/LocURI&gt; is suppor
The following SyncML shows how to remotely unenroll the device. Note that this command should be inserted in the general DM packages sent from the server to the device. The following SyncML shows how to remotely unenroll the device. Note that this command should be inserted in the general DM packages sent from the server to the device.
``` syntax ```xml
<Exec> <Exec>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>

10
windows/client-management/mdm/dynamicmanagement-csp.md
View File

@ -29,7 +29,7 @@ The following diagram shows the DynamicManagement configuration service provider
<p style="margin-left: 20px">Default value is False. Supported operations are Get and Replace.</p> <p style="margin-left: 20px">Default value is False. Supported operations are Get and Replace.</p>
<p style="margin-left: 20px">Example to turn on NotificationsEnabled:</p> <p style="margin-left: 20px">Example to turn on NotificationsEnabled:</p>
``` syntax ```xml
<Replace> <Replace>
<CmdID>100</CmdID> <CmdID>100</CmdID>
<Item> <Item>
@ -84,7 +84,7 @@ The following diagram shows the DynamicManagement configuration service provider
Disable Cortana based on Geo location and time, From 9am-5pm, when in the 100 meters radius of the specified latitude/longitude Disable Cortana based on Geo location and time, From 9am-5pm, when in the 100 meters radius of the specified latitude/longitude
``` syntax ```xml
<Replace> <Replace>
<CmdID>200</CmdID> <CmdID>200</CmdID>
<Item> <Item>
@ -138,7 +138,7 @@ Disable Cortana based on Geo location and time, From 9am-5pm, when in the 100 me
Disable camera using network trigger with time trigger, from 9-5, when ip4 gateway is 192.168.0.1 Disable camera using network trigger with time trigger, from 9-5, when ip4 gateway is 192.168.0.1
``` syntax ```xml
<Replace> <Replace>
<CmdID>300</CmdID> <CmdID>300</CmdID>
<Item> <Item>
@ -193,7 +193,7 @@ Disable camera using network trigger with time trigger, from 9-5, when ip4 gatew
Delete a context Delete a context
``` syntax ```xml
<Delete> <Delete>
<CmdID>400</CmdID> <CmdID>400</CmdID>
<Item> <Item>
@ -206,7 +206,7 @@ Delete a context
Get ContextStatus and SignalDefinition from a specific context Get ContextStatus and SignalDefinition from a specific context
``` syntax ```xml
<Get> <Get>
<CmdID>400</CmdID> <CmdID>400</CmdID>
<Item> <Item>

10
windows/client-management/mdm/enable-admx-backed-policies-in-mdm.md
View File

@ -64,7 +64,7 @@ See [Support Tip: Ingesting Office ADMX-backed policies using Microsoft Intune](
> [!NOTE] > [!NOTE]
> The \<Data> payload must be XML encoded. To avoid encoding, you can use CData if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). If you are using Intune, select String as the data type. > The \<Data> payload must be XML encoded. To avoid encoding, you can use CData if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). If you are using Intune, select String as the data type.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -114,7 +114,7 @@ See [Support Tip: Ingesting Office ADMX-backed policies using Microsoft Intune](
Here is the snippet from appv.admx: Here is the snippet from appv.admx:
``` syntax ```xml
<!-- Publishing Server 2 --> <!-- Publishing Server 2 -->
<policy name="Publishing_Server2_Policy" class="Machine" displayName="$(string.PublishingServer2)" <policy name="Publishing_Server2_Policy" class="Machine" displayName="$(string.PublishingServer2)"
explainText="$(string.Publishing_Server_Help)" presentation="$(presentation.Publishing_Server2)" explainText="$(string.Publishing_Server_Help)" presentation="$(presentation.Publishing_Server2)"
@ -206,7 +206,7 @@ See [Support Tip: Ingesting Office ADMX-backed policies using Microsoft Intune](
Here is the example XML for Publishing_Server2_Policy : Here is the example XML for Publishing_Server2_Policy :
``` syntax ```xml
<data id="Publishing_Server2_Name_Prompt" value="Name"/> <data id="Publishing_Server2_Name_Prompt" value="Name"/>
<data id="Publishing_Server_URL_Prompt" value="http://someuri"/> <data id="Publishing_Server_URL_Prompt" value="http://someuri"/>
<data id="Global_Publishing_Refresh_Options" value="1"/> <data id="Global_Publishing_Refresh_Options" value="1"/>
@ -226,7 +226,7 @@ See [Support Tip: Ingesting Office ADMX-backed policies using Microsoft Intune](
> [!NOTE] > [!NOTE]
> The \<Data> payload must be XML encoded. To avoid encoding, you can use CData if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). If you are using Intune, select String as the data type. > The \<Data> payload must be XML encoded. To avoid encoding, you can use CData if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). If you are using Intune, select String as the data type.
``` syntax ```xml
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
@ -264,7 +264,7 @@ See [Support Tip: Ingesting Office ADMX-backed policies using Microsoft Intune](
The \<Data> payload is \<disabled/>. Here is an example to disable AppVirtualization/PublishingAllowServer2. The \<Data> payload is \<disabled/>. Here is an example to disable AppVirtualization/PublishingAllowServer2.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>

2
windows/client-management/mdm/enable-offline-updates-for-windows-embedded-8-1-handheld-devices-to-windows-10.md
View File

@ -275,7 +275,7 @@ After the installation of updates is completed, the IT Admin can use the DURepor
<a href="" id="example-script"></a> <a href="" id="example-script"></a>
## Example PowerShell script ## Example PowerShell script
``` syntax ```powershell
param ( param (
# [Parameter (Mandatory=$true, HelpMessage="Input File")] # [Parameter (Mandatory=$true, HelpMessage="Input File")]
[String]$inputFile, [String]$inputFile,

58
windows/client-management/mdm/enterprise-app-management.md
View File

@ -78,7 +78,7 @@ Note that performing a full inventory of a device can be resource intensive on t
Here is an example of a query for all apps on the device. Here is an example of a query for all apps on the device.
``` syntax ```xml
<!-- Get all apps under AppManagement --> <!-- Get all apps under AppManagement -->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -92,7 +92,7 @@ Here is an example of a query for all apps on the device.
Here is an example of a query for a specific app for a user. Here is an example of a query for a specific app for a user.
``` syntax ```xml
<!-- Get all information of a specific app for a user --> <!-- Get all information of a specific app for a user -->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -121,7 +121,7 @@ For detailed descriptions of each node, see [EnterpriseModernAppManagement CSP](
Here is an example of a query for all app licenses on a device. Here is an example of a query for all app licenses on a device.
``` syntax ```xml
<!-- Get all app licenses for the device --> <!-- Get all app licenses for the device -->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -135,7 +135,7 @@ Here is an example of a query for all app licenses on a device.
Here is an example of a query for all app licenses for a user. Here is an example of a query for all app licenses for a user.
``` syntax ```xml
<!-- Get a specific app license for a user --> <!-- Get a specific app license for a user -->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -161,7 +161,7 @@ For more information about the AllowAllTrustedApps policy, see [Policy CSP](poli
Here are some examples. Here are some examples.
``` syntax ```xml
<!-- Get policy (Default)--> <!-- Get policy (Default)-->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -199,7 +199,7 @@ For more information about the AllowDeveloperUnlock policy, see [Policy CSP](pol
Here is an example. Here is an example.
``` syntax ```xml
<!-- Get policy (Default)--> <!-- Get policy (Default)-->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -244,7 +244,7 @@ Here are the requirements for this scenario:
Here are some examples. Here are some examples.
``` syntax ```xml
<Exec> <Exec>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -281,7 +281,7 @@ In the SyncML, you need to specify the following information in the Exec command
Here is an example of an offline license installation. Here is an example of an offline license installation.
``` syntax ```xml
<Exec> <Exec>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -315,7 +315,7 @@ The Add command for the package family name is required to ensure proper removal
Here is an example of a line-of-business app installation. Here is an example of a line-of-business app installation.
``` syntax ```xml
<!-- Add PackageFamilyName --> <!-- Add PackageFamilyName -->
<Add> <Add>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -342,7 +342,7 @@ Here is an example of a line-of-business app installation.
Here is an example of an app installation with dependencies. Here is an example of an app installation with dependencies.
``` syntax ```xml
<!-- Add PackageFamilyName --> <!-- Add PackageFamilyName -->
<Add> <Add>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -376,7 +376,7 @@ Here is an example of an app installation with dependencies.
Here is an example of an app installation with dependencies and optional packages. Here is an example of an app installation with dependencies and optional packages.
``` syntax ```xml
<!-- Add PackageFamilyName --> <!-- Add PackageFamilyName -->
<Add> <Add>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -438,7 +438,7 @@ Here is an example of app installation.
> **Note**  This is only supported in Windows 10 for desktop editions. > **Note**  This is only supported in Windows 10 for desktop editions.
``` syntax ```xml
<!-- Add PackageFamilyName --> <!-- Add PackageFamilyName -->
<Add> <Add>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -475,7 +475,7 @@ Here is an example of app installation with dependencies.
> **Note**  This is only supported in Windows 10 for desktop editions. > **Note**  This is only supported in Windows 10 for desktop editions.
``` syntax ```xml
<!-- Add PackageFamilyName --> <!-- Add PackageFamilyName -->
<Add> <Add>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -526,7 +526,7 @@ When an app is installed successfully, the node is cleaned up and no longer pres
Here is an example of a query for a specific app installation. Here is an example of a query for a specific app installation.
``` syntax ```xml
<!-- Get all app status under AppInstallation for a specific app--> <!-- Get all app status under AppInstallation for a specific app-->
<Get> <Get>
<CmdID>2</CmdID> <CmdID>2</CmdID>
@ -540,7 +540,7 @@ Here is an example of a query for a specific app installation.
Here is an example of a query for all app installations. Here is an example of a query for all app installations.
``` syntax ```xml
<!-- Get all app status under AppInstallation--> <!-- Get all app status under AppInstallation-->
<Get> <Get>
<CmdID>2</CmdID> <CmdID>2</CmdID>
@ -558,7 +558,7 @@ Application installations can take some time to complete, hence they are done as
Here is an example of an alert. Here is an example of an alert.
``` syntax ```xml
<Alert> <Alert>
<CmdID>4</CmdID> <CmdID>4</CmdID>
<Data>1226</Data> <Data>1226</Data>
@ -594,7 +594,7 @@ To uninstall an app, you delete it under the origin node, package family name, a
Here is an example for uninstalling all versions of an app for a user. Here is an example for uninstalling all versions of an app for a user.
``` syntax ```xml
<!-- Uninstall App for a Package Family--> <!-- Uninstall App for a Package Family-->
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -608,7 +608,7 @@ Here is an example for uninstalling all versions of an app for a user.
Here is an example for uninstalling a specific version of the app for a user. Here is an example for uninstalling a specific version of the app for a user.
``` syntax ```xml
<!-- Uninstall App for a specific package full name--> <!-- Uninstall App for a specific package full name-->
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -631,7 +631,7 @@ Removing provisioned app occurs in the device context.
Here is an example for removing a provisioned app from a device. Here is an example for removing a provisioned app from a device.
``` syntax ```xml
<!— Remove Provisioned App for a Package Family--> <!— Remove Provisioned App for a Package Family-->
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -645,7 +645,7 @@ Here is an example for removing a provisioned app from a device.
Here is an example for removing a specific version of a provisioned app from a device: Here is an example for removing a specific version of a provisioned app from a device:
``` syntax ```xml
<!-- Remove Provisioned App for a specific package full name--> <!-- Remove Provisioned App for a specific package full name-->
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -663,7 +663,7 @@ You can remove app licenses from a device per app based on the content ID.
Here is an example for removing an app license for a user. Here is an example for removing an app license for a user.
``` syntax ```xml
<!-- Remove App License for a User--> <!-- Remove App License for a User-->
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -677,7 +677,7 @@ Here is an example for removing an app license for a user.
Here is an example for removing an app license for a provisioned package (device context). Here is an example for removing an app license for a provisioned package (device context).
``` syntax ```xml
<!-- Remove App License for a provisioned package (device) --> <!-- Remove App License for a provisioned package (device) -->
<Delete> <Delete>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -697,7 +697,7 @@ For user-based uninstallation, use ./User in the LocURI, and for provisioning, u
Here is an example. There is only one uninstall for hosted and store apps. Here is an example. There is only one uninstall for hosted and store apps.
``` syntax ```xml
<Alert> <Alert>
<Data>1226</Data> <Data>1226</Data>
<Item> <Item>
@ -723,7 +723,7 @@ To update an app from Microsoft Store, the device requires contact with the stor
Here is an example of an update scan. Here is an example of an update scan.
``` syntax ```xml
<!— Initiate a update scan for a user--> <!— Initiate a update scan for a user-->
<Exec> <Exec>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -737,7 +737,7 @@ Here is an example of an update scan.
Here is an example of a status check. Here is an example of a status check.
``` syntax ```xml
<!— Get last error related to the update scan--> <!— Get last error related to the update scan-->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -766,7 +766,7 @@ Turning off updates only applies to updates from the Microsoft Store at the devi
Here is an example. Here is an example.
``` syntax ```xml
<!— Prevent app from being automatically updated--> <!— Prevent app from being automatically updated-->
<Replace> <Replace>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -795,7 +795,7 @@ You can install app on non-system volumes, such as a secondary partition or remo
Here is an example. Here is an example.
``` syntax ```xml
<!-- Get policy (Default)--> <!-- Get policy (Default)-->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -832,7 +832,7 @@ The RestrictAppDataToSystemVolume policy in [Policy CSP](policy-configuration-se
Here is an example. Here is an example.
``` syntax ```xml
<!-- Get policy (Default)--> <!-- Get policy (Default)-->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -873,7 +873,7 @@ The valid values are 0 (off, default value) and 1 (on).
Here is an example. Here is an example.
``` syntax ```xml
<!-- Get policy (Default)--> <!-- Get policy (Default)-->
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>

2
windows/client-management/mdm/enterpriseapn-csp.md
View File

@ -132,7 +132,7 @@ The following image shows the EnterpriseAPN configuration service provider in tr
## Examples ## Examples
``` syntax ```xml
<!-- <!--
Copyright (c) Microsoft Corporation. All rights reserved. Copyright (c) Microsoft Corporation. All rights reserved.
--> -->

16
windows/client-management/mdm/enterpriseappmanagement-csp.md
View File

@ -209,7 +209,7 @@ The Microsoft Store application has a GUID of d5dc1ebb-a7f1-df11-9264-00237de2db
Use the following SyncML format to query to see if the application is installed on a managed device: Use the following SyncML format to query to see if the application is installed on a managed device:
``` syntax ```xml
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -222,7 +222,7 @@ Use the following SyncML format to query to see if the application is installed
Response from the device (it contains list of subnodes if this app is installed in the device). Response from the device (it contains list of subnodes if this app is installed in the device).
``` syntax ```xml
<Results> <Results>
<CmdID>3</CmdID> <CmdID>3</CmdID>
<MsgRef>1</MsgRef> <MsgRef>1</MsgRef>
@ -266,7 +266,7 @@ The value actually applied to the device can be queried via the nodes under the
Enroll enterprise ID “4000000001” for the first time: Enroll enterprise ID “4000000001” for the first time:
``` syntax ```xml
<Add> <Add>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -293,7 +293,7 @@ Enroll enterprise ID “4000000001” for the first time:
Update the enrollment token (for example, to update an expired application enrollment token): Update the enrollment token (for example, to update an expired application enrollment token):
``` syntax ```xml
<Replace> <Replace>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -310,7 +310,7 @@ Update the enrollment token (for example, to update an expired application enrol
Query all installed applications that belong to enterprise id “4000000001”: Query all installed applications that belong to enterprise id “4000000001”:
``` syntax ```xml
<Get> <Get>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -325,7 +325,7 @@ Query all installed applications that belong to enterprise id “4000000001”:
Response from the device (that contains two installed applications): Response from the device (that contains two installed applications):
``` syntax ```xml
<Results> <Results>
<CmdID>3</CmdID> <CmdID>3</CmdID>
<MsgRef>1</MsgRef> <MsgRef>1</MsgRef>
@ -444,7 +444,7 @@ To perform an XAP update, create the Name, URL, Version, and DownloadInstall nod
``` syntax ```xml
<Atomic> <Atomic>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<!-- The Add command can be used if the download node does not have a matching product ID <!-- The Add command can be used if the download node does not have a matching product ID
@ -514,7 +514,7 @@ To perform an XAP update, create the Name, URL, Version, and DownloadInstall nod
Uninstall an installed enterprise application with product ID “{7BB316008A-141D-4A79-810F-8B764C4CFDFB }”: Uninstall an installed enterprise application with product ID “{7BB316008A-141D-4A79-810F-8B764C4CFDFB }”:
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Delete> <Delete>

46
windows/client-management/mdm/enterpriseassignedaccess-csp.md
View File

@ -61,7 +61,7 @@ Application | <img src="images/enterpriseassignedaccess-csp.png" alt="modern app
Application | Include PinToStart to display an app on the Start screen. For apps pinned to the Start screen, identify a tile size (small, medium, or large), and a location. The size of a small tile is 1 column x 1 row, a medium tile is 2 x 2, and a large tile is 4 x 2. For the tile location, the first value indicates the column and the second value indicates the row. A value of 0 (zero) indicates the first column, a value of 1 indicates the second column, and so on. Include autoRun as an attribute to configure the application to run automatically. Application | Include PinToStart to display an app on the Start screen. For apps pinned to the Start screen, identify a tile size (small, medium, or large), and a location. The size of a small tile is 1 column x 1 row, a medium tile is 2 x 2, and a large tile is 4 x 2. For the tile location, the first value indicates the column and the second value indicates the row. A value of 0 (zero) indicates the first column, a value of 1 indicates the second column, and so on. Include autoRun as an attribute to configure the application to run automatically.
Application example: Application example:
``` syntax ```xml
<Application productId="{2A4E62D8-8809-4787-89F8-69D0F01654FB}" autoRun="true"> <Application productId="{2A4E62D8-8809-4787-89F8-69D0F01654FB}" autoRun="true">
<PinToStart> <PinToStart>
<Size>Large</Size> <Size>Large</Size>
@ -78,7 +78,7 @@ Entry | Description
Application | Multiple App Packages enable multiple apps to exist inside the same package. Since ProductIds identify packages and not applications, specifying a ProductId is not enough to distinguish between individual apps inside a multiple app package. Trying to include application from a multiple app package with just a ProductId can result in unexpected behavior. To support pinning applications in multiple app packages, use an AUMID parameter in lockdown XML. For the list of product ID and AUMID, see [ProductIDs in Windows 10 Mobile](#productid). The following example shows how to pin both Outlook mail and Outlook calendar. Application | Multiple App Packages enable multiple apps to exist inside the same package. Since ProductIds identify packages and not applications, specifying a ProductId is not enough to distinguish between individual apps inside a multiple app package. Trying to include application from a multiple app package with just a ProductId can result in unexpected behavior. To support pinning applications in multiple app packages, use an AUMID parameter in lockdown XML. For the list of product ID and AUMID, see [ProductIDs in Windows 10 Mobile](#productid). The following example shows how to pin both Outlook mail and Outlook calendar.
Application example: Application example:
``` syntax ```xml
<Apps> <Apps>
<!-- Outlook Calendar --> <!-- Outlook Calendar -->
<Application productId="{A558FEBA-85D7-4665-B5D8-A2FF9C19799B}" <Application productId="{A558FEBA-85D7-4665-B5D8-A2FF9C19799B}"
@ -110,7 +110,7 @@ Entry | Description
Folder | A folder should be contained in `<Applications/>` node among with other `<Application/>` nodes, it shares most grammar with the Application Node, **folderId** is mandatory, **folderName** is optional, which is the folder name displayed on Start. **folderId** is a unique unsigned integer for each folder. Folder | A folder should be contained in `<Applications/>` node among with other `<Application/>` nodes, it shares most grammar with the Application Node, **folderId** is mandatory, **folderName** is optional, which is the folder name displayed on Start. **folderId** is a unique unsigned integer for each folder.
Folder example: Folder example:
``` syntax ```xml
<Application folderId="4" folderName="foldername"> <Application folderId="4" folderName="foldername">
<PinToStart> <PinToStart>
<Size>Large</Size> <Size>Large</Size>
@ -123,7 +123,7 @@ Folder example:
``` ```
An application that belongs in the folder would add an optional attribute **ParentFolderId**, which maps to **folderId** of the folder. In this case, the location of this application will be located inside the folder. An application that belongs in the folder would add an optional attribute **ParentFolderId**, which maps to **folderId** of the folder. In this case, the location of this application will be located inside the folder.
``` syntax ```xml
<Application productId="{2A4E62D8-8809-4787-89F8-69D0F01654FB}"> <Application productId="{2A4E62D8-8809-4787-89F8-69D0F01654FB}">
<PinToStart> <PinToStart>
<Size>Medium</Size> <Size>Medium</Size>
@ -252,7 +252,7 @@ For example, in place of SettingPageDisplay, you would use ms-settings:display.
Here is an example for Windows 10, version 1703. Here is an example for Windows 10, version 1703.
``` syntax ```xml
<Settings> <Settings>
<System name="ms-settings:display"/> <System name="ms-settings:display"/>
<System name="ms-settings:appsforwebsites"/> <System name="ms-settings:appsforwebsites"/>
@ -327,14 +327,14 @@ Starting in Windows 10, version 1703, Quick action settings no longer require an
In this example, all settings pages and quick action settings are allowed. An empty \<Settings> node indicates that none of the settings are blocked. In this example, all settings pages and quick action settings are allowed. An empty \<Settings> node indicates that none of the settings are blocked.
``` syntax ```xml
<Settings> <Settings>
</Settings> </Settings>
``` ```
In this example for Windows 10, version 1511, all System setting pages are enabled. Note that the System page group is added as well as all of the System subpage names. In this example for Windows 10, version 1511, all System setting pages are enabled. Note that the System page group is added as well as all of the System subpage names.
``` syntax ```xml
<Settings> <Settings>
<System name="SettingsPageGroupPCSystem" /> <System name="SettingsPageGroupPCSystem" />
<System name="SettingsPageDisplay" /> <System name="SettingsPageDisplay" />
@ -350,7 +350,7 @@ In this example for Windows 10, version 1511, all System setting pages are ena
``` ```
Here is an example for Windows 10, version 1703. Here is an example for Windows 10, version 1703.
``` syntax ```xml
<Settings> <Settings>
<System name="ms-settings:display"/> <System name="ms-settings:display"/>
<System name="ms-settings:appsforwebsites"/> <System name="ms-settings:appsforwebsites"/>
@ -382,7 +382,7 @@ Buttons | The following list identifies the hardware buttons on the device that
> Custom buttons are hardware buttons that can be added to devices by OEMs. > Custom buttons are hardware buttons that can be added to devices by OEMs.
Buttons example: Buttons example:
``` syntax ```xml
<Buttons> <Buttons>
<ButtonLockdownList> <ButtonLockdownList>
<!-- Lockdown all buttons --> <!-- Lockdown all buttons -->
@ -407,7 +407,7 @@ The Search and custom buttons can be <em>remapped</em> or configured to open a s
To remap a button in lockdown XML, you supply the button name, the button event (typically "press"), and the product ID for the application the button will open. To remap a button in lockdown XML, you supply the button name, the button event (typically "press"), and the product ID for the application the button will open.
``` syntax ```xml
<ButtonRemapList> <ButtonRemapList>
<Button name="Search"> <Button name="Search">
<ButtonEvent name="Press"> <ButtonEvent name="Press">
@ -503,7 +503,7 @@ MenuItems | Use **DisableMenuItems** to prevent use of the context menu, which i
MenuItems example: MenuItems example:
``` syntax ```xml
<MenuItems> <MenuItems>
<DisableMenuItems/> <DisableMenuItems/>
</MenuItems> </MenuItems>
@ -1196,7 +1196,7 @@ The XML examples in this section show how to perform various tasks by using OMA
The following example shows how to add a new policy. The following example shows how to add a new policy.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="EnterpriseAssignedAccess"> <characteristic type="EnterpriseAssignedAccess">
<characteristic type="AssignedAccess"> <characteristic type="AssignedAccess">
@ -1211,7 +1211,7 @@ The following example shows how to add a new policy.
The following example shows how to specify the language to display on the device. The following example shows how to specify the language to display on the device.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="EnterpriseAssignedAccess"> <characteristic type="EnterpriseAssignedAccess">
<characteristic type="Language"> <characteristic type="Language">
@ -1230,7 +1230,7 @@ These XML examples show how to perform various tasks using OMA DM.
The following example shows how to lock down a device. The following example shows how to lock down a device.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Add> <Add>
@ -1251,7 +1251,7 @@ The following example shows how to lock down a device.
The following example shows how to change the accent color to one of the standard colors. The following example shows how to change the accent color to one of the standard colors.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -1274,7 +1274,7 @@ The following example shows how to change the accent color to one of the standar
The following example shows how to change the theme. The following example shows how to change the theme.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -1297,7 +1297,7 @@ The following example shows how to change the theme.
The following example shows how to set a custom theme accent color for the enterprise environment. The following example shows how to set a custom theme accent color for the enterprise environment.
``` syntax ```xml
<SyncBody> <SyncBody>
<Replace> <Replace>
<CmdID>1</CmdID> <CmdID>1</CmdID>
@ -1333,7 +1333,7 @@ The following example shows how to set a custom theme accent color for the enter
Use the examples in this section to set a new lock screen and manage the lock screen features. If using a UNC path, format the LocURI as \\\\host\\share\\image.jpg. Use the examples in this section to set a new lock screen and manage the lock screen features. If using a UNC path, format the LocURI as \\\\host\\share\\image.jpg.
``` syntax ```xml
<Add> <Add>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -1351,7 +1351,7 @@ Use the examples in this section to set a new lock screen and manage the lock sc
The following example shows how to query the device for the file being used as the lock screen. The following example shows how to query the device for the file being used as the lock screen.
``` syntax ```xml
<Get> <Get>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -1364,7 +1364,7 @@ The following example shows how to query the device for the file being used as t
The following example shows how to change the existing lock screen image to one of your choosing. The following example shows how to change the existing lock screen image to one of your choosing.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -1389,7 +1389,7 @@ The following example shows how to change the existing lock screen image to one
The following example shows how to set the time zone to UTC-07 Mountain Time (US & Canada). The following example shows how to set the time zone to UTC-07 Mountain Time (US & Canada).
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -1411,7 +1411,7 @@ The following example shows how to set the time zone to UTC-07 Mountain Time (US
The following example shows how to set the time zone to Pacific Standard Time (UTC-08:00) without observing daylight savings time (UTC+01:00). The following example shows how to set the time zone to Pacific Standard Time (UTC-08:00) without observing daylight savings time (UTC+01:00).
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>
@ -1435,7 +1435,7 @@ The following example shows how to set the time zone to Pacific Standard Time (U
The following example shows how to set the language. The following example shows how to set the language.
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>

20
windows/client-management/mdm/enterprisedesktopappmanagement-csp.md
View File

@ -54,19 +54,13 @@ In Windows 10, version 1703 service release, a new tag \<DownloadFromAad\> was a
Here is an example: Here is an example:
```syntax ```xml
<Enforcement> <Enforcement>
<CommandLine>/quiet</CommandLine> <CommandLine>/quiet</CommandLine>
<TimeOut>5</TimeOut> <TimeOut>5</TimeOut>
<RetryCount>3</RetryCount> <RetryCount>3</RetryCount>
<RetryInterval>5</RetryInterval> <RetryInterval>5</RetryInterval>
<DownloadFromAad>1</DownloadFromAad> <DownloadFromAad>1</DownloadFromAad>
</Enforcement> </Enforcement>
``` ```
@ -112,7 +106,7 @@ Value type is string. Supported operation is Get.
**SyncML to request CSP version information** **SyncML to request CSP version information**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.1"> <SyncML xmlns="SYNCML:SYNCML1.1">
<SyncBody> <SyncBody>
<Get> <Get>
@ -140,7 +134,7 @@ The following table describes the fields in the previous sample:
**SyncML to perform MSI operations for application uninstall** **SyncML to perform MSI operations for application uninstall**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.1"> <SyncML xmlns="SYNCML:SYNCML1.1">
<SyncBody> <SyncBody>
<Delete> <Delete>
@ -168,7 +162,7 @@ The following table describes the fields in the previous sample:
**SyncML to perform MSI operations for application status reporting** **SyncML to perform MSI operations for application status reporting**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.1"> <SyncML xmlns="SYNCML:SYNCML1.1">
<SyncBody> <SyncBody>
<Get> <Get>
@ -196,7 +190,7 @@ The following table describes the fields in the previous sample:
**SyncML to perform MSI install operations for an application targeted to a specific user on the device. The Add command is required to preceed the Exec command.** **SyncML to perform MSI install operations for an application targeted to a specific user on the device. The Add command is required to preceed the Exec command.**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.1"> <SyncML xmlns="SYNCML:SYNCML1.1">
<SyncBody> <SyncBody>
<Add> <Add>
@ -290,7 +284,7 @@ The following table describes the fields in the previous sample:
**SyncML to perform MSI install operations for an application targeted to all users on the device (per-device installation)** **SyncML to perform MSI install operations for an application targeted to all users on the device (per-device installation)**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.1"> <SyncML xmlns="SYNCML:SYNCML1.1">
<SyncBody> <SyncBody>
<Add> <Add>
@ -540,7 +534,7 @@ Here's a list of references:
## Alert example ## Alert example
``` syntax ```xml
<Alert> <Alert>
<CmdID>4</CmdID> <CmdID>4</CmdID>
<Data>1224</Data> <Data>1224</Data>

6
windows/client-management/mdm/enterpriseextfilessystem-csp.md
View File

@ -70,7 +70,7 @@ Supported operations is Get.
The following example shows how to retrieve a file from the device. The following example shows how to retrieve a file from the device.
``` syntax ```xml
<Get> <Get>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>
@ -83,7 +83,7 @@ The following example shows how to retrieve a file from the device.
The following example shows the file name that is returned in the body of the response syncML code. In this example, the full path of the file on the device is C:/data/test/bin/filename.txt. The following example shows the file name that is returned in the body of the response syncML code. In this example, the full path of the file on the device is C:/data/test/bin/filename.txt.
``` syntax ```xml
<Results> <Results>
<CmdID>3</CmdID> <CmdID>3</CmdID>
<MsgRef>1</MsgRef> <MsgRef>1</MsgRef>
@ -103,7 +103,7 @@ The following example shows the file name that is returned in the body of the re
The following example shows how to push a file to the device. The following example shows how to push a file to the device.
``` syntax ```xml
<Add> <Add>
<CmdID>2</CmdID> <CmdID>2</CmdID>
<Item> <Item>

15
windows/client-management/mdm/enterprisemodernappmanagement-csp.md
View File

@ -52,7 +52,7 @@ Supported operation is Get.
Here's an example of AppInventoryResults operation. Here's an example of AppInventoryResults operation.
``` syntax ```xml
<Get> <Get>
<CmdID>11</CmdID> <CmdID>11</CmdID>
<Item> <Item>
@ -100,7 +100,7 @@ Supported operation is Get and Replace.
The following example sets the inventory query for the package names and checks the status for reinstallation for all main packages that are nonStore apps. The following example sets the inventory query for the package names and checks the status for reinstallation for all main packages that are nonStore apps.
``` syntax ```xml
<Replace> <Replace>
<CmdID>10</CmdID> <CmdID>10</CmdID>
<Item> <Item>
@ -208,7 +208,7 @@ Supported operations are Get and Delete.
Here's an example for uninstalling an app: Here's an example for uninstalling an app:
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<!-- Uninstall app --> <!-- Uninstall app -->
@ -345,7 +345,7 @@ Value type is string. Supported operations are Add, Get, Replace, and Delete.
The following example sets the value for the 'Server' The following example sets the value for the 'Server'
``` syntax ```xml
<!— Configure app settings --> <!— Configure app settings -->
<Add> <Add>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -363,7 +363,7 @@ The following example sets the value for the 'Server'
The following example gets all managed app settings for a specific app. The following example gets all managed app settings for a specific app.
``` syntax ```xml
<!—Get app settings --> <!—Get app settings -->
<Get> <Get>
<CmdID>0</CmdID> <CmdID>0</CmdID>
@ -583,7 +583,7 @@ For examples of how to use this CSP to for reporting apps inventory, installatio
Query the device for a specific app subcategory, such as nonStore apps. Query the device for a specific app subcategory, such as nonStore apps.
``` syntax ```xml
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>
@ -598,8 +598,7 @@ The result contains a list of apps, such as \<Data>App1/App2/App\</Data\>.
Subsequent query for a specific app for its properties. Subsequent query for a specific app for its properties.
``` syntax ```xml
<Get> <Get>
<CmdID>1</CmdID> <CmdID>1</CmdID>
<Item> <Item>

12
windows/client-management/mdm/federated-authentication-device-enrollment.md
View File

@ -92,7 +92,7 @@ https://EnterpriseEnrollment.Contoso.com/EnrollmentServer/Discovery.svc
The following example shows the discovery service request. The following example shows the discovery service request.
``` syntax ```xml
<?xml version="1.0"?> <?xml version="1.0"?>
<s:Envelope xmlns:a="http://www.w3.org/2005/08/addressing" <s:Envelope xmlns:a="http://www.w3.org/2005/08/addressing"
xmlns:s="http://www.w3.org/2003/05/soap-envelope"> xmlns:s="http://www.w3.org/2003/05/soap-envelope">
@ -198,7 +198,7 @@ The server has to send a POST to a redirect URL of the form ms-app://string (the
The following example shows a response received from the discovery web service which requires authentication via WAB. The following example shows a response received from the discovery web service which requires authentication via WAB.
``` syntax ```xml
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope"
xmlns:a="http://www.w3.org/2005/08/addressing"> xmlns:a="http://www.w3.org/2005/08/addressing">
<s:Header> <s:Header>
@ -252,7 +252,7 @@ wsse:BinarySecurityToken/attributes/EncodingType: The &lt;wsse:BinarySecurityTok
The following is an enrollment policy request example with a received security token as client credential. The following is an enrollment policy request example with a received security token as client credential.
``` syntax ```xml
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope"
xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2005/08/addressing"
xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
@ -305,7 +305,7 @@ MS-XCEP supports very flexible enrollment policies using various Complex Types a
The following snippet shows the policy web service response. The following snippet shows the policy web service response.
``` syntax ```xml
<s:Envelope <s:Envelope
xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:s="http://www.w3.org/2003/05/soap-envelope"
@ -399,7 +399,7 @@ The RST may also specify a number of AdditionalContext items, such as DeviceType
The following example shows the enrollment web service request for federated authentication. The following example shows the enrollment web service request for federated authentication.
``` syntax ```xml
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope"
xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2005/08/addressing"
xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
@ -505,7 +505,7 @@ Here is a sample RSTR message and a sample of OMA client provisioning XML within
The following example shows the enrollment web service response. The following example shows the enrollment web service response.
``` syntax ```xml
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2005/08/addressing"
xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"> xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">

2
windows/client-management/mdm/hotspot-csp.md
View File

@ -134,7 +134,7 @@ Changes to this node require a reboot.
For CDMA networks that use a separate Network Access Identity (NAI) for Internet sharing, a new parm, TetheringNAI, has been added in the [CM\_CellularEntries configuration service provider](cm-cellularentries-csp.md) configuration service provider. The following sample demonstrates how to specify the connection. For CDMA networks that use a separate Network Access Identity (NAI) for Internet sharing, a new parm, TetheringNAI, has been added in the [CM\_CellularEntries configuration service provider](cm-cellularentries-csp.md) configuration service provider. The following sample demonstrates how to specify the connection.
``` syntax ```xml
<wap-provisioningdoc> <wap-provisioningdoc>
<characteristic type="CM_CellularEntries"> <characteristic type="CM_CellularEntries">
<characteristic type="TetheringNAIConn"> <characteristic type="TetheringNAIConn">

BIN
windows/client-management/mdm/images/provisioning-csp-applicationcontrol.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 22 KiB

2
windows/client-management/mdm/implement-server-side-mobile-application-management.md
View File

@ -59,7 +59,7 @@ Below are protocol changes for MAM enrollment: 
Here is an example provisioning XML for MAM enrollment. Here is an example provisioning XML for MAM enrollment.
``` syntax ```xml
<wap-provisioningdoc version="1.1"> <wap-provisioningdoc version="1.1">
<characteristic type="APPLICATION"> <characteristic type="APPLICATION">
<parm name="APPID" value="w7"/> <parm name="APPID" value="w7"/>

4
windows/client-management/mdm/maps-csp.md
View File

@ -126,7 +126,7 @@ Here is a list of GUIDs of the most downloaded reqions.
Here is an example queuing a map package of New York for download. Here is an example queuing a map package of New York for download.
``` syntax ```xml
<SyncML> <SyncML>
<SyncBody> <SyncBody>
<Add> <Add>
@ -144,7 +144,7 @@ Here is an example queuing a map package of New York for download.
Here is an example that gets the status of the New York map package on the device. Here is an example that gets the status of the New York map package on the device.
``` syntax ```xml
<SyncML> <SyncML>
<SyncBody> <SyncBody>
<Get> <Get>

2
windows/client-management/mdm/messaging-csp.md
View File

@ -55,7 +55,7 @@ The following diagram shows the Messaging configuration service provider in tree
**SyncML example** **SyncML example**
``` syntax ```xml
<SyncML xmlns="SYNCML:SYNCML1.2"> <SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody> <SyncBody>
<Replace> <Replace>

Some files were not shown because too many files have changed in this diff Show More