You can now reset a forgotten PIN without deleting company managed data or apps on devices managed by Microsoft Intune.
Windows Hello is now password-less on S-mode. Account Protection will encourage password users to set up Windows Hello Face, Fingerprint or PIN for faster sign in, and will notify Dynamic lock users if Dynamic lock has stopped working because their phone or device Bluetooth is off.
Previously, you had to navigate deep into Settings to find Windows Hello. It is easier to set up Dynamic lock, and WD SC actionable alerts have been added when Dynamic lock stops working ex: phone Bluetooth is off. Windows Defender Credential Guard is a security service in Windows 10 built to protect Active Directory AD domain credentials so that they can't be stolen or misused by malware on a user's machine.
It is designed to protect against well-known threats such as Pass-the-Hash and credential harvesting. Windows Defender Credential Guard has always been an optional feature, but Windows 10 in S mode turns this functionality on by default when the machine has been Azure Active Directory joined.
This provides an added level of security when connecting to domain resources not normally present on devices running Windows 10 in S mode. For more information, see Credential Guard Security Considerations. Microsoft has released new Windows security baselines for Windows Server and Windows A security baseline is a group of Microsoft-recommended configuration settings with an explanation of their security impact.
Windows security baselines have been updated for Windows A security baseline is a group of Microsoft-recommended configuration settings and explains their security impact. The new security baseline for Windows 10 version has been published. An issue, known as SMBLoris , which could result in denial of service, has been addressed.
You can still get to the app in all the usual ways — simply ask Cortana to open Windows Security Center WSC or interact with the taskbar icon. The WSC service now requires antivirus products to run as a protected process to register. Products that have not yet implemented this will not appear in the Windows Security Center user interface, and Microsoft Defender Antivirus will remain enabled side-by-side with these products.
It will now dynamically size the categories on the main page if more room is needed for extra info. We also updated the title bar so that it will use your accent color if you have enabled that option in Color Settings.
This security policy setting determines whether the username is displayed during sign in. The setting only affects the Other user tile. You can quickly take action on threats from this screen:. The GPT partition format is newer and enables the use of larger and more disk partitions. It also provides added data reliability, supports additional partition types, and enables faster boot and shutdown speeds.
For more information, see DISM operating system uninstall command-line options. You can now run your own custom actions or scripts in parallel with Windows Setup. Setup will also migrate your scripts to next feature release, so you only need to add them once. For more information, see Run custom actions during feature update. It is also now possible to run a script if the user rolls back their version of Windows using the PostRollback option. Portions of the work done during the offline phases of a Windows update have been moved to the online phase.
This has resulted in a significant reduction of offline time when installing updates. For more information, see We're listening to you. SetupDiag is a new command-line tool that can help diagnose why a Windows 10 update failed. SetupDiag works by searching Windows Setup log files.
When searching log files, SetupDiag uses a set of rules to match known issues. In the current version of SetupDiag there are 53 rules contained in the rules. The rules. If you have shared devices deployed in your work place, Fast sign-in enables users to sign in to a shared Windows 10 PC in a flash! However, you can enroll devices running LTSC to plan for an upgrade to a semi-annual channel release.
Upgrade Readiness helps you ensure that applications and drivers are ready for a Windows 10 upgrade. The solution provides up-to-date application and driver inventory, information about known issues, troubleshooting guidance, and per-device readiness and tracking details. The Upgrade Readiness tool moved from public preview to general availability on March 2, The development of Upgrade Readiness has been heavily influenced by input from the community the development of new features is ongoing.
Upgrade Readiness provides insights into application and driver compatibility issues. New capabilities include better app coverage, post-upgrade health reports, and enhanced report filtering capabilities. For more information, see Manage Windows upgrades with Upgrade Readiness. Update Compliance helps you to keep Windows 10 devices in your organization secure and up-to-date. Update Compliance is a solution built using OMS Log Analytics that provides information about installation status of monthly quality and feature updates.
Details are provided about the deployment progress of existing updates and the status of future updates. Information is also provided about devices that might need attention to resolve issues. New capabilities in Update Compliance let you monitor Windows Defender protection status, compare compliance with industry peers, and optimize bandwidth for deploying updates. Maintaining devices is made easier with Device Health, a new, premium analytic tool that identifies devices and drivers that crash frequently and might need to be rebuilt or replaced.
For more information, see Monitor the health of devices with Device Health. For more information about accessibility, see Accessibility information for IT Professionals. In the Feedback and Settings page under Privacy Settings you can now delete the diagnostic data your device has sent to Microsoft.
You can also view this diagnostic data using the Diagnostic Data Viewer app. The new chromium-based Microsoft Edge has many improvements specifically targeted to Kiosks. You can download and install Microsoft Edge separately here. If you wish to take advantage of Kiosk capabilities in Edge , consider Kiosk mode with a semi-annual release channel. The OS uninstall period is a length of time that users are given when they can optionally roll back a Windows 10 update.
Using the new wizards in Windows Configuration Designer, you can create provisioning packages to enroll devices in Azure Active Directory. Azure AD join in bulk is available in the desktop, mobile, kiosk, and Surface Hub wizards. The following new Group Policy and mobile device management MDM settings are added to help you configure Windows Spotlight user experiences:.
Learn more about Windows Spotlight. Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Additional MDM policy settings are available for Start and taskbar layout. New MDM policy settings include:. By enrolling devices in Azure AD, you increase the visibility of feedback submitted by users in your organization — especially on features that support your specific business needs.
For details, see Windows Insider Program for Business. For more information, see Windows Insider Program for Business. With changes delivered in Windows 10 Enterprise LTSC , Express updates are now fully supported with Microsoft Endpoint Configuration Manager, starting with version of Configuration Manager, as well as with other third-party updating and management products that implement this new functionality.
The above changes can be made available to Windows 10, version , by installing the April cumulative update. Delivery Optimization policies now enable you to configure additional restrictions to have more control in various scenarios. To check out all the details, see Configure Delivery Optimization for Windows 10 updates. Starting with Windows 10 Enterprise LTSC , in-box apps that were uninstalled by the user won't automatically reinstall as part of the feature update installation process.
Additionally, apps de-provisioned by admins on Windows 10 Enterprise LTSC machines will stay de-provisioned after future feature update installations.
The DynamicManagement CSP allows you to manage devices differently depending on location, network, or time. For example, managed devices can have cameras disabled when at a work location, the cellular service can be disabled when outside the country to avoid roaming charges, or the wireless network can be disabled when the device is not within the corporate building or campus. The Dynamic Management CSP enables configuration of policies that change how the device is managed in addition to setting the conditions on which the change occurs.
The CleanPC CSP allows removal of user-installed and pre-installed applications, with the option to persist user data. For example, you can require storage card encryption on mobile devices, or require encryption for operating system drives. For more information, see Configuration options for the Office Deployment Tool. Learn more about new MDM capabilities.
For more information, see Enroll a Windows 10 device automatically using Group Policy. Multiple new configuration items are also added. For more information, see What's new in MDM enrollment and management.
The Windows version of mobile application management MAM is a lightweight solution for managing company data access and security on personal devices. For more info, see Implement server-side support for mobile application management on Windows. By introducing auto-logging for mobile devices, Windows will automatically collect logs when encountering an error in MDM, eliminating the need to have always-on logging for memory-constrained devices.
Additionally, we are introducing Microsoft Message Analyzer as an additional tool to help Support personnel quickly reduce issues to their root cause, while saving time and cost. Previous versions of the Microsoft Application Virtualization Sequencer App-V Sequencer have required you to manually create your sequencing environment.
Additionally, the App-V Sequencer has been updated to let you sequence or update multiple apps at the same time, while automatically capturing and storing your customizations as an App-V project template.
You have to run the setup with the product key switch and use a key that is valid for Windows 10 Enterprise SAC. The below example is when using a KMS. There is no simple upgrade for LTSC. You have to wipe out the OS and install a new one. Are these regular PCs you are upgrading or devices running Windows? Office Office Exchange Server. Not an IT pro? Resources for IT Professionals. Sign in. United States English. Ask a question. Quick access. Search related threads. Remove From My Forums.
Answered by:. Archived Forums. Windows 10 Installation, Setup, and Deployment.
