mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 06:17:22 +00:00
Merge branch 'master' into App-v-revision
This commit is contained in:
Heidi Lohr
commit
fe5e13f5fa
@ -2,9 +2,9 @@
|
||||
"build_entry_point": "",
|
||||
"docsets_to_publish": [
|
||||
{
|
||||
"docset_name": "bcs-vsts",
|
||||
"docset_name": "bcs-VSTS",
|
||||
"build_source_folder": "bcs",
|
||||
"build_output_subfolder": "bcs-vsts",
|
||||
"build_output_subfolder": "bcs-VSTS",
|
||||
"locale": "en-us",
|
||||
"monikers": [],
|
||||
"moniker_ranges": [],
|
||||
|
||||
@ -1,3 +1,3 @@
|
||||
---
|
||||
redirect_url: https://docs.microsoft.com/microsoft-365/business/index
|
||||
redirect_url: /microsoft-365/business/
|
||||
---
|
||||
|
||||
@ -191,6 +191,17 @@ The <url> attribute, as part of the <site> element in the v.2 versio
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>allow-redirect</td>
|
||||
<td>A boolean attribute of the <open-in> element that controls the behavior for redirected sites. Setting this attribute to "true" indicates that the site will open in IE11 or Microsoft Edge even if the site is navigated to as part of a HTTP or meta refresh redirection chain. Omitting the attribute is equivalent to "false" (sites in redirect chain will not open in another browser).
|
||||
<p><b>Example</b>
|
||||
<pre class="syntax">
|
||||
<site url="contoso.com/travel">
|
||||
<open-in allow-redirect="true">IE11</open-in>
|
||||
</site></pre>
|
||||
In this example, if http://contoso.com/travel is encountered in a redirect chain in Microsoft Edge, it will be opened in Internet Explorer.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>version</td>
|
||||
<td>Specifies the version of the Enterprise Mode Site List. This attribute is supported for the <site-list> element.</td>
|
||||
<td>Internet Explorer 11 and Microsoft Edge</td>
|
||||
|
||||
@ -23,7 +23,7 @@ You'll need to configure Microsoft Store for Education to accept the services ag
|
||||
|
||||
You can watch the video to see how this is done, or follow the step-by-step guide. </br>
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/Jnbssq0gC_g" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/Jnbssq0gC_g]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Configure Microsoft Store for Education (DA)](https://www.youtube.com/watch?v=bStgEpHbEXw)
|
||||
|
||||
@ -53,11 +53,6 @@ You can watch the descriptive audio version here: [Microsoft Education: Configur
|
||||
|
||||
Your Microsoft Store for Education account is now linked to Intune for Education so let's set that up next.
|
||||
|
||||
<!--
|
||||
> [!div class="nextstepaction"]
|
||||
> [Use Intune for Education to manage groups, apps, and settings](use-intune-for-education.md)
|
||||
-->
|
||||
|
||||
> [!div class="step-by-step"]
|
||||
[<< Use School Data Sync to import student data](use-school-data-sync.md)
|
||||
[Use Intune for Education to manage groups, apps, and settings >>](use-intune-for-education.md)
|
||||
|
||||
@ -46,10 +46,6 @@ To get started, IT administrators need to use the Office 365 Admin Center to ena
|
||||
|
||||
You can find more info about how to control which users in your school can use Microsoft Teams, turn off group creation, configure tenant-level settings, and more by reading the *Guide for IT admins* getting started guide in the <a href="https://aka.ms/MeetTeamsEdu" target="_blank">Meet Microsoft Teams</a> page.
|
||||
|
||||
<!--
|
||||
> [!div class="nextstepaction"]
|
||||
> [Configure Microsoft Store for Education](configure-microsoft-store-for-education.md)
|
||||
-->
|
||||
|
||||
> [!div class="step-by-step"]
|
||||
[<< Use School Data Sync to import student data](use-school-data-sync.md)
|
||||
|
||||
@ -26,7 +26,7 @@ Once you've set up your Windows 10 education device, it's worth checking to veri
|
||||
|
||||
You can watch the video to see how this is done, or follow the step-by-step guide. </br>
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/nhQ_4okWFmk" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/nhQ_4okWFmk]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Verify Windows 10 education devices are Azure AD joined and managed (DA)](https://www.youtube.com/watch?v=_hVIxaEsu2Y)
|
||||
|
||||
@ -78,7 +78,7 @@ You can follow the rest of the walkthrough to finish setup and complete other ta
|
||||
|
||||
You can watch the following video to see how to update group settings in Intune for Education and configure Azure settings. Or, you can follow the step-by-step guide for these tasks and the other tasks listed above.
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/M6-k73dZOfw" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/M6-k73dZOfw]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Update settings, apps, and Azure AD settings for your education tenant (DA)](https://www.youtube.com/watch?v=-Rz3VcDXbzs)
|
||||
|
||||
|
||||
@ -23,7 +23,7 @@ Schools can use Office 365 to save time and be more productive. Built with power
|
||||
|
||||
Don't have an Office 365 for Education verified tenant or just starting out? Follow these steps to set up an Office 365 for Education tenant. [Learn more about Office 365 for Education plans and pricing](https://products.office.com/academic/compare-office-365-education-plans). </br>
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/X7bscA-knaY" frameborder="0" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/X7bscA-knaY]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Set up an Office 365 Education tenant (DA)](https://www.youtube.com/watch?v=d5tQ8KoB3ic)
|
||||
|
||||
|
||||
@ -19,7 +19,7 @@ If you are setting up a Windows 10 device invidividually, and network bandwidth
|
||||
|
||||
You can watch the video to see how this is done, or follow the step-by-step guide. </br>
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/nADWqBYvqXk" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/nADWqBYvqXk]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Set up a new Windows 10 education devices using the Windows setup experience (DA)](https://www.youtube.com/watch?v=_UtS1Cz2Pno)
|
||||
|
||||
|
||||
@ -41,7 +41,7 @@ Note that for verified education tenants, Microsoft automatically provisions you
|
||||
|
||||
You can watch the video to see how this is done, or follow the step-by-step guide. </br>
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/c3BLoZZw3TQ" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/c3BLoZZw3TQ]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Use Intune for Education to manage groups, apps, and settings (DA)](https://youtu.be/Tejxfc4V7cQ)
|
||||
|
||||
|
||||
@ -25,7 +25,7 @@ Follow all the steps in this section to use SDS and sample CSV files in a trial
|
||||
|
||||
You can watch the video to see how this is done, or follow the step-by-step guide.</br>
|
||||
|
||||
<center><iframe src="https://www.youtube.com/embed/ehSU8jr8T24" width="560" height="315" allowFullScreen frameBorder="0"></iframe></center>
|
||||
> [!VIDEO https://www.youtube.com/embed/ehSU8jr8T24]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Use School Data Sync to import student data (DA)](https://www.youtube.com/watch?v=l4b086IMtvc)
|
||||
|
||||
|
||||
@ -31,10 +31,10 @@ ms.date: 01/12/2017
|
||||
|
||||
</br>
|
||||
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/EDU-Get-Started" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
> [!VIDEO https://www.youtube.com/embed/3nqooY9Iqq4]
|
||||
|
||||
</br>
|
||||
-->
|
||||
|
||||
|
||||
|
||||
## <a name="edu-task1"></a>1. Log in and connect to the school network
|
||||
@ -49,10 +49,10 @@ To try out the educator tasks, start by logging in as a teacher.
|
||||
|
||||
## <a name="edu-task2"></a>2. Significantly improve student reading speed and comprehension
|
||||
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/EDU-Learning-Tools" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
> [!VIDEO https://www.youtube.com/embed/GCzSAslq_2Y]
|
||||
|
||||
</br>
|
||||
-->
|
||||
|
||||
|
||||
Learning Tools and the Immersive Reader can be used in the Microsoft Edge browser, Microsoft Word, and Microsoft OneNote to:
|
||||
* Increase fluency for English language learners
|
||||
@ -80,10 +80,10 @@ Learning Tools and the Immersive Reader can be used in the Microsoft Edge browse
|
||||
|
||||
## <a name="edu-task3"></a>3. Spark communication, critical thinking, and creativity in the classroom
|
||||
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/EDU-Teams" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
> [!VIDEO https://www.youtube.com/embed/riQr4Dqb8B8]
|
||||
|
||||
</br>
|
||||
-->
|
||||
|
||||
|
||||
Microsoft Teams is a digital hub that brings conversations, content, and apps together in one place. This guided tour walks you through the essential teaching features of the app. Then, through interactive prompts, experience how you can use this tool in your own classroom to spark digital classroom discussions, respond to student questions, organize content, and more!
|
||||
|
||||
@ -99,10 +99,10 @@ Take a guided tour of Microsoft Teams and test drive this digital hub.
|
||||
|
||||
## <a name="edu-task4"></a>4. Expand classroom collaboration and interaction between students
|
||||
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/EDU-OneNote" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
> [!VIDEO https://www.youtube.com/embed/dzDSWMb_fIE]
|
||||
|
||||
</br>
|
||||
-->
|
||||
|
||||
|
||||
Microsoft OneNote organizes curriculum and lesson plans for teachers and students to work together and at their own pace. It provides a digital canvas to store text, images, handwritten drawings, attachments, links, voice, and video.
|
||||
|
||||
@ -130,10 +130,9 @@ See how a group project comes together with opportunities to interact with other
|
||||
|
||||
## <a name="edu-task5"></a>5. Get kids to further collaborate and problem solve
|
||||
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/EDU-Minecraft-EE" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
> [!VIDEO https://www.youtube.com/embed/QI_bRNUugog]
|
||||
|
||||
</br>
|
||||
-->
|
||||
|
||||
Minecraft: Education Edition provides an immersive environment to develop creativity, collaboration, and problem-solving in an immersive environment where the only limit is your imagination.
|
||||
|
||||
|
||||
@ -20,9 +20,9 @@ ms.date: 12/11/2017
|
||||
|
||||
</br>
|
||||
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/edu-welcome" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
-->
|
||||
> [!VIDEO https://www.youtube.com/embed/azoxUYWbeGg]
|
||||
|
||||
</br>
|
||||
|
||||
Welcome to Microsoft Education Trial in a Box. We built this trial to make it easy to try our latest classroom technologies. We have two scenarios for you to try: one for educators and one for IT. We recommend starting with Educators. To begin, click **Get started** below.
|
||||
|
||||
|
||||
@ -35,9 +35,8 @@ To get the most out of Microsoft Education, we've pre-configured your tenant for
|
||||
If you run into any problems while following the steps in this guide, or you have questions about Trial in a Box or Microsoft Education, see [Microsoft Education Trial in a Box Support](support-options.md).
|
||||
|
||||
</br>
|
||||
<!-- hiding placeholder
|
||||
<center><iframe width="560" height="315" src="https://aka.ms/EDU-IT-Admin-Setup" frameborder="3" allow="autoplay; encrypted-media" allowfullscreen></iframe></center>
|
||||
-->
|
||||
|
||||
> [!VIDEO https://www.youtube.com/embed/cVVKCpO2tyI]
|
||||
|
||||
</br>
|
||||
|
||||
|
||||
@ -42,7 +42,7 @@ Set up School PCs makes it easy to set up Windows 10 PCs with Microsoft's recomm
|
||||
|
||||
You can watch the video to see how to use the Set up School PCs app, or follow the step-by-step guide. </br>
|
||||
|
||||
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/2ZLup_-PhkA" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe>
|
||||
> [!VIDEO https://www.youtube.com/embed/2ZLup_-PhkA]
|
||||
|
||||
You can watch the descriptive audio version here: [Microsoft Education: Use the Set up School PCs app (DA)](https://www.youtube.com/watch?v=qqe_T2LkGsI)
|
||||
|
||||
@ -89,6 +89,16 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the
|
||||
5. Click **Just remove my files**.
|
||||
6. Click **Reset**.
|
||||
|
||||
* **Use an NTFS-formatted USB key**
|
||||
|
||||
If you're planning to install several apps, the Set up School PCs package may exceed 4 GB. Check if your USB drive format is FAT32. If it is, you won't be able to save more than 4 GB of data on the drive. To work around this, reformat the USB drive to use the NTFS format. To do this:
|
||||
|
||||
1. Insert the USB key into your computer.
|
||||
2. Go to the Start menu and type **This PC** and then select the **This PC (Desktop app)** from the search results.
|
||||
3. In the **Devices and drivers** section, find the USB drive, select and then right-click to bring up options.
|
||||
4. Select **Format** from the list to bring up the **Format <DRIVE NAME>** window.
|
||||
5. Set **File system** to **NTFS** and then click **Start** to format the drive.
|
||||
|
||||
* **Use more than one USB key**
|
||||
|
||||
If you are setting up multiple PCs, you can set them up at the same time. Just save the provisioning package to another USB drive. Create two keys and you can run it on two PCs at once, and so on.
|
||||
@ -113,6 +123,7 @@ You can watch the descriptive audio version here: [Microsoft Education: Use the
|
||||
- You must be a global admin in the Microsoft Store for Education.
|
||||
- It's best if you sign up for and [configure Intune for Education](../get-started/use-intune-for-education.md) before using the Set up School PCs app.
|
||||
- Have a USB drive, 1 GB or larger, to save the provisioning package. We recommend an 8 GB or larger USB drive if you're installing Office.
|
||||
- Check the default file system format for your USB drive. You may need to set this to NTFS to save a provisioning package that's 4 GB or larger.
|
||||
|
||||
## Set up School PCs step-by-step
|
||||
|
||||
|
||||
BIN
store-for-business/images/invite-people.png
Normal file
BIN
store-for-business/images/invite-people.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 6.7 KiB |
BIN
store-for-business/images/mpsa-link.png
Normal file
BIN
store-for-business/images/mpsa-link.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 6.3 KiB |
BIN
store-for-business/images/msfb-products-services.png
Normal file
BIN
store-for-business/images/msfb-products-services.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 68 KiB |
BIN
store-for-business/images/msfb-settings-icon.png
Normal file
BIN
store-for-business/images/msfb-settings-icon.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 11 KiB |
BIN
store-for-business/images/msfb-wn-1801-products-services.png
Normal file
BIN
store-for-business/images/msfb-wn-1801-products-services.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 14 KiB |
BIN
store-for-business/images/office-logo.png
Normal file
BIN
store-for-business/images/office-logo.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 5.1 KiB |
BIN
store-for-business/images/product-and-service-icon.png
Normal file
BIN
store-for-business/images/product-and-service-icon.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 2.7 KiB |
BIN
store-for-business/images/products-and-services-photoshop.png
Normal file
BIN
store-for-business/images/products-and-services-photoshop.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 21 KiB |
BIN
store-for-business/images/products-and-services-ppt.png
Normal file
BIN
store-for-business/images/products-and-services-ppt.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 22 KiB |
@ -6,7 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: store
|
||||
author: TrudyHa
|
||||
ms.date: 1/8/2018
|
||||
ms.date: 2/8/2018
|
||||
---
|
||||
|
||||
# Microsoft Store for Business and Education release history
|
||||
@ -15,6 +15,10 @@ Microsoft Store for Business and Education regularly releases new and improved f
|
||||
|
||||
Looking for info on the latest release? Check out [What's new in Microsoft Store for Business and Education](whats-new-microsoft-store-business-education.md)
|
||||
|
||||
## December 2017
|
||||
|
||||
- Bug fixes and permformance improvements.
|
||||
|
||||
## November 2017
|
||||
|
||||
- **Export list of Minecraft: Education Edition users** - Admins and teachers can now export a list of users who have Minecraft: Education Edition licenses assigned to them. Click **Export users**, and Store for Education creates an Excel spreadsheet for you, and saves it as a .csv file.
|
||||
|
||||
@ -6,7 +6,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: store
|
||||
author: TrudyHa
|
||||
ms.date: 1/8/2018
|
||||
ms.date: 2/8/2018
|
||||
---
|
||||
|
||||
# What's new in Microsoft Store for Business and Education
|
||||
@ -15,9 +15,16 @@ Microsoft Store for Business and Education regularly releases new and improved f
|
||||
|
||||
## Latest updates for Store for Business and Education
|
||||
|
||||
**December 2017**
|
||||
**January 2018**
|
||||
|
||||
| | |
|
||||
|--------------------------------------|---------------------------------|
|
||||
|  |**One place for apps, software, and subscriptions**<br /><br /> The new **Products & services** page in Microsoft Store for Business and Education gives customers a single place to manage all products and services. This includes Apps, Software, and Subscriptions that your organization acquired or manages through Microsoft Store for Business. This change centralizes these products, but the platform changes also improve overall performance. <br /><br />**Applies to**:<br /> Microsoft Store for Business <br /> Microsoft Store for Education |
|
||||
|  |**Upgrade Office 365 trial subscription**<br /><br> Customers with Office 365 trials can now transition their trial to a paid subscription in Microsoft Store for Business. This works for trials you acquired from Microsoft Store for Business, or Office Admin Portal. <br /><br />**Applies to**:<br /> Microsoft Store for Business <br /> Microsoft Store for Education |
|
||||
|  |**Supporting Microsoft Product and Services Agreement customers**<br /><br>If you are purchasing under the Microsoft Products and Services Agreement (MPSA), you can use Microsoft Store for Business. Here you will find access to Products & Services purchased, Downloads & Keys, Software Assurance benefits, Order history, and Agreement details. Also, we added the ability to associate your purchasing account to your tenant. <br /><br />**Applies to**:<br /> Microsoft Store for Business <br /> Microsoft Store for Education |
|
||||
|  |**Microsoft Product and Services Agreement customers can invite people to take roles**<br /><br> MPSA admins can invite people to take Microsoft Store for Business roles even if the person is not in their tenant. You provide an email address when you assign the role, and we'll add the account to your tenant and assign the role. <br /><br />**Applies to**:<br /> Microsoft Store for Business <br /> Microsoft Store for Education |
|
||||
|
||||
|
||||
We’ve been working on bug fixes and performance improvements to provide you a better experience. Stay tuned for new features!
|
||||
|
||||
<!---
|
||||
We’ve been working on bug fixes and performance improvements to provide you a better experience. Stay tuned for new features!
|
||||
@ -30,6 +37,9 @@ We’ve been working on bug fixes and performance improvements to provide you a
|
||||
|
||||
## Previous releases and updates
|
||||
|
||||
[December 2017](release-history-microsoft-store-business-education.md#december-2017)
|
||||
- Bug fixes and permformance improvements
|
||||
|
||||
[November 2017](release-history-microsoft-store-business-education.md#november-2017)
|
||||
- Export list of Minecraft: Education Edition users
|
||||
- Bug fixes and performance improvements
|
||||
|
||||
@ -20,6 +20,7 @@ This topic lists new and updated topics in the [Configure Windows 10](index.md)
|
||||
New or changed topic | Description
|
||||
--- | ---
|
||||
[Create a Windows 10 kiosk that runs multiple apps](lock-down-windows-10-to-specific-apps.md) | Added steps for configuring a kiosk in Microsoft Intune.
|
||||
[Customize Windows 10 Start and taskbar with mobile device management (MDM)](customize-windows-10-start-screens-by-using-mobile-device-management.md) | Updated the instructions for applying a customized Start layout using Microsoft Intune.
|
||||
|
||||
## January 2018
|
||||
|
||||
|
||||
@ -8,7 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerms
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 11/15/2017
|
||||
ms.date: 02/08/2018
|
||||
---
|
||||
|
||||
# Customize Windows 10 Start and taskbar with mobile device management (MDM)
|
||||
@ -45,86 +45,37 @@ Two features enable Start layout control:
|
||||
|
||||
|
||||
|
||||
- In MDM, you set the path to the .xml file that defines the Start layout using an OMA-URI setting, which is based on the [Policy configuration service provider (CSP)](https://go.microsoft.com/fwlink/p/?LinkID=623244).
|
||||
- In Microsoft Intune, you select the Start layout XML file and add it to a device configuration profile.
|
||||
|
||||
## <a href="" id="bkmk-domaingpodeployment"></a>Create a policy for your customized Start layout
|
||||
|
||||
|
||||
This example uses Microsoft Intune to configure an MDM policy that applies a customized Start layout. See the documentation for your MDM solution for help in applying the policy.
|
||||
|
||||
1. In the Start layout file created when you ran **Export-StartLayout**, replace markup characters with escape characters, and save the file. (You can replace the characters manually or use an online tool.)
|
||||
1. In the Microsoft Azure portal, search for **Intune** or go to **More services** > **Intune**.
|
||||
|
||||
Example of a layout file produced by Export-StartLayout:
|
||||
2. Select **Device configuration**.
|
||||
|
||||
<span codelanguage="XML"></span>
|
||||
<table>
|
||||
<colgroup>
|
||||
<col width="100%" />
|
||||
</colgroup>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th align="left">XML</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr class="odd">
|
||||
<td align="left"><pre><code><LayoutModificationTemplate Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
|
||||
<DefaultLayoutOverride>
|
||||
<StartLayoutCollection>
|
||||
<defaultlayout:StartLayout GroupCellWidth="6" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout">
|
||||
<start:Group Name="Life at a glance" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout">
|
||||
<start:Tile Size="2x2" Column="0" Row="0" AppUserModelID="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge" />
|
||||
<start:Tile Size="2x2" Column="4" Row="0" AppUserModelID="Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI" />
|
||||
<start:Tile Size="2x2" Column="2" Row="0" AppUserModelID="Microsoft.BingWeather_8wekyb3d8bbwe!App" />
|
||||
</start:Group>
|
||||
</defaultlayout:StartLayout>
|
||||
</StartLayoutCollection>
|
||||
</DefaultLayoutOverride>
|
||||
</LayoutModificationTemplate></code></pre></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
3. Select **Profiles**.
|
||||
|
||||
Example of the same layout file with escape characters replacing the markup characters:
|
||||
4. Select **Create profile**.
|
||||
|
||||
```
|
||||
&lt;wdcml:p xmlns:wdcml=&quot;http://microsoft.com/wdcml&quot;&gt;Example of a layout file produced by Export-StartLayout:&lt;/wdcml:p&gt;&lt;wdcml:snippet xmlns:wdcml=&quot;http://microsoft.com/wdcml&quot;&gt;&lt;![CDATA[&lt;LayoutModificationTemplate Version=&quot;1&quot; xmlns=&quot;http://schemas.microsoft.com/Start/2014/LayoutModification&quot;&gt;
|
||||
&lt;DefaultLayoutOverride&gt;
|
||||
&lt;StartLayoutCollection&gt;
|
||||
&lt;defaultlayout:StartLayout GroupCellWidth=&quot;6&quot; xmlns:defaultlayout=&quot;http://schemas.microsoft.com/Start/2014/FullDefaultLayout&quot;&gt;
|
||||
&lt;start:Group Name=&quot;Life at a glance&quot; xmlns:start=&quot;http://schemas.microsoft.com/Start/2014/StartLayout&quot;&gt;
|
||||
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;0&quot; Row=&quot;0&quot; AppUserModelID=&quot;Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge&quot; /&gt;
|
||||
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;4&quot; Row=&quot;0&quot; AppUserModelID=&quot;Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI&quot; /&gt;
|
||||
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;2&quot; Row=&quot;0&quot; AppUserModelID=&quot;Microsoft.BingWeather_8wekyb3d8bbwe!App&quot; /&gt;
|
||||
&lt;/start:Group&gt;
|
||||
&lt;/defaultlayout:StartLayout&gt;
|
||||
&lt;/StartLayoutCollection&gt;
|
||||
&lt;/DefaultLayoutOverride&gt;
|
||||
&lt;/LayoutModificationTemplate&gt;]]&gt;&lt;/wdcml:snippet&gt;
|
||||
```
|
||||
5. Enter a friendly name for the profile.
|
||||
|
||||
2. In the Microsoft Intune administration console, click **Policy** > **Add Policy**.
|
||||
6. Select **Windows 10 and later** for the platform.
|
||||
|
||||
3. Under **Windows**, choose a **Custom Configuration (Windows 10 Desktop and Mobile and later)** policy.
|
||||
7. Select **Device restrictions for the profile type.
|
||||
|
||||
4. Enter a name (mandatory) and description (optional) for the policy.
|
||||
8. Select **Start**.
|
||||
|
||||
5. In the **OMA-URI Settings** section, click **Add.**
|
||||
9. In **Start menu layout**, browse to and select your Start layout XML File.
|
||||
|
||||
6. In **Add or Edit OMA-URI Setting**, enter the following information.
|
||||
10. Select **OK** twice, and then select **Create**.
|
||||
|
||||
| Item | Information |
|
||||
|----|----|
|
||||
| **Setting name** | Enter a unique name for the OMA-URI setting to help you identify it in the list of settings. |
|
||||
| **Setting description** | Provide a description that gives an overview of the setting and other relevant information to help you locate it. |
|
||||
| **Data type** | **String** |
|
||||
| **OMA-URI (case sensitive)** | **./User/Vendor/MSFT/Policy/Config/Start/StartLayout** |
|
||||
| **Value** | Paste the contents of the Start layout .xml file that you created. |
|
||||
11. Assign the profile to a device group.
|
||||
|
||||
|
||||
7. Click **OK** to save the setting and return to the **Create Policy** page.
|
||||
For other MDM solutions, you may need to use an OMA-URI setting for Start layout, based on the [Policy configuration service provider (CSP)](https://go.microsoft.com/fwlink/p/?LinkID=623244). The OMA-URI setting is `./User/Vendor/MSFT/Policy/Config/Start/StartLayout`.
|
||||
|
||||
8. Click **Save Policy**.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
||||
@ -51,7 +51,7 @@ The following policy settings can be configured for UE-V.
|
||||
<td align="left"><p>The default is enabled.</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Roam Windows settings</p></td>
|
||||
<td align="left"><p>Synchronize Windows settings</p></td>
|
||||
<td align="left"><p>Computers and Users</p></td>
|
||||
<td align="left"><p>This Group Policy setting configures the synchronization of Windows settings.</p></td>
|
||||
<td align="left"><p>Select which Windows settings synchronize between computers.</p>
|
||||
|
||||
@ -67,6 +67,7 @@
|
||||
### [VPN auto-triggered profile options](vpn\vpn-auto-trigger-profile.md)
|
||||
### [VPN security features](vpn\vpn-security-features.md)
|
||||
### [VPN profile options](vpn\vpn-profile-options.md)
|
||||
### [How to configure Diffie Hellman protocol over IKEv2 VPN connections](vpn\how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md)
|
||||
### [How to use single sign-on (SSO) over VPN and Wi-Fi connections](vpn\how-to-use-single-sign-on-sso-over-vpn-and-wi-fi-connections.md)
|
||||
### [Windows 10 credential theft mitigation guide abstract](windows-credential-theft-mitigation-guide-abstract.md)
|
||||
|
||||
|
||||
@ -0,0 +1,44 @@
|
||||
---
|
||||
title: How to configure Diffie Hellman protocol over IKEv2 VPN connections (Windows 10)
|
||||
description: Explains how to secure VPN connections for Diffie Hellman Group 2
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security, networking
|
||||
author: shortpatti
|
||||
ms.author: pashort
|
||||
ms.localizationpriority: medium
|
||||
ms.date: 02/08/2018
|
||||
---
|
||||
|
||||
# How to configure Diffie Hellman protocol over IKEv2 VPN connections
|
||||
|
||||
>Applies To: Windows Server (Semi-Annual Channel), Windows Server 2016, Windows 10
|
||||
|
||||
In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges.
|
||||
To secure the connections, update the configuration of VPN servers and clients by running VPN cmdlets.
|
||||
|
||||
## VPN server
|
||||
|
||||
For VPN servers that run Windows Server 2012 R2 or later, you need to run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps) to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration.
|
||||
|
||||
```powershell
|
||||
Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy
|
||||
```
|
||||
|
||||
On an earlier versions of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx). Since `Set-VpnServerIPsecConfiguration` doesn’t have `-TunnelType`, the configuration applies to all tunnel types on the server.
|
||||
|
||||
```powershell
|
||||
Set-VpnServerIPsecConfiguration -CustomPolicy
|
||||
```
|
||||
|
||||
## VPN client
|
||||
|
||||
For VPN client, you need to configure each VPN connection.
|
||||
For example, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps) and specify the name of the connection:
|
||||
|
||||
|
||||
```powershell
|
||||
Set-VpnConnectionIPsecConfiguration -ConnectionName <String>
|
||||
```
|
||||
|
||||
@ -9,9 +9,9 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
ms.localizationpriority: medium
|
||||
author: iaanw
|
||||
ms.author: iawilt
|
||||
ms.date: 11/20/2017
|
||||
author: andreabichsel
|
||||
ms.author: v-anbic
|
||||
ms.date: 02/08/2018
|
||||
---
|
||||
|
||||
|
||||
@ -38,7 +38,9 @@ Block at first sight is a feature of Windows Defender Antivirus cloud-delivered
|
||||
|
||||
It is enabled by default when certain pre-requisite settings are also enabled. In most cases, these pre-requisite settings are also enabled by default, so the feature is running without any intervention. You can use group policy settings to confirm the feature is enabled.
|
||||
|
||||
You can also [specify how long the file should be prevented from running](configure-cloud-block-timeout-period-windows-defender-antivirus.md) while the cloud-based protection service analyzes the file.
|
||||
You can [specify how long the file should be prevented from running](configure-cloud-block-timeout-period-windows-defender-antivirus.md) while the cloud-based protection service analyzes the file.
|
||||
|
||||
You can also [customize the message displayed on users' desktops](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-security-center/wdsc-customize-contact-information) when a file is blocked. You can change the company name, contact information, and message URL.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> There is no specific individual setting in System Center Configuration Manager to enable or disable Block at First Sight. It is enabled by default when the pre-requisite settings are configured correctly. You must use Group Policy settings to enable or disable the feature.
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user