mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-15 10:23:37 +00:00
Merge remote-tracking branch 'refs/remotes/origin/master' into 6641851
This commit is contained in:
Maggie Evans
@ -66,6 +66,7 @@
|
||||
#### [Security Considerations for UE-V](uev-security-considerations.md)
|
||||
## [Windows Store for Business](windows-store-for-business.md)
|
||||
### [Sign up and get started](sign-up-windows-store-for-business-overview.md)
|
||||
####[Windows Store for Business overview](windows-store-for-business-overview.md)
|
||||
#### [Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md)
|
||||
#### [Sign up for Windows Store for Business](sign-up-windows-store-for-business.md)
|
||||
#### [Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md)
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Changes to Group Policy settings for Windows 10 Start
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile, devices
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Configure devices without MDM
|
||||
|
||||
@ -12,7 +12,8 @@ localizationpriority: medium
|
||||
|
||||
Starting in Windows 10, version 1607, administrators can pin additional apps to the taskbar and remove default pinned apps from the taskbar by adding a `<TaskbarLayout>` section to a layout modification XML file. This method never removes user-pinned apps from the taskbar.
|
||||
|
||||
> **Note:** The only aspect of the taskbar that can currently be configured by the layout modification XML file is the layout.
|
||||
> [!NOTE]
|
||||
> The only aspect of the taskbar that can currently be configured by the layout modification XML file is the layout.
|
||||
|
||||
You can specify different taskbar configurations based on device locale and region. There is no limit on the number of apps that you can pin. You specify apps using the [Application User Model ID (AUMID)](http://go.microsoft.com/fwlink/p/?LinkId=614867) or Desktop Application Link Path (the local path to the application).
|
||||
|
||||
@ -20,7 +21,8 @@ If you specify an app to be pinned that is not installed on the computer, it won
|
||||
|
||||
The order of apps in the xml file dictates order of apps on taskbar from left to right, to the right of any existing apps pinned by user.
|
||||
|
||||
> **Note** In operating systems configured to use a right-to-left language, the taskbar order will be reversed.
|
||||
> [!NOTE]
|
||||
> In operating systems configured to use a right-to-left language, the taskbar order will be reversed.
|
||||
|
||||
The following example shows how apps will be pinned: Windows default apps to the left (blue circle), apps pinned by the user in the center (orange triangle), and apps that you pin using XML to the right (green square).
|
||||
|
||||
@ -220,7 +222,8 @@ The resulting taskbar for computers in any other country region:
|
||||
|
||||
|
||||
|
||||
> **Note** [Look up country and region codes (use the ISO Short column)](http://go.microsoft.com/fwlink/p/?LinkId=786445)
|
||||
> [!NOTE]
|
||||
> [Look up country and region codes (use the ISO Short column)](http://go.microsoft.com/fwlink/p/?LinkId=786445)
|
||||
|
||||
|
||||
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Customize and export Start layout
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Customize Windows 10 Start and taskbar with Group Policy
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Customize Windows 10 Start with mobile device management (MDM)
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Customize Windows 10 Start and taskbar with ICD and provisioning packages
|
||||
|
||||
@ -5,6 +5,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: brianlic-msft
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Group Policies that apply only to Windows 10 Enterprise and Education Editions
|
||||
@ -20,7 +21,7 @@ In Windows 10, version 1607, the following Group Policies apply only to Windows
|
||||
| **Configure Spotlight on lock screen** | User Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md). Note that an additional **Cloud Content** policy, **Do not suggest third-party content in Windows spotlight**, does apply to Windows 10 Pro. |
|
||||
| **Turn off all Windows Spotlight features** | User Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md) |
|
||||
| **Turn off Microsoft consumer features** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md) |
|
||||
| **Do not display the lock screen** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md |
|
||||
| **Do not display the lock screen** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md) |
|
||||
| **Do not require CTRL+ALT+DEL** </br>combined with</br>**Turn off app notifications on the lock screen** | Computer Configuration > Administrative Templates > System > Logon </br>and</br>Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Interactive logon | When both of these policy settings are enabled, the combination will also disable lock screen apps ([assigned access](set-up-a-device-for-anyone-to-use.md)) on Windows 10 Enterprise and Windows 10 Education only. These policy settings can be applied to Windows 10 Pro, but lock screen apps will not be disabled on Windows 10 Pro. </br></br>**Important:** The description for **Interactive logon: Do not require CTRL+ALT+DEL** in the Group Policy Editor incorrectly states that it only applies to Windows 10 Enterprise and Education. The description will be corrected in a future release.|
|
||||
| **Do not show Windows Tips** | Computer Configuration > Administrative Templates > Windows Components > Cloud Content | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md |
|
||||
| **Force a specific default lock screen image** | Computer Configuration > Administrative Templates > Control Panel > Personalization | For more info, see [Windows spotlight on the lock screen](windows-spotlight.md) |
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Guidelines for choosing an app for assigned access (kiosk mode)
|
||||
|
||||
@ -6,6 +6,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Introduction to configuration service providers (CSPs) for IT pros
|
||||
|
||||
@ -7,6 +7,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Join Windows 10 Mobile to Azure Active Directory
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: edu, security
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Lock down Windows 10 to specific apps
|
||||
@ -114,6 +115,10 @@ To learn more about locking down features, see [Customizations for Windows 10 En
|
||||
|
||||
Configure the Start menu on the device to only show tiles for the permitted apps. You will make the changes manually, export the layout to an .xml file, and then apply that file to devices to prevent users from making changes. For instructions, see [Manage Windows 10 Start layout options](windows-10-start-layout-options-and-policies.md).
|
||||
|
||||
## Related topics
|
||||
|
||||
- [Provisioning packages for Windows 10](../deploy/provisioning-packages.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security, mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Lock down Windows 10
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Lockdown features from Windows Embedded 8.1 Industry
|
||||
|
||||
@ -7,6 +7,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security, mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Configure Windows 10 Mobile using Lockdown XML
|
||||
@ -22,7 +23,8 @@ This topic provides example XML that you can use in your own lockdown XML file t
|
||||
|
||||
Lockdown XML is an XML file that contains settings for Windows 10 Mobile. When you deploy the lockdown XML file to a device, it is saved on the device as **wehlockdown.xml**. When the device boots, it looks for wehlockdown.xml and applies any settings configured in the file. In this topic, you'll learn how to create an XML file that contains all lockdown entries available in the AssignedAccessXml area of the [EnterpriseAssignedAccess configuration service provider (CSP)](http://go.microsoft.com/fwlink/p/?LinkID=618601).
|
||||
|
||||
> **Note** On Windows 10 desktop editions, *assigned access* is a feature that lets you configure the device to run a single app above the lockscreen ([kiosk mode](set-up-a-device-for-anyone-to-use.md)). On a Windows 10 Mobile device, assigned access refers to the lockdown settings in AssignedAccessXml in the [EnterpriseAssignedAccess configuration service provider (CSP)](http://go.microsoft.com/fwlink/p/?LinkID=618601).
|
||||
> [!NOTE]
|
||||
> On Windows 10 desktop editions, *assigned access* is a feature that lets you configure the device to run a single app above the lockscreen ([kiosk mode](set-up-a-device-for-anyone-to-use.md)). On a Windows 10 Mobile device, assigned access refers to the lockdown settings in AssignedAccessXml in the [EnterpriseAssignedAccess configuration service provider (CSP)](http://go.microsoft.com/fwlink/p/?LinkID=618601).
|
||||
|
||||
If you're not familiar with CSPs, read [Introduction to configuration service providers (CSPs)](how-it-pros-can-use-configuration-service-providers.md) first.
|
||||
|
||||
@ -211,7 +213,8 @@ Search |  |  |  |  | 
|
||||
Custom 1, 2, and 3 |  |  | 
|
||||
|
||||
> **Note** Custom buttons are hardware buttons that can be added to devices by OEMs.
|
||||
> [!NOTE]
|
||||
> Custom buttons are hardware buttons that can be added to devices by OEMs.
|
||||
|
||||
In the following example, press-and-hold is disabled for the Back button.
|
||||
|
||||
@ -240,7 +243,8 @@ If you don't specify a button event, all actions for the button are disabled. In
|
||||
|
||||
ButtonRemapList lets you change the app that a button will run. You can remap the Search button and any custom buttons included by the OEM. You can't remap the Back, Start, or Camera buttons.
|
||||
|
||||
> **Warning** Button remapping can enable a user to open an application that is not in the allow list for that user role. Use button lock down to prevent application access for a user role.
|
||||
> [!WARNING]
|
||||
> Button remapping can enable a user to open an application that is not in the allow list for that user role. Use button lock down to prevent application access for a user role.
|
||||
|
||||
To remap a button, you specify the button, the event, and the product ID for the app that you want the event to open.
|
||||
In the following example, when a user presses the Search button, the phone dialer will open instead of the Search app.
|
||||
@ -268,7 +272,8 @@ CSPRunner is helpful when you are configuring a device to support multiple roles
|
||||
|
||||
In CSPRunner, you specify the CSP and settings using SyncML, a standardized markup language for device management. A SyncML section can include multiple settings, or you can use multiple SyncML sections -- it's up to you how you want to organize settings in this section.
|
||||
|
||||
> **Note** This description of SyncML is just the information that you need to use SyncML in a lockdown XML file. To learn more about SyncML, see [Structure of OMA DM provisioning files](https://msdn.microsoft.com/windows/hardware/dn914774.aspx).
|
||||
> [!NOTE]
|
||||
> This description of SyncML is just the information that you need to use SyncML in a lockdown XML file. To learn more about SyncML, see [Structure of OMA DM provisioning files](https://msdn.microsoft.com/windows/hardware/dn914774.aspx).
|
||||
|
||||
Let's start with the structure of SyncML in the following example:
|
||||
|
||||
@ -354,7 +359,9 @@ For a list of the settings and quick actions that you can allow or block, see [S
|
||||
|
||||
|
||||
By default, under Assigned Access, tile manipulation is turned off (blocked) and only available if enabled in the user’s profile. If tile manipulation is enabled in the user’s profile, they can pin/unpin, move, and resize tiles based on their preferences. When multiple people use one device and you want to enable tile manipulation for multiple users, you must enable it for each user in their user profile.
|
||||
> **Important** If a device is turned off then back on, the tiles reset to their predefined layout. If a device has only one profile, the only way to reset the tiles is to turn off then turn on the device. If a device has multiple profiles, the device resets the tiles to the predefined layout based on the logged-in user’s profile.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> If a device is turned off then back on, the tiles reset to their predefined layout. If a device has only one profile, the only way to reset the tiles is to turn off then turn on the device. If a device has multiple profiles, the device resets the tiles to the predefined layout based on the logged-in user’s profile.
|
||||
|
||||
```xml
|
||||
<Tiles>
|
||||
|
||||
@ -60,83 +60,85 @@ Here's what's covered in this article:
|
||||
|
||||
- [9. Mail synchronization](#bkmk-mailsync)
|
||||
|
||||
- [10. Microsoft Edge](#bkmk-edge)
|
||||
- [10. Microsoft Account](#bkmk-microsoft-account)
|
||||
|
||||
- [10.1 Microsoft Edge Group Policies](#bkmk-edgegp)
|
||||
- [11. Microsoft Edge](#bkmk-edge)
|
||||
|
||||
- [10.2 Microsoft Edge MDM policies](#bkmk-edge-mdm)
|
||||
- [11.1 Microsoft Edge Group Policies](#bkmk-edgegp)
|
||||
|
||||
- [10.3 Microsoft Edge Windows Provisioning](#bkmk-edge-prov)
|
||||
- [11.2 Microsoft Edge MDM policies](#bkmk-edge-mdm)
|
||||
|
||||
- [11. Network Connection Status Indicator](#bkmk-ncsi)
|
||||
- [11.3 Microsoft Edge Windows Provisioning](#bkmk-edge-prov)
|
||||
|
||||
- [12. Offline maps](#bkmk-offlinemaps)
|
||||
- [12. Network Connection Status Indicator](#bkmk-ncsi)
|
||||
|
||||
- [13. OneDrive](#bkmk-onedrive)
|
||||
- [13. Offline maps](#bkmk-offlinemaps)
|
||||
|
||||
- [14. Preinstalled apps](#bkmk-preinstalledapps)
|
||||
- [14. OneDrive](#bkmk-onedrive)
|
||||
|
||||
- [15. Settings > Privacy](#bkmk-settingssection)
|
||||
- [15. Preinstalled apps](#bkmk-preinstalledapps)
|
||||
|
||||
- [15.1 General](#bkmk-priv-general)
|
||||
- [16. Settings > Privacy](#bkmk-settingssection)
|
||||
|
||||
- [15.2 Location](#bkmk-priv-location)
|
||||
- [16.1 General](#bkmk-priv-general)
|
||||
|
||||
- [15.3 Camera](#bkmk-priv-camera)
|
||||
- [16.2 Location](#bkmk-priv-location)
|
||||
|
||||
- [15.4 Microphone](#bkmk-priv-microphone)
|
||||
- [16.3 Camera](#bkmk-priv-camera)
|
||||
|
||||
- [15.5 Notifications](#bkmk-priv-notifications)
|
||||
- [16.4 Microphone](#bkmk-priv-microphone)
|
||||
|
||||
- [15.6 Speech, inking, & typing](#bkmk-priv-speech)
|
||||
- [16.5 Notifications](#bkmk-priv-notifications)
|
||||
|
||||
- [15.7 Account info](#bkmk-priv-accounts)
|
||||
- [16.6 Speech, inking, & typing](#bkmk-priv-speech)
|
||||
|
||||
- [15.8 Contacts](#bkmk-priv-contacts)
|
||||
- [16.7 Account info](#bkmk-priv-accounts)
|
||||
|
||||
- [15.9 Calendar](#bkmk-priv-calendar)
|
||||
- [16.8 Contacts](#bkmk-priv-contacts)
|
||||
|
||||
- [15.10 Call history](#bkmk-priv-callhistory)
|
||||
- [16.9 Calendar](#bkmk-priv-calendar)
|
||||
|
||||
- [15.11 Email](#bkmk-priv-email)
|
||||
- [16.10 Call history](#bkmk-priv-callhistory)
|
||||
|
||||
- [15.12 Messaging](#bkmk-priv-messaging)
|
||||
- [16.11 Email](#bkmk-priv-email)
|
||||
|
||||
- [15.13 Radios](#bkmk-priv-radios)
|
||||
- [16.12 Messaging](#bkmk-priv-messaging)
|
||||
|
||||
- [15.14 Other devices](#bkmk-priv-other-devices)
|
||||
- [16.13 Radios](#bkmk-priv-radios)
|
||||
|
||||
- [15.15 Feedback & diagnostics](#bkmk-priv-feedback)
|
||||
- [16.14 Other devices](#bkmk-priv-other-devices)
|
||||
|
||||
- [15.16 Background apps](#bkmk-priv-background)
|
||||
- [16.15 Feedback & diagnostics](#bkmk-priv-feedback)
|
||||
|
||||
- [16. Software Protection Platform](#bkmk-spp)
|
||||
- [16.16 Background apps](#bkmk-priv-background)
|
||||
|
||||
- [17. Sync your settings](#bkmk-syncsettings)
|
||||
- [17. Software Protection Platform](#bkmk-spp)
|
||||
|
||||
- [18. Teredo](#bkmk-teredo)
|
||||
- [18. Sync your settings](#bkmk-syncsettings)
|
||||
|
||||
- [19. Wi-Fi Sense](#bkmk-wifisense)
|
||||
- [19. Teredo](#bkmk-teredo)
|
||||
|
||||
- [20. Windows Defender](#bkmk-defender)
|
||||
- [20. Wi-Fi Sense](#bkmk-wifisense)
|
||||
|
||||
- [21. Windows Media Player](#bkmk-wmp)
|
||||
- [21. Windows Defender](#bkmk-defender)
|
||||
|
||||
- [22. Windows spotlight](#bkmk-spotlight)
|
||||
- [22. Windows Media Player](#bkmk-wmp)
|
||||
|
||||
- [23. Windows Store](#bkmk-windowsstore)
|
||||
- [23. Windows spotlight](#bkmk-spotlight)
|
||||
|
||||
- [24. Windows Update Delivery Optimization](#bkmk-updates)
|
||||
- [24. Windows Store](#bkmk-windowsstore)
|
||||
|
||||
- [24.1 Settings > Update & security](#bkmk-wudo-ui)
|
||||
- [25. Windows Update Delivery Optimization](#bkmk-updates)
|
||||
|
||||
- [24.2 Delivery Optimization Group Policies](#bkmk-wudo-gp)
|
||||
- [25.1 Settings > Update & security](#bkmk-wudo-ui)
|
||||
|
||||
- [24.3 Delivery Optimization MDM policies](#bkmk-wudo-mdm)
|
||||
- [25.2 Delivery Optimization Group Policies](#bkmk-wudo-gp)
|
||||
|
||||
- [24.4 Delivery Optimization Windows Provisioning](#bkmk-wudo-prov)
|
||||
- [25.3 Delivery Optimization MDM policies](#bkmk-wudo-mdm)
|
||||
|
||||
- [25. Windows Update](#bkmk-wu)
|
||||
- [25.4 Delivery Optimization Windows Provisioning](#bkmk-wudo-prov)
|
||||
|
||||
- [26. Windows Update](#bkmk-wu)
|
||||
|
||||
## What's new in Windows 10, version 1607
|
||||
|
||||
@ -147,6 +149,7 @@ Here's a list of changes that were made to this article for Windows 10, version
|
||||
- Added a section on how to turn off automatic root updates to stop updating the certificate trust list in [1. Certificate trust lists](#certificate-trust-lists).
|
||||
- Added a new setting in [25. Windows Update](#bkmk-wu).
|
||||
- Changed the NCSI URL in [11. Network Connection Status Indicator](#bkmk-ncsi).
|
||||
- Added a section on how to turn off features that depend on Microsoft Account cloud authentication service [10. Microsoft Account](#bkmk-microsoft-account).
|
||||
|
||||
- Added the following Group Policies:
|
||||
|
||||
@ -351,11 +354,18 @@ To turn off the Windows Mail app:
|
||||
|
||||
- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Windows Mail** > **Turn off Windows Mail application**
|
||||
|
||||
### <a href="" id="bkmk-edge"></a>10. Microsoft Edge
|
||||
### <a href="" id="bkmk-microsoft-account"></a>10. Microsoft Account
|
||||
|
||||
To prevent communication to the Microsoft Account cloud authentication service. Many apps and system components that depend on Microsoft Account authentication may lose functionality. Some of them could be in unexpected ways.
|
||||
|
||||
- Change the **Start** REG\_DWORD registry setting in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentControlSet\\Services\\wlidsvc** to 4.
|
||||
|
||||
|
||||
### <a href="" id="bkmk-edge"></a>11. Microsoft Edge
|
||||
|
||||
Use either Group Policy or MDM policies to manage settings for Microsoft Edge. For more info, see [Microsoft Edge and privacy: FAQ](http://go.microsoft.com/fwlink/p/?LinkId=730682).
|
||||
|
||||
### <a href="" id="bkmk-edgegp"></a>10.1 Microsoft Edge Group Policies
|
||||
### <a href="" id="bkmk-edgegp"></a>11.1 Microsoft Edge Group Policies
|
||||
|
||||
Find the Microsoft Edge Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Edge**.
|
||||
|
||||
@ -385,7 +395,7 @@ The Windows 10, version 1511 Microsoft Edge Group Policy names are:
|
||||
| Open a new tab with an empty tab | Choose whether a new tab page appears. <br /> Default: Enabled |
|
||||
| Configure corporate Home pages | Choose the corporate Home page for domain-joined devices. <br /> Set this to **about:blank** |
|
||||
|
||||
### <a href="" id="bkmk-edge-mdm"></a>10.2 Microsoft Edge MDM policies
|
||||
### <a href="" id="bkmk-edge-mdm"></a>11.2 Microsoft Edge MDM policies
|
||||
|
||||
The following Microsoft Edge MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
||||
|
||||
@ -397,13 +407,13 @@ The following Microsoft Edge MDM policies are available in the [Policy CSP](http
|
||||
| Browser/AllowSearchSuggestionsinAddressBar | Choose whether the address bar shows search suggestions.. <br /> Default: Allowed |
|
||||
| Browser/AllowSmartScreen | Choose whether SmartScreen is turned on or off. <br /> Default: Allowed |
|
||||
|
||||
### <a href="" id="bkmk-edge-prov"></a>10.3 Microsoft Edge Windows Provisioning
|
||||
### <a href="" id="bkmk-edge-prov"></a>11.3 Microsoft Edge Windows Provisioning
|
||||
|
||||
Use Windows ICD to create a provisioning package with the settings for these policies, go to **Runtime settings** > **Policies**.
|
||||
|
||||
For a complete list of the Microsoft Edge policies, see [Available policies for Microsoft Edge](http://technet.microsoft.com/library/mt270204.aspx).
|
||||
|
||||
### <a href="" id="bkmk-ncsi"></a>11. Network Connection Status Indicator
|
||||
### <a href="" id="bkmk-ncsi"></a>12. Network Connection Status Indicator
|
||||
|
||||
Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftconnecttest.com/connecttest.txt to determine if the device can communicate with the Internet. For more info about NCIS, see [The Network Connection Status Icon](http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx).
|
||||
|
||||
@ -416,7 +426,7 @@ You can turn off NCSI through Group Policy:
|
||||
> [!NOTE]
|
||||
> After you apply this policy, you must restart the device for the policy setting to take effect.
|
||||
|
||||
### <a href="" id="bkmk-offlinemaps"></a>12. Offline maps
|
||||
### <a href="" id="bkmk-offlinemaps"></a>13. Offline maps
|
||||
|
||||
You can turn off the ability to download and update offline maps.
|
||||
|
||||
@ -426,13 +436,13 @@ You can turn off the ability to download and update offline maps.
|
||||
|
||||
- In Windows 10, version 1607 and later, apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Maps** > **Turn off unsolicited network traffic on the Offline Maps settings page**
|
||||
|
||||
### <a href="" id="bkmk-onedrive"></a>13. OneDrive
|
||||
### <a href="" id="bkmk-onedrive"></a>14. OneDrive
|
||||
|
||||
To turn off OneDrive in your organization:
|
||||
|
||||
- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **OneDrive** > **Prevent the usage of OneDrive for file storage**
|
||||
|
||||
### <a href="" id="bkmk-preinstalledapps"></a>14. Preinstalled apps
|
||||
### <a href="" id="bkmk-preinstalledapps"></a>15. Preinstalled apps
|
||||
|
||||
Some preinstalled apps get content before they are opened to ensure a great experience. You can remove these using the steps in this section.
|
||||
|
||||
@ -544,43 +554,43 @@ To remove the Get Skype app:
|
||||
|
||||
Remove the app for the current user. From an elevated command prompt, run the following Windows PowerShell command: **Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage**
|
||||
|
||||
### <a href="" id="bkmk-settingssection"></a>15. Settings > Privacy
|
||||
### <a href="" id="bkmk-settingssection"></a>16. Settings > Privacy
|
||||
|
||||
Use Settings > Privacy to configure some settings that may be important to your organization. Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC.
|
||||
|
||||
- [15.1 General](#bkmk-general)
|
||||
- [16.1 General](#bkmk-general)
|
||||
|
||||
- [15.2 Location](#bkmk-priv-location)
|
||||
- [16.2 Location](#bkmk-priv-location)
|
||||
|
||||
- [15.3 Camera](#bkmk-priv-camera)
|
||||
- [16.3 Camera](#bkmk-priv-camera)
|
||||
|
||||
- [15.4 Microphone](#bkmk-priv-microphone)
|
||||
- [16.4 Microphone](#bkmk-priv-microphone)
|
||||
|
||||
- [15.5 Notifications](#bkmk-priv-notifications)
|
||||
- [16.5 Notifications](#bkmk-priv-notifications)
|
||||
|
||||
- [15.6 Speech, inking, & typing](#bkmk-priv-speech)
|
||||
- [16.6 Speech, inking, & typing](#bkmk-priv-speech)
|
||||
|
||||
- [15.7 Account info](#bkmk-priv-accounts)
|
||||
- [16.7 Account info](#bkmk-priv-accounts)
|
||||
|
||||
- [15.8 Contacts](#bkmk-priv-contacts)
|
||||
- [16.8 Contacts](#bkmk-priv-contacts)
|
||||
|
||||
- [15.9 Calendar](#bkmk-priv-calendar)
|
||||
- [16.9 Calendar](#bkmk-priv-calendar)
|
||||
|
||||
- [15.10 Call history](#bkmk-priv-callhistory)
|
||||
- [16.10 Call history](#bkmk-priv-callhistory)
|
||||
|
||||
- [15.11 Email](#bkmk-priv-email)
|
||||
- [16.11 Email](#bkmk-priv-email)
|
||||
|
||||
- [15.12 Messaging](#bkmk-priv-messaging)
|
||||
- [16.12 Messaging](#bkmk-priv-messaging)
|
||||
|
||||
- [15.13 Radios](#bkmk-priv-radios)
|
||||
- [16.13 Radios](#bkmk-priv-radios)
|
||||
|
||||
- [15.14 Other devices](#bkmk-priv-other-devices)
|
||||
- [16.14 Other devices](#bkmk-priv-other-devices)
|
||||
|
||||
- [15.15 Feedback & diagnostics](#bkmk-priv-feedback)
|
||||
- [16.15 Feedback & diagnostics](#bkmk-priv-feedback)
|
||||
|
||||
- [15.16 Background apps](#bkmk-priv-background)
|
||||
- [16.16 Background apps](#bkmk-priv-background)
|
||||
|
||||
### <a href="" id="bkmk-general"></a>15.1 General
|
||||
### <a href="" id="bkmk-general"></a>16.1 General
|
||||
|
||||
**General** includes options that don't fall into other areas.
|
||||
|
||||
@ -658,7 +668,7 @@ To turn off **Let apps on my other devices use Bluetooth to open apps and contin
|
||||
|
||||
- Turn off the feature in the UI.
|
||||
|
||||
### <a href="" id="bkmk-priv-location"></a>15.2 Location
|
||||
### <a href="" id="bkmk-priv-location"></a>16.2 Location
|
||||
|
||||
In the **Location** area, you choose whether devices have access to location-specific sensors and which apps have access to the device's location.
|
||||
|
||||
@ -709,7 +719,7 @@ To turn off **Choose apps that can use your location**:
|
||||
|
||||
- Turn off each app using the UI.
|
||||
|
||||
### <a href="" id="bkmk-priv-camera"></a>15.3 Camera
|
||||
### <a href="" id="bkmk-priv-camera"></a>16.3 Camera
|
||||
|
||||
In the **Camera** area, you can choose which apps can access a device's camera.
|
||||
|
||||
@ -746,7 +756,7 @@ To turn off **Choose apps that can use your camera**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-microphone"></a>15.4 Microphone
|
||||
### <a href="" id="bkmk-priv-microphone"></a>16.4 Microphone
|
||||
|
||||
In the **Microphone** area, you can choose which apps can access a device's microphone.
|
||||
|
||||
@ -764,7 +774,7 @@ To turn off **Choose apps that can use your microphone**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-notifications"></a>15.5 Notifications
|
||||
### <a href="" id="bkmk-priv-notifications"></a>16.5 Notifications
|
||||
|
||||
In the **Notifications** area, you can choose which apps have access to notifications.
|
||||
|
||||
@ -778,7 +788,7 @@ To turn off **Let apps access my notifications**:
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
### <a href="" id="bkmk-priv-speech"></a>15.6 Speech, inking, & typing
|
||||
### <a href="" id="bkmk-priv-speech"></a>16.6 Speech, inking, & typing
|
||||
|
||||
In the **Speech, Inking, & Typing** area, you can let Windows and Cortana better understand your employee's voice and written input by sampling their voice and writing, and by comparing verbal and written input to contact names and calendar entrees.
|
||||
|
||||
@ -813,7 +823,7 @@ Apply the Speech/AllowSpeechModelUpdate MDM policy from the [Policy CSP](https:/
|
||||
|
||||
- Create a REG\_DWORD registry setting called **AllowSpeechModelUpdate** in **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\PolicyManager\\Current\\Device\\Speech**, with a value of 0 (zero).
|
||||
|
||||
### <a href="" id="bkmk-priv-accounts"></a>15.7 Account info
|
||||
### <a href="" id="bkmk-priv-accounts"></a>16.7 Account info
|
||||
|
||||
In the **Account Info** area, you can choose which apps can access your name, picture, and other account info.
|
||||
|
||||
@ -831,7 +841,7 @@ To turn off **Choose the apps that can access your account info**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-contacts"></a>15.8 Contacts
|
||||
### <a href="" id="bkmk-priv-contacts"></a>16.8 Contacts
|
||||
|
||||
In the **Contacts** area, you can choose which apps can access an employee's contacts list.
|
||||
|
||||
@ -845,7 +855,7 @@ To turn off **Choose apps that can access contacts**:
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
### <a href="" id="bkmk-priv-calendar"></a>15.9 Calendar
|
||||
### <a href="" id="bkmk-priv-calendar"></a>16.9 Calendar
|
||||
|
||||
In the **Calendar** area, you can choose which apps have access to an employee's calendar.
|
||||
|
||||
@ -863,7 +873,7 @@ To turn off **Choose apps that can access calendar**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-callhistory"></a>15.10 Call history
|
||||
### <a href="" id="bkmk-priv-callhistory"></a>16.10 Call history
|
||||
|
||||
In the **Call history** area, you can choose which apps have access to an employee's call history.
|
||||
|
||||
@ -877,7 +887,7 @@ To turn off **Let apps access my call history**:
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
### <a href="" id="bkmk-priv-email"></a>15.11 Email
|
||||
### <a href="" id="bkmk-priv-email"></a>16.11 Email
|
||||
|
||||
In the **Email** area, you can choose which apps have can access and send email.
|
||||
|
||||
@ -891,7 +901,7 @@ To turn off **Let apps access and send email**:
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
### <a href="" id="bkmk-priv-messaging"></a>15.12 Messaging
|
||||
### <a href="" id="bkmk-priv-messaging"></a>16.12 Messaging
|
||||
|
||||
In the **Messaging** area, you can choose which apps can read or send messages.
|
||||
|
||||
@ -909,7 +919,7 @@ To turn off **Choose apps that can read or send messages**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-radios"></a>15.13 Radios
|
||||
### <a href="" id="bkmk-priv-radios"></a>16.13 Radios
|
||||
|
||||
In the **Radios** area, you can choose which apps can turn a device's radio on or off.
|
||||
|
||||
@ -927,7 +937,7 @@ To turn off **Choose apps that can control radios**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-priv-other-devices"></a>15.14 Other devices
|
||||
### <a href="" id="bkmk-priv-other-devices"></a>16.14 Other devices
|
||||
|
||||
In the **Other Devices** area, you can choose whether devices that aren't paired to PCs, such as an Xbox One, can share and sync info.
|
||||
|
||||
@ -945,7 +955,7 @@ To turn off **Let your apps use your trusted devices (hardware you've already co
|
||||
|
||||
- Set the **Select a setting** box to **Force Deny**.
|
||||
|
||||
### <a href="" id="bkmk-priv-feedback"></a>15.15 Feedback & diagnostics
|
||||
### <a href="" id="bkmk-priv-feedback"></a>16.15 Feedback & diagnostics
|
||||
|
||||
In the **Feedback & Diagnostics** area, you can choose how often you're asked for feedback and how much diagnostic and usage information is sent to Microsoft.
|
||||
|
||||
@ -1019,7 +1029,7 @@ To change the level of diagnostic and usage data sent when you **Send your devic
|
||||
|
||||
- **3**. Maps to the **Full** level.
|
||||
|
||||
### <a href="" id="bkmk-priv-background"></a>15.16 Background apps
|
||||
### <a href="" id="bkmk-priv-background"></a>16.16 Background apps
|
||||
|
||||
In the **Background Apps** area, you can choose which apps can run in the background.
|
||||
|
||||
@ -1027,7 +1037,7 @@ To turn off **Let apps run in the background**:
|
||||
|
||||
- Turn off the feature in the UI for each app.
|
||||
|
||||
### <a href="" id="bkmk-spp"></a>16. Software Protection Platform
|
||||
### <a href="" id="bkmk-spp"></a>17. Software Protection Platform
|
||||
|
||||
Enterprise customers can manage their Windows activation status with volume licensing using an on-premise Key Management Server. You can opt out of sending KMS client activation data to Microsoft automatically by doing one of the following:
|
||||
|
||||
@ -1039,7 +1049,7 @@ Enterprise customers can manage their Windows activation status with volume lice
|
||||
|
||||
The Windows activation status will be valid for a rolling period of 180 days with weekly activation status checks to the KMS.
|
||||
|
||||
### <a href="" id="bkmk-syncsettings"></a>17. Sync your settings
|
||||
### <a href="" id="bkmk-syncsettings"></a>18. Sync your settings
|
||||
|
||||
You can control if your settings are synchronized:
|
||||
|
||||
@ -1065,13 +1075,13 @@ To turn off Messaging cloud sync:
|
||||
|
||||
- Create a REG\_DWORD registry setting called **CloudServiceSyncEnabled** in **HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Messaging**, with a value of 0 (zero).
|
||||
|
||||
### <a href="" id="bkmk-teredo"></a>18. Teredo
|
||||
### <a href="" id="bkmk-teredo"></a>19. Teredo
|
||||
|
||||
You can disable Teredo by using the netsh.exe command. For more info on Teredo, see [Internet Protocol Version 6, Teredo, and Related Technologies](http://technet.microsoft.com/library/cc722030.aspx).
|
||||
|
||||
- From an elevated command prompt, run **netsh interface teredo set state disabled**
|
||||
|
||||
### <a href="" id="bkmk-wifisense"></a>19. Wi-Fi Sense
|
||||
### <a href="" id="bkmk-wifisense"></a>20. Wi-Fi Sense
|
||||
|
||||
Wi-Fi Sense automatically connects devices to known hotspots and to the wireless networks the person’s contacts have shared with them.
|
||||
|
||||
@ -1097,7 +1107,7 @@ To turn off **Connect to suggested open hotspots** and **Connect to networks sha
|
||||
|
||||
When turned off, the Wi-Fi Sense settings still appear on the Wi-Fi Settings screen, but they’re non-functional and they can’t be controlled by the employee.
|
||||
|
||||
### <a href="" id="bkmk-defender"></a>20. Windows Defender
|
||||
### <a href="" id="bkmk-defender"></a>21. Windows Defender
|
||||
|
||||
You can disconnect from the Microsoft Antimalware Protection Service.
|
||||
|
||||
@ -1149,7 +1159,7 @@ You can stop Enhanced Notifications:
|
||||
|
||||
You can also use the registry to turn off Malicious Software Reporting Tool telemetry by setting the REG\_DWORD value **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\MRT\\DontReportInfectionInformation** to 1.
|
||||
|
||||
### <a href="" id="bkmk-wmp"></a>21. Windows Media Player
|
||||
### <a href="" id="bkmk-wmp"></a>22. Windows Media Player
|
||||
|
||||
To remove Windows Media Player:
|
||||
|
||||
@ -1159,7 +1169,7 @@ To remove Windows Media Player:
|
||||
|
||||
- Run the following DISM command from an elevated command prompt: **dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer**
|
||||
|
||||
### <a href="" id="bkmk-spotlight"></a>22. Windows spotlight
|
||||
### <a href="" id="bkmk-spotlight"></a>23. Windows spotlight
|
||||
|
||||
Windows spotlight provides features such as different background images and text on the lock screen, suggested apps, Microsoft account notifications, and Windows tips. You can control it by using the user interface or through Group Policy.
|
||||
|
||||
@ -1197,13 +1207,13 @@ If you're not running Windows 10, version 1607 or later, you can use the other o
|
||||
|
||||
For more info, see [Windows Spotlight on the lock screen](../manage/windows-spotlight.md).
|
||||
|
||||
### <a href="" id="bkmk-windowsstore"></a>23. Windows Store
|
||||
### <a href="" id="bkmk-windowsstore"></a>24. Windows Store
|
||||
|
||||
You can turn off the ability to launch apps from the Windows Store that were preinstalled or downloaded. This will also turn off automatic app updates, and the Windows Store will be disabled.
|
||||
|
||||
- Apply the Group Policy: **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Store** > **Disable all apps from Windows Store**.
|
||||
|
||||
### <a href="" id="bkmk-updates"></a>24. Windows Update Delivery Optimization
|
||||
### <a href="" id="bkmk-updates"></a>25. Windows Update Delivery Optimization
|
||||
|
||||
Windows Update Delivery Optimization lets you get Windows updates and Windows Store apps from sources in addition to Microsoft, which not only helps when you have a limited or unreliable Internet connection, but can also help you reduce the amount of bandwidth needed to keep all of your organization's PCs up-to-date. If you have Delivery Optimization turned on, PCs on your network may send and receive updates and apps to other PCs on your local network, if you choose, or to PCs on the Internet.
|
||||
|
||||
@ -1213,13 +1223,13 @@ Use the UI, Group Policy, MDM policies, or Windows Provisioning to set up Delive
|
||||
|
||||
In Windows 10, version 1607, you can stop network traffic related to Windows Update Delivery Optimization by setting **Download Mode** to **Simple** (99) or **Bypass** (100), as described below.
|
||||
|
||||
### <a href="" id="bkmk-wudo-ui"></a>24.1 Settings > Update & security
|
||||
### <a href="" id="bkmk-wudo-ui"></a>25.1 Settings > Update & security
|
||||
|
||||
You can set up Delivery Optimization from the **Settings** UI.
|
||||
|
||||
- Go to **Settings** > **Update & security** > **Windows Update** > **Advanced options** > **Choose how updates are delivered**.
|
||||
|
||||
### <a href="" id="bkmk-wudo-gp"></a>24.2 Delivery Optimization Group Policies
|
||||
### <a href="" id="bkmk-wudo-gp"></a>25.2 Delivery Optimization Group Policies
|
||||
|
||||
You can find the Delivery Optimization Group Policy objects under **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Delivery Optimization**.
|
||||
|
||||
@ -1231,7 +1241,7 @@ You can find the Delivery Optimization Group Policy objects under **Computer Con
|
||||
| Max Cache Size | Lets you specify the maximum cache size as a percentage of disk size. <br /> The default value is 20, which represents 20% of the disk.|
|
||||
| Max Upload Bandwidth | Lets you specify the maximum upload bandwidth (in KB/second) that a device uses across all concurrent upload activity. <br /> The default value is 0, which means unlimited possible bandwidth.|
|
||||
|
||||
### <a href="" id="bkmk-wudo-mdm"></a>24.3 Delivery Optimization MDM policies
|
||||
### <a href="" id="bkmk-wudo-mdm"></a>25.3 Delivery Optimization MDM policies
|
||||
|
||||
The following Delivery Optimization MDM policies are available in the [Policy CSP](http://msdn.microsoft.com/library/windows/hardware/dn904962.aspx).
|
||||
|
||||
@ -1244,7 +1254,7 @@ The following Delivery Optimization MDM policies are available in the [Policy CS
|
||||
| DeliveryOptimization/DOMaxUploadBandwidth | Lets you specify the maximum upload bandwidth (in KB/second) that a device uses across all concurrent upload activity. <br /> The default value is 0, which means unlimited possible bandwidth.|
|
||||
|
||||
|
||||
### <a href="" id="bkmk-wudo-prov"></a>24.4 Delivery Optimization Windows Provisioning
|
||||
### <a href="" id="bkmk-wudo-prov"></a>25.4 Delivery Optimization Windows Provisioning
|
||||
|
||||
If you don't have an MDM server in your enterprise, you can use Windows Provisioning to configure the Delivery Optimization policies
|
||||
|
||||
@ -1260,7 +1270,7 @@ Use Windows ICD, included with the [Windows Assessment and Deployment Kit (Windo
|
||||
|
||||
For more info about Delivery Optimization in general, see [Windows Update Delivery Optimization: FAQ](http://go.microsoft.com/fwlink/p/?LinkId=730684).
|
||||
|
||||
### <a href="" id="bkmk-wu"></a>25. Windows Update
|
||||
### <a href="" id="bkmk-wu"></a>26. Windows Update
|
||||
|
||||
You can turn off Windows Update by setting the following registry entries:
|
||||
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: devices
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Manage corporate devices
|
||||
|
||||
@ -7,6 +7,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: devices
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Manage Windows 10 and Windows Store tips, tricks, and suggestions
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: eross-msft
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Manage Wi-Fi Sense in your company
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# New policies for Windows 10
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Product IDs in Windows 10 Mobile
|
||||
|
||||
@ -7,6 +7,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Reset a Windows 10 Mobile device
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Set up a device for anyone to use (kiosk mode)
|
||||
@ -33,8 +34,8 @@ Do you need a computer that can only do one thing? For example:
|
||||
|
||||
The following table identifies the type of application that can be used on each Windows 10 edition to create a kiosk device.
|
||||
|
||||
**Note**
|
||||
A Universal Windows app is built on the Universal Windows Platform (UWP), which was first introduced in Windows 8 as the Windows Runtime. A Classic Windows application uses the Classic Windows Platform (CWP) (e.g., COM, Win32, WPF, WinForms, etc.) and is typically launched using an .EXE or .DLL file.
|
||||
> [!NOTE]
|
||||
> A Universal Windows app is built on the Universal Windows Platform (UWP), which was first introduced in Windows 8 as the Windows Runtime. A Classic Windows application uses the Classic Windows Platform (CWP) (e.g., COM, Win32, WPF, WinForms, etc.) and is typically launched using an .EXE or .DLL file.
|
||||
|
||||
|
||||
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Set up a kiosk on Windows 10 Pro, Enterprise, or Education
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Set up a kiosk on Windows 10 Mobile or Windows 10 Mobile Enterprise
|
||||
|
||||
@ -6,7 +6,7 @@ ms.prod: W10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Set up a shared or guest PC with Windows 10
|
||||
@ -18,7 +18,8 @@ localizationpriority: medium
|
||||
|
||||
Windows 10, version 1607, introduces *shared PC mode*, which optimizes Windows 10 for shared use scenarios, such as touchdown spaces in an enterprise and temporary customer use in retail. You can apply shared PC mode to Windows 10 Pro, Pro Education, Education, and Enterprise.
|
||||
|
||||
> **Note:** If you're interested in using Windows 10 for shared PCs in a school, see [Use Set up School PCs app](https://technet.microsoft.com/edu/windows/use-set-up-school-pcs-app) which provides a simple way to configure PCs with shared PC mode plus additional settings specific for education.
|
||||
> [!NOTE]
|
||||
> If you're interested in using Windows 10 for shared PCs in a school, see [Use Set up School PCs app](https://technet.microsoft.com/edu/windows/use-set-up-school-pcs-app) which provides a simple way to configure PCs with shared PC mode plus additional settings specific for education.
|
||||
|
||||
##Shared PC mode concepts
|
||||
A Windows 10 PC in shared PC mode is designed to be management- and maintenance-free with high reliability. In shared PC mode, only one user can be signed in at a time. When the PC is locked, the currently signed in user can always be signed out at the lock screen. Users who sign-in are signed in as standard users, not admin users.
|
||||
@ -65,7 +66,9 @@ Shared PC mode exposes a set of customizations to tailor the behavior to your re
|
||||
##Configuring shared PC mode on Windows
|
||||
You can configure Windows to be in shared PC mode in a couple different ways:
|
||||
- Mobile device management (MDM): Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://msdn.microsoft.com/library/windows/hardware/mt723294.aspx). Your MDM policy can contain any of the options listed in the [Customization](#customization) section. The following image shows a Microsoft Intune policy with the shared PC options added as OMA-URI settings. [Learn more about Windows 10 policy settings in Microsoft Intune.](https://docs.microsoft.com/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune)
|
||||
|
||||
|
||||
|
||||
- A provisioning package created with the Windows Imaging and Configuration Designer (ICD): You can apply a provisioning package when you initially set up the PC (also known as the out-of-box-experience or OOBE), or you can apply the provisioning package to a Windows 10 PC that is already in use. The provisioning package is created in Windows Imaging and Configuration Designer (ICD). Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://msdn.microsoft.com/library/windows/hardware/mt723294.aspx), exposed in ICD as SharedPC.
|
||||
|
||||
|
||||
@ -73,7 +76,7 @@ You can configure Windows to be in shared PC mode in a couple different ways:
|
||||
|
||||
### Create a provisioning package for shared use
|
||||
|
||||
Use the Windows ICD tool included in the Windows Assessment and Deployment Kit (ADK) for Windows 10 to create a provisioning package that configures a device for shared PC mode. [Install the ADK.](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit)
|
||||
Use the Windows ICD tool included in the Windows Assessment and Deployment Kit (ADK) for Windows 10 to create a provisioning package that configures a device for shared PC mode. [Install the ADK and select **Configuration Designer**.](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit)
|
||||
|
||||
1. Open Windows ICD (by default, %windir%\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Imaging and Configuration Designer\\x86\\ICD.exe).
|
||||
|
||||
@ -91,14 +94,14 @@ Use the Windows ICD tool included in the Windows Assessment and Deployment Kit (
|
||||
8. On the **Export** menu, select **Provisioning package**.
|
||||
9. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.**
|
||||
10. Set a value for **Package Version**.
|
||||
> **Tip**
|
||||
You can make changes to existing packages and change the version number to update previously applied packages.
|
||||
> [!TIP]
|
||||
> You can make changes to existing packages and change the version number to update previously applied packages.
|
||||
|
||||
11. Optional. In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing.
|
||||
11. (*Optional*) In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing.
|
||||
- **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen.
|
||||
- **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by clicking **Select...** and choosing the certificate you want to use to sign the package.
|
||||
> **Important**
|
||||
We recommend that you include a trusted provisioning certificate in your provisioning package. When the package is applied to a device, the certificate is added to the system store and any package signed with that certificate thereafter can be applied silently.
|
||||
> [!IMPORTANT]
|
||||
> We recommend that you include a trusted provisioning certificate in your provisioning package. When the package is applied to a device, the certificate is added to the system store and any package signed with that certificate thereafter can be applied silently.
|
||||
|
||||
12. Click **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location.
|
||||
Optionally, you can click **Browse** to change the default output location.
|
||||
@ -170,7 +173,8 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac
|
||||
|
||||
|
||||
|
||||
> **Note:** If you apply the setup file to a computer that has already been set up, existing accounts and data might be lost.
|
||||
> [!NOTE]
|
||||
> If you apply the setup file to a computer that has already been set up, existing accounts and data might be lost.
|
||||
|
||||
## Guidance for accounts on shared PCs
|
||||
|
||||
@ -203,7 +207,8 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac
|
||||
## Policies set by shared PC mode
|
||||
Shared PC mode sets local group policies to configure the device. Some of these are configurable using the shared pc mode options.
|
||||
|
||||
> **Important**: It is not recommended to set additional policies on PCs configured for **Shared PC Mode**. The shared PC mode has been optimized to be fast and reliable over time with minimal to no manual maintenance required.
|
||||
> [!IMPORTANT]
|
||||
> It is not recommended to set additional policies on PCs configured for **Shared PC Mode**. The shared PC mode has been optimized to be fast and reliable over time with minimal to no manual maintenance required.
|
||||
|
||||
<table border="1">
|
||||
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile
|
||||
author: jdeckerMS
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Settings and quick actions that can be locked down in Windows 10 Mobile
|
||||
|
||||
@ -36,18 +36,22 @@ IT admins can sign up for the Windows Store for Business, and get started workin
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>[Windows Store for Business overview](windows-store-for-business-overview.md)</p></td>
|
||||
<td align="left"><p>Learn about Windows Store for Business.</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p>[Prerequisites for Windows Store for Business](prerequisites-windows-store-for-business.md)</p></td>
|
||||
<td align="left"><p>There are a few prerequisites for using Store for Business.</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<tr class="odd">
|
||||
<td align="left"><p>[Sign up for Windows Store for Business](sign-up-windows-store-for-business.md)</p></td>
|
||||
<td align="left"><p>Before you sign up for Store for Business, at a minimum, you'll need an Azure Active Directory (AD) account for your organization, and you'll need to be the global administrator for your organization. If your organization is already using Azure AD, you can go ahead and sign up for Store for Business. If not, we'll help you create an Azure AD account and directory as part of the sign up process.</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<tr class="even">
|
||||
<td align="left"><p>[Roles and permissions in the Windows Store for Business](roles-and-permissions-windows-store-for-business.md)</p></td>
|
||||
<td align="left"><p>The first person to sign in to Store for Business must be a Global Admin of the Azure Active Directory (AD) tenant. Once the Global Admin has signed in, they can give permissions to others employees.</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<tr class="odd">
|
||||
<td align="left"><p>[Settings reference: Windows Store for Business](settings-reference-windows-store-for-business.md)</p></td>
|
||||
<td align="left"><p>The Store for Business has a group of settings that admins use to manage the store.</p></td>
|
||||
</tr>
|
||||
|
||||
@ -7,6 +7,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: store, mobile
|
||||
author: TrudyHa
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Configure access to Windows Store
|
||||
|
||||
@ -8,6 +8,7 @@ ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
ms.pagetype: mobile, devices, security
|
||||
author: AMeeus
|
||||
localizationpriority: high
|
||||
---
|
||||
|
||||
# Windows 10 Mobile and mobile device management
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Manage Windows 10 Start and taskbar layout
|
||||
|
||||
@ -7,6 +7,7 @@ ms.prod: w10
|
||||
ms.mktglfcycl: explore
|
||||
ms.sitesec: library
|
||||
author: jdeckerMS
|
||||
localizationpriority: medium
|
||||
---
|
||||
|
||||
# Windows Spotlight on the lock screen
|
||||
|
||||
277
windows/manage/windows-store-for-business-overview.md
Normal file
277
windows/manage/windows-store-for-business-overview.md
Normal file
@ -0,0 +1,277 @@
|
||||
---
|
||||
title: Windows Store for Business overview (Windows 10)
|
||||
description: With the new Windows Store for Business, organizations can make volume purchases of Windows apps.
|
||||
ms.assetid: 9DA71F6B-654D-4121-9A40-D473CC654A1C
|
||||
ms.prod: w10
|
||||
ms.pagetype: store, mobile
|
||||
ms.mktglfcycl: manage
|
||||
ms.sitesec: library
|
||||
author: TrudyHa
|
||||
---
|
||||
|
||||
# Windows Store for Business overview
|
||||
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10
|
||||
- Windows 10 Mobile
|
||||
|
||||
With the new Windows Store for Business, organizations can make volume purchases of Windows apps. The Store for Business provides app purchases based on organizational identity, flexible distribution options, and the ability to reclaim or re-use licenses. Organizations can also use the Store for Business to create a private store for their employees that includes apps from the Store, as well private Line-of-Business (LOB) apps.
|
||||
|
||||
## Features
|
||||
|
||||
|
||||
Organizations of any size can benefit from using the Store for Business provides:
|
||||
|
||||
- **Scales to fit the size of your business** - For smaller businesses, with Azure AD accounts and Windows 10 devices, you can quickly have an end-to-end process for acquiring and distributing content using the Store for Business. For larger businesses, all the capabilities of the Store for Businessare available to you, or you can integrate the Store for Businesswith management tools, for greater control over access to apps and app updates. You can use existing work or school accounts.
|
||||
|
||||
- **Bulk app acquisition** - Acquire apps in volume from the Store for Business.
|
||||
|
||||
- **Private store** - Curate a private store for your business that’s easily available from any Windows 10 device.
|
||||
|
||||
- **Flexible distribution options** - Flexible options for distributing content and apps to your employee devices:
|
||||
|
||||
- Distribute through Store for Business services. You can assign apps to individual employees, or make apps available to all employees in your private store.
|
||||
|
||||
- Use a management tool from Microsoft, or a 3rd-party tool for advanced distribution and management functions, or for managing images.
|
||||
|
||||
- Offline licensing model allows you to distribute apps without connecting to Store services, and for managing images.
|
||||
|
||||
- **Line-of-business apps** - Privately add and distribute your internal line-of-business apps using any of the distribution options.
|
||||
|
||||
- **App license management**: Admins can reclaim and reuse app licenses. Online and offline licenses allow you to customize how you decide to deploy apps.
|
||||
|
||||
- **Up-to-date apps** - The Store for Business manages the update process for apps with online licenses. Apps are automatically updated so you are always current with the most recent software updates and product features. Store for Business apps also uninstall cleanly, without leaving behind extra files, for times when you need to switch apps for specific employees.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
|
||||
You'll need this software to work with the Store for Business.
|
||||
|
||||
### Required
|
||||
|
||||
- IT Pros that are administering Store for Business need a browser compatible with Store for Business running on a PC or mobile device. Supported browsers include: Internet Explorer 10 or later, Microsoft Edge, or current versions of Chrome or Firefox.
|
||||
|
||||
- Employees using apps from Store for Business need Windows 10, version 1511 running on a PC or mobile device.
|
||||
|
||||
Microsoft Azure Active Directory (AD) accounts for your employees:
|
||||
|
||||
- Admins need Azure AD accounts to sign up for the Store for Business, and then to sign in, get apps, distribute apps, and manage app licenses.
|
||||
|
||||
- Employees need Azure AD account when they access Store for Business content from Windows devices.
|
||||
|
||||
- If you use a management tool to distribute and manage online-licensed apps, all employees will need an Azure AD account
|
||||
|
||||
- For offline-licensed apps, Azure AD accounts are not required for employees.
|
||||
|
||||
For more information on Azure AD, see [About Office 365 and Azure Active Directory](http://go.microsoft.com/fwlink/p/?LinkId=708612), and [Intro to Azure: identity and access](http://go.microsoft.com/fwlink/p/?LinkId=708611).
|
||||
|
||||
### Optional
|
||||
|
||||
While not required, you can use a management tool to distribute and manage apps. Using a management tool allows you to distribute content, scope app availability, and control when app updates are installed. This might make sense for larger organizations that already use a management tool. A couple of things to note about management tools:
|
||||
|
||||
- Need to integrate with Windows 10 management framework and Azure AD.
|
||||
|
||||
- Need to sync with the Store for Business inventory to distribute apps.
|
||||
|
||||
## How does the Store for Business work?
|
||||
|
||||
|
||||
### Sign up!
|
||||
|
||||
The first step for getting your organization started with the Store for Business is signing up. To sign up for the Business store, you need an Azure AD account and you must be a Global Administrator for your organization.
|
||||
|
||||
For more information, see [Sign up for the Store for Business](../manage/sign-up-windows-store-for-business.md).
|
||||
|
||||
### Set up
|
||||
|
||||
After your admin signs up for the Store for Business, they can assign roles to other employees in your company. The admin needs Azure AD User Admin permissions to assign WSFB roles. These are the roles and their permissions.
|
||||
|
||||
<table>
|
||||
<colgroup>
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
</colgroup>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th align="left">Permission</th>
|
||||
<th align="left">Account settings</th>
|
||||
<th align="left">Acquire apps</th>
|
||||
<th align="left">Distribute apps</th>
|
||||
<th align="left">Device Guard signing</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Admin</p></td>
|
||||
<td align="left"><p>X</p></td>
|
||||
<td align="left"><p>X</p></td>
|
||||
<td align="left"><p>X</p></td>
|
||||
<td align="left"></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p>Purchaser</p></td>
|
||||
<td align="left"></td>
|
||||
<td align="left"><p>X</p></td>
|
||||
<td align="left"><p>X</p></td>
|
||||
<td align="left"></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Device Guard signer</p></td>
|
||||
<td align="left"></td>
|
||||
<td align="left"></td>
|
||||
<td align="left"></td>
|
||||
<td align="left"><p>X</p></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
|
||||
|
||||
In some cases, admins will need to add Azure Active Directory (AD) accounts for their employees. For more information, see [Manage user accounts and groups](../manage/manage-users-and-groups-windows-store-for-business.md).
|
||||
|
||||
Also, if your organization plans to use a management tool, you’ll need to configure your management tool to sync with the Store for Business.
|
||||
|
||||
### Get apps and content
|
||||
|
||||
Once signed in to the Store for Business, you can browse and search for all products in the Store for Business catalog. Some apps are free, and some apps charge a price. We're continuing to add more paid apps to the Store for Business. Check back if you don't see the app that you're looking for. Currently, you can pay for apps with a credit card. We'll be adding more payment options over time.
|
||||
|
||||
**App types** -- These app types are supported in the Store for Business:
|
||||
|
||||
- Universal Windows Platform apps
|
||||
|
||||
- Universal Windows apps, by device: Phone, Surface Hub, IOT devices , HoloLens
|
||||
|
||||
Apps purchased from the Store for Business only work on Windows 10 devices.
|
||||
|
||||
Line-of-business (LOB) apps are also supported via the Business store. You can invite IT developers or ISVs to be LOB publishers for your organization. This allows them to submit apps via the developer center that are only available to your organization. These apps can be distributed using the distribution methods discussed in this topic. For more information, see Working with Line-of-Business apps.
|
||||
|
||||
**App licensing model**
|
||||
|
||||
The Business store supports two options to license apps: online and offline. **Online** licensing is the default licensing model and is similar to the Windows Store. Online licensed apps require users and devices to connect to the Store for Business service to acquire an app and its license. **Offline** licensing is a new licensing option for Windows 10. With offline licenses, organizations can cache apps and their licenses to deploy within their network. ISVs or devs can opt-in their apps for offline licensing when they submit them to the developer center.
|
||||
|
||||
For more information, see [Apps in the Store for Business](../manage/apps-in-windows-store-for-business.md#licensing-model).
|
||||
|
||||
### Distribute apps and content
|
||||
|
||||
App distribution is handled through two channels, either through the Store for Business, or using a management tool. You can use either or both distribution methods in your organization.
|
||||
|
||||
**Using the Store for Business** – Distribution options for the Store for Business:
|
||||
|
||||
- Email link – After purchasing an app, admins can send employees a link in an email message. Employees can click the link to install the app.
|
||||
|
||||
- Curate private store for all employees – A private store can include content you’ve purchased from the Store, and your line-of-business apps that you’ve submitted to the Store for Business. Apps in your private store are available to all of your employees. They can browse the private store and install apps when needed.
|
||||
|
||||
- To use the options above users must be signed in with an Azure AD account on a Windows 10 device.
|
||||
|
||||
**Using a management tool** – For larger organizations that might want a greater level of control over how apps are distributed and managed, a management tools provides other distribution options:
|
||||
|
||||
- Scoped content distribution – Ability to scope content distribution to specific groups of employees.
|
||||
|
||||
- Install apps for employees – Employees are not responsible for installing apps. Management tool installs apps for employees.
|
||||
|
||||
Management tools can synchronize content that has been acquired in the Store for Business. If an offline application has been purchased this will also include the app package, license and metadata for the app (like, icons, count, or localized product descriptions). Using the metadata, management tools can enable portals or apps as a destination for employees to acquire apps.
|
||||
|
||||
For more information, see [Distribute apps to your employees from the Store for Business](../manage/distribute-apps-to-your-employees-windows-store-for-business.md).
|
||||
|
||||
### Manage Store for Business settings and content
|
||||
|
||||
Once you are signed up with the Business store and have purchased apps, Admins can manage Store for Business settings and inventory.
|
||||
|
||||
**Manage Store for Business settings**
|
||||
|
||||
- Assign and change roles for employees or groups
|
||||
|
||||
- Device Guard signing
|
||||
|
||||
- Register a management server to deploy and install content
|
||||
|
||||
- Manage relationships with LOB publishers
|
||||
|
||||
- Manage offline licenses
|
||||
|
||||
- Update the name of your private store
|
||||
|
||||
**Manage inventory**
|
||||
|
||||
- Assign app licenses to employees
|
||||
|
||||
- Reclaim and reassign app licenses
|
||||
|
||||
- Manage app updates for all apps, or customize updates for each app. Online apps will automatically update from the Store. Offline apps can be updated using a management server.
|
||||
|
||||
- Download apps for offline installs
|
||||
|
||||
For more information, see [Manage settings in the Store for Business](../manage/manage-settings-windows-store-for-business.md) and [Manage apps](../manage/manage-apps-windows-store-for-business-overview.md).
|
||||
|
||||
## Supported markets
|
||||
|
||||
|
||||
Store for Business is currently available in these markets.
|
||||
|
||||
|Country or locale|Paid apps|Free apps|
|
||||
|-----------------|---------|---------|
|
||||
|Argentina|X|X|
|
||||
|Australia|X|X|
|
||||
|Austria|X|X|
|
||||
|Belgium (Dutch, French)|X|X|
|
||||
|Brazil| |X|
|
||||
|Canada (English, French)|X|X|
|
||||
|Chile|X|X|
|
||||
|Columbia|X|X|
|
||||
|Croatia|X|X|
|
||||
|Czech Republic|X|X|
|
||||
|Denmark|X|X|
|
||||
|Finland|X|X|
|
||||
|France|X|X|
|
||||
|Germany|X|X|
|
||||
|Greece|X|X|
|
||||
|Hong Kong SAR|X|X|
|
||||
|Hungary|X|X|
|
||||
|India| |X|
|
||||
|Indonesia|X|X|
|
||||
|Ireland|X|X|
|
||||
|Italy|X|X|
|
||||
|Japan|X|X|
|
||||
|Malaysia|X|X|
|
||||
|Mexico|X|X|
|
||||
|Netherlands|X|X|
|
||||
|New Zealand|X|X|
|
||||
|Norway|X|X|
|
||||
|Philippines|X|X|
|
||||
|Poland|X|X|
|
||||
|Portugal|X|X|
|
||||
|Romania|X|X|
|
||||
|Russia| |X|
|
||||
|Singapore|X|X|
|
||||
|Slovakia|X|X|
|
||||
|South Africa|X|X|
|
||||
|Spain|X|X|
|
||||
|Sweden|X|X|
|
||||
|Switzerland (French, German)|X|X|
|
||||
|Taiwan| |X|
|
||||
|Thailand|X|X|
|
||||
|Turkey|X|X|
|
||||
|Ukraine| |X|
|
||||
|United Kingdom|X|X|
|
||||
|United States|X|X|
|
||||
|Vietnam|X|X|
|
||||
|
||||
## <a href="" id="isv-wsfb"></a>ISVs and the Store for Business
|
||||
|
||||
|
||||
Developers in your organization, or ISVs can create content specific to your organization. In the Store for Business, we call these app line-of-business (LOB) apps, and the devs that create them are LOB publishers. The process looks like this:
|
||||
|
||||
- Admin invites devs to be LOB publishers for your organization. These devs can be internal devs, or external ISVs.
|
||||
|
||||
- LOB publishers accept the invitation, develop apps, and submits the app to the Windows Dev Center. LOB publishers use Enterprise associations when submitting the app to make the app exclusive to your organization.
|
||||
|
||||
- Admin adds the app to Store for Business inventory.
|
||||
|
||||
Once the app is in inventory, admins can choose how to distribute the app. ISVs creating apps through the dev center can make their apps available in the Store for Business. ISVs can opt-in their apps to make them available for offline licensing. Apps purchased in the Store for Business will work only on Windows 10.
|
||||
|
||||
For more information on line-of-business apps, see [Working with Line-of-Business apps](../manage/working-with-line-of-business-apps.md).
|
||||
Reference in New Issue
Block a user