* Updated deployment-vdi-windows-defender-antivirus.md * Updated deployment-vdi-windows-defender-antivirus.md * Updated deployment-vdi-windows-defender-antivirus.md * updates for new vdi stuff * Adding important note to solve #3493 * Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-dir-sync.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Typo "<"→"<", ">"→">" https://docs.microsoft.com/en-us/windows/application-management/manage-windows-mixed-reality * Issue #2297 * Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Clarification * Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> * update troubleshoot-np.md * update configure-endpoints-gp.md * Removing a part which is not supported * Name change * update troubleshoot-np.md * removed on-premises added -hello * Added link into Domain controller guide * Line corections * corrected formatting of xml code samples When viewing the page in Win 10/Edge, the xml code samples stretched across the page, running into the side menu. The lack of line breaks also made it hard to read. This update adds line breaks and syntax highlighting, replaces curly double quotes with standard double quotes, and adds a closing tag for <appv:appconnectiongroup>for each code sample * Update windows/security/identity-protection/hello-for-business/hello-identity-verification.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Update windows/deployment/update/waas-delivery-optimization-reference.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Update windows/deployment/update/waas-delivery-optimization-reference.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * corrected formating of XML examples The XML samples here present the same formatting problems as in about-the-connection-group-file51.md (see https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3847/) Perhaps we should open an issue to see if we have more versions of this code sample in the docs * corrected formatting of XML example section In the XML example on this page, the whitespace had been stripped out, so there were no spaces between adjacent attribute values or keys. This made it hard to read, though the original formatting allowed for a scroll bar, so the text was not running into the side of the page (compare to https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3847 and https://github.com/MicrosoftDocs/windows-itpro-docs/pull/3850, where the uncorrected formatting forced the text to run into the side menu). * update configure-endpoints-gp.md * Fixed error in registry path and improved description * Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-dir-sync.md Co-Authored-By: Trond B. Krokli <38162891+illfated@users.noreply.github.com> * Removing extra line in 25 Suggested by * update windows-analytics-azure-portal.md * re: broken links, credential-guard-considerations Context: * #3513, MVA is being retired and producing broken links * #3860 Microsoft Virtual Academy video links This page contains two links to deprecated video content on Microsoft Virtual Academy (MVA). MVA is being retired. In addition, the Deep Dive course the two links point to is already retired, and no replacement course exists. I removed the first link, as I could not find a similar video available describing which credentials are covered by credential guard. I replaced the second link with a video containing similar material, though it is not a "deep dive". Suggestions on handling this problem, as many pages contain similar links, would be appreciated,. * removed link to retired video re: #3867 Context: * #3513, MVA is being retired and producing broken links * #3867, Microsoft Virtual Academy video links This page contains a broken link to deprecated video content on Microsoft Virtual Academy (MVA). MVA is being retired. In addition, the Deep Dive course is already retired, and no replacement course exists. I removed the whole _See Also_ section, as I could not find a video narrowly or deeply addressing how to protect privelaged users with Credential Guard. The most likely candidate is too short and general: https://www.linkedin.com/learning/cism-cert-prep-1-information-security-governance/privileged-account-management * addressing broken mva links, #3817 Context: * #3513, MVA is being retired and producing broken links * #3817, Another broken link This page contains two links to deprecated video content on Microsoft Virtual Academy (MVA). MVA is being retired. In addition, the Deep Dive course the two links point to is already retired, and no replacement course exists. I removed the first link, as we no longer have a video with similar content for a similar audience. The most likely candidate is https://www.linkedin.com/learning/programming-foundations-web-security-2/types-of-credential-attacks, which is more general and for a less technical audience. I removed the second link and the _See Also_ section, as I could not find a similar video narrowly focused on which credentials are covered by Credential Guard. Most of the related material available now describes how to perform a task. * Update deployment-vdi-windows-defender-antivirus.md * typo fix re: #3876; DMSA -> DSMA * Addressing dead MVA links, #3818 This page, like its fellows in the mva-links label, contains links to a retired video course on a website that is retiring soon. The links listed by the user in issue #3818 were also on several other pages, related to Credentials Guard. These links were addressed in the pull requests #3875, #3872, and #3871 Credentials threat & lateral threat link: removed (see PR #3875 for reasoning) Virtualization link: replaced (see #3871 for reasoning) Credentials protected link: removed (see #3872 for reasoning) * Adding notes for known issue in script Solves #3869 * Updated the download link admx files Windows 10 Added link for April 2018 and Oct 2018 ADMX files. * added event logs path Referenced : https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/event-views-exploit-guard * Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md Suggestions applied. Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> * Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> * Update deployment-vdi-windows-defender-antivirus.md * screenshot update * Add files via upload * update 4 scrrenshots * Update deployment-vdi-windows-defender-antivirus.md * Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Update browsers/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> * Re: #3909 Top link is broken, #3909 > The link here does not work: > Applies to: Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) The link to the pdf describing MDATP was broken. Thankfully, PR #2897 updated the same link in another page some time ago, so I didn't have to go hunting for an equivalent * CI Update * Updated as per task 3405344 * Updated author * Update windows-analytics-azure-portal.md * added the example query * Updated author fields * Update office-csp.md * update video for testing * update video * Update surface-hub-site-readiness-guide.md line 134 Fixed video link MD formatting * fixing video url * updates from Albert * Bulk replaced author to manikadhiman * Bulk replaced ms.author to v-madhi * Latest content is published (#371) * Added 1903 policy DDF link and fixed a typo * Reverted the DDF version * Latest update (#375) * Update deployment-vdi-windows-defender-antivirus.md * Update deployment-vdi-windows-defender-antivirus.md
19 KiB
title, description, author, ms.pagetype, ms.mktglfcycl, ms.sitesec, ms.prod, ms.date, ms.reviewer, manager, ms.author, ms.topic
title | description | author | ms.pagetype | ms.mktglfcycl | ms.sitesec | ms.prod | ms.date | ms.reviewer | manager | ms.author | ms.topic |
---|---|---|---|---|---|---|---|---|---|---|---|
Managing the UE-V Service and Packages with Windows PowerShell and WMI | Managing the UE-V service and packages with Windows PowerShell and WMI | dansimp | mdop, virtualization | deploy | library | w10 | 04/19/2017 | dansimp | dansimp | article |
Managing the UE-V service and packages with Windows PowerShell and WMI
Applies to
- Windows 10, version 1607
You can use Windows Management Instrumentation (WMI) and Windows PowerShell to manage User Experience Virtualization (UE-V) service configuration and synchronization behavior.
Note
For a complete list of UE-V cmdlets, see User Experience Virtualization in Windows PowerShell.
To configure the UE-V service with Windows PowerShell
-
Open a Windows PowerShell window. To manage computer settings that affect all users of the computer by using the Computer parameter, open the window with an account that has administrator rights.
-
Use the following Windows PowerShell commands to configure the service.
Windows PowerShell command Description Enable-UEV
Turns on the UE-V service. Requires reboot.
Disable-UEV
Turns off the UE-V service. Requires reboot.
Get-UevStatus
Displays whether UE-V service is enabled or disabled, using a Boolean value.
Get-UevConfiguration
Gets the effective UE-V service settings. User-specific settings have precedence over the computer settings.
Get-UevConfiguration -CurrentComputerUser
Gets the UE-V service settings values for the current user only.
Get-UevConfiguration -Computer
Gets the UE-V service configuration settings values for all users on the computer.
Get-UevConfiguration -Details
Gets the details for each configuration setting. Displays where the setting is configured or if it uses the default value. Is displayed if the current setting is valid.
Set-UevConfiguration -Computer -EnableDontSyncWindows8AppSettings
Configures the UE-V service to not synchronize any Windows apps for all users on the computer.
Set-UevConfiguration -CurrentComputerUser -EnableDontSyncWindows8AppSettings
Configures the UE-V service to not synchronize any Windows apps for the current computer user.
Set-UevConfiguration -Computer -EnableFirstUseNotification
Configures the UE-V service to display notification the first time the service runs for all users on the computer.
Set-UevConfiguration -Computer -DisableFirstUseNotification
Configures the UE-V service to not display notification the first time that the service runs for all users on the computer.
Set-UevConfiguration -Computer -EnableSettingsImportNotify
Configures the UE-V service to notify all users on the computer when settings synchronization is delayed.
Use the DisableSettingsImportNotify parameter to disable notification.
Set-UevConfiguration -CurrentComputerUser -EnableSettingsImportNotify
Configures the UE-V service to notify the current user when settings synchronization is delayed.
Use the DisableSettingsImportNotify parameter to disable notification.
Set-UevConfiguration -Computer -EnableSyncUnlistedWindows8Apps
Configures the UE-V service to synchronize all Windows apps that are not explicitly disabled by the Windows app list for all users of the computer. For more information, see "Get-UevAppxPackage" in Managing UE-V Settings Location Templates Using Windows PowerShell and WMI.
Use the DisableSyncUnlistedWindows8Apps parameter to configure the UE-V service to synchronize only Windows apps that are explicitly enabled by the Windows App List.
Set-UevConfiguration -CurrentComputerUser - EnableSyncUnlistedWindows8Apps
Configures the UE-V service to synchronize all Windows apps that are not explicitly disabled by the Windows app list for the current user on the computer. For more information, see "Get-UevAppxPackage" in Managing UE-V Settings Location Templates Using Windows PowerShell and WMI.
Use the DisableSyncUnlistedWindows8Apps parameter to configure the UE-V service to synchronize only Windows apps that are explicitly enabled by the Windows App List.
Set-UevConfiguration -Computer -DisableSync
Disables UE-V for all the users on the computer.
Use the EnableSync parameter to enable or re-enable.
Set-UevConfiguration -CurrentComputerUser -DisableSync
Disables UE-V for the current user on the computer.
Use the EnableSync parameter to enable or re-enable.
Set-UevConfiguration -Computer -EnableTrayIcon
Enables the UE-V icon in the notification area for all users of the computer.
Use the DisableTrayIcon parameter to disable the icon.
Set-UevConfiguration -Computer -MaxPackageSizeInBytes <size in bytes>
Configures the UE-V service to report when a settings package file size reaches the defined threshold for all users on the computer. Sets the threshold package size in bytes.
Set-UevConfiguration -CurrentComputerUser -MaxPackageSizeInBytes <size in bytes>
Configures the UE-V service to report when a settings package file size reaches the defined threshold. Sets the package size warning threshold for the current user.
Set-UevConfiguration -Computer -SettingsImportNotifyDelayInSeconds
Specifies the time in seconds before the user is notified for all users of the computer
Set-UevConfiguration -CurrentComputerUser -SettingsImportNotifyDelayInSeconds
Specifies the time in seconds before notification for the current user is sent.
Set-UevConfiguration -Computer -SettingsStoragePath <path to _settings_storage_location>
Defines a per-computer settings storage location for all users of the computer.
Set-UevConfiguration -CurrentComputerUser -SettingsStoragePath <path to _settings_storage_location>
Defines a per-user settings storage location.
Set-UevConfiguration -Computer -SettingsTemplateCatalogPath <path to catalog>
Sets the settings template catalog path for all users of the computer.
Set-UevConfiguration -Computer -SyncMethod <sync method>
Sets the synchronization method for all users of the computer: SyncProvider or None.
Set-UevConfiguration -CurrentComputerUser -SyncMethod <sync method>
Sets the synchronization method for the current user: SyncProvider or None.
Set-UevConfiguration -Computer -SyncTimeoutInMilliseconds <timeout in milliseconds>
Sets the synchronization time-out in milliseconds for all users of the computer
Set-UevConfiguration -CurrentComputerUser -SyncTimeoutInMilliseconds <timeout in milliseconds>
Set the synchronization time-out for the current user.
Clear-UevConfiguration -Computer -<setting name>
Clears the specified setting for all users on the computer.
Clear-UevConfiguration -CurrentComputerUser -<setting name>
Clears the specified setting for the current user only.
Export-UevConfiguration <settings migration file>
Exports the UE-V computer configuration to a settings migration file. The file name extension must be .uev.
The
Export
cmdlet exports all UE-V service settings that are configurable with the Computer parameter.Import-UevConfiguration <settings migration file>
Imports the UE-V computer configuration from a settings migration file. The file name extension must be .uev.
To export UE-V package settings and repair UE-V templates with Windows PowerShell
-
Open a Windows PowerShell window as an administrator.
-
Use the following Windows PowerShell commands to configure the service.
Windows PowerShell command
Description
Export-UevPackage MicrosoftNotepad.pkgx
Extracts the settings from a Microsoft Notepad package file and converts them into a human-readable format in XML.
Repair-UevTemplateIndex
Repairs the index of the UE-V settings location templates.
To configure the UE-V service with WMI
-
User Experience Virtualization provides the following set of WMI commands. Administrators can use this interface to configure the UE-V service at the command line and automate typical configuration tasks.
Use an account with administrator rights to open a Windows PowerShell window.
-
Use the following WMI commands to configure the service.
Windows PowerShell command
Description Get-WmiObject -Namespace root\Microsoft\UEV Configuration
Displays the active UE-V service settings. User-specific settings have precedence over the computer settings.
Get-WmiObject -Namespace root\Microsoft\UEV UserConfiguration
Displays the UE-V service configuration that is defined for a user.
Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
Displays the UE-V service configuration that is defined for a computer.
Get-WmiObject -Namespace root\Microsoft\Uev ConfigurationItem
Displays the details for each configuration item.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.SettingsStoragePath = <path_to_settings_storage_location>
$config.Put()
Defines a per-computer settings storage location.
$config = Get-WmiObject -Namespace root\Microsoft\UEV UserConfiguration
$config.SettingsStoragePath = <path_to_settings_storage_location>
$config.Put()
Defines a per-user settings storage location.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.SyncTimeoutInMilliseconds = <timeout_in_milliseconds>
$config.Put()
Sets the synchronization time-out in milliseconds for all users of the computer.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.MaxPackageSizeInBytes = <size_in_bytes>
$config.Put()
Configures the UE-V service to report when a settings package file size reaches a defined threshold. Set the threshold package file size in bytes for all users of the computer.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.SyncMethod = <sync_method>
$config.Put()
Sets the synchronization method for all users of the computer: SyncProvider or None.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.<setting name> = $true
$config.Put()
To enable a specific per-computer setting, clear the setting, and use $null as the setting value. Use UserConfiguration for per-user settings.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.<setting name> = $false
$config.Put()
To disable a specific per-computer setting, clear the setting, and use $null as the setting value. Use User Configuration for per-user settings.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.<setting name> = <setting value>
$config.Put()
Updates a specific per-computer setting. To clear the setting, use $null as the setting value.
$config = Get-WmiObject -Namespace root\Microsoft\UEV ComputerConfiguration
$config.<setting name> = <setting value>
$config.Put()
Updates a specific per-user setting for all users of the computer. To clear the setting, use $null as the setting value.
When you are finished configuring the UE-V service with WMI and Windows PowerShell, the defined configuration is stored in the registry in the following locations.
\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UEV\Agent\Configuration
\HKEY_CURRENT_USER\SOFTWARE\Microsoft\UEV\Agent\Configuration
To export UE-V package settings and repair UE-V templates by using WMI
-
UE-V provides the following set of WMI commands. Administrators can use this interface to export a package or repair UE-V templates.
-
Use the following WMI commands.
WMI command Description Invoke-WmiMethod -Namespace root\Microsoft\UEV -Class UserSettings -Name ExportPackage -ArgumentList <package name>
Extracts the settings from a package file and converts them into a human-readable format in XML.
Invoke-WmiMethod -Namespace root\Microsoft\UEV -Class SettingsLocationTemplate -Name RebuildIndex
Repairs the index of the UE-V settings location templates. Must be run as administrator.