You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Added some extra info for controlling Teams for personal use on Windows 11.
- Remove section for configuring the Microsoft Edge built in app from Phase 1 as it's included in most current versions of Windows.
- Added note to Microsoft Edge configuration section about which operating systems Edge is included inbox and how to trigger an update during deployment.
- Fixed some link formatting.
Copy file name to clipboardExpand all lines: memdocs/cloud-native-windows-endpoints.md
+27-16Lines changed: 27 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -297,20 +297,6 @@ Your cloud native endpoint will need some applications. To get started, we recom
297
297
298
298
To deploy Microsoft 365 Apps, see [Add Microsoft 365 apps to Windows devices using Microsoft Intune](./intune/apps/apps-add-office365.md)
299
299
300
-
-**Microsoft Edge**
301
-
Microsoft Edge is the new browser from Microsoft built on Chromium open source. Edge can easily be deployed to devices using the built-in app profile in Intune.
302
-
303
-
To deploy Microsoft Edge, see [Add Microsoft Edge for Windows to Microsoft Intune](./intune/apps/apps-windows-edge.md).
304
-
305
-
> [!NOTE]
306
-
> Microsoft Edge is included on devices that run:
307
-
>
308
-
> - Windows 11
309
-
> - Windows 10 20H2 or later.
310
-
> - Windows 10 1803 or later, with the May 2021 or later cumulative monthly security update.
311
-
312
-
For more information, see [New Microsoft Edge to replace Microsoft Edge Legacy with April’s Windows 10 Update Tuesday release](https://techcommunity.microsoft.com/t5/microsoft-365-blog/new-microsoft-edge-to-replace-microsoft-edge-legacy-with-april-s/ba-p/2114224).
313
-
314
300
-**Company Portal**
315
301
Deploying the Intune *Company Portal* app to all devices as a required application is recommended. Company Portal is the self-service hub for users that they use to install applications from multiple sources, like Intune, Microsoft Store, and Configuration Manager. Users also use the portal to sync their device with Intune, check compliance status, and so on.
316
302
@@ -517,15 +503,28 @@ In this phase, you'll apply organization-specific settings, apps, and review you
517
503
-[Applications](#applications)
518
504
519
505
### Microsoft Edge
506
+
#### Microsoft Edge Deployment
507
+
Microsoft Edge is included on devices that run:
508
+
- Windows 11.
509
+
- Windows 10 20H2 or later.
510
+
- Windows 10 1803 or later, with the May 2021 or later cumulative monthly security update.
511
+
512
+
Microsoft Edge will update automatically post user logon. To trigger an update for Microsoft Edge during deployment you could run the following command:
To deploy Microsoft Edge to previous versions of Windows, see [Add Microsoft Edge for Windows to Microsoft Intune](./intune/apps/apps-windows-edge.md).
518
+
519
+
#### Microsoft Edge Configuration
521
520
Two components of the Microsoft Edge experience, which apply when users sign in with their Microsoft 365 credentials, can be configured from the Microsoft 365 Admin Center.
522
521
523
522
- The start page logo in Microsoft Edge can be customized by configuring the *Your organization* section within the Microsoft 365 admin center. For more information, see [Customize Office 365 for your organization](/microsoft-365/admin/setup/customize-your-organization-theme).
524
523
- The default new tab page experience in Edge includes Office 365 information and personalized news. How this page is displayed can be customized from the Microsoft 365 admin center under **Settings** > **Org settings** > **News** > **Microsoft Edge new tab page**.
525
524
526
525
You can also set other settings for Microsoft Edge using settings catalog profiles. For example, you might want to configure specific sync settings for your organization.
527
526
528
-
- Microsoft Edge
527
+
-**Microsoft Edge**
529
528
- Configure the list of types that are excluded from synchronization - **passwords**
530
529
531
530
### Start and Taskbar layout
@@ -577,10 +576,22 @@ Following are some settings available in the settings catalog that might be rele
577
576
578
577
-**Block Gaming**
579
578
Organizations might prefer that corporate endpoints cannot be used to play games. The Gaming page within the Settings app can be hidden entirely using the following setting.
580
-
For additional information on the settings page visibility, refer to the CSP documentation[here](/windows/client-management/mdm/policy-csp-settings#settings-pagevisibilitylist) and the ms-settings URI scheme reference[here](/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference).
579
+
For additional information on the settings page visibility, refer to the [CSP documentation](/windows/client-management/mdm/policy-csp-settings#settings-pagevisibilitylist) and the ms-settings [URI scheme reference](/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference).
581
580
- Settings
582
581
- Page Visibility List – **hide:gaming-gamebar;gaming-gamedvr;gaming-broadcasting;gaming-gamemode;gaming-trueplay;gaming-xboxnetworking;quietmomentsgame**
583
582
583
+
-**Control Chat Icon Visbility in Taskbar**
584
+
The visiblity of the Chat icon in the Windows 11 taskbar can be controlled using the [Policy CSP](/windows/client-management/mdm/policy-csp-Experience#experience-configurechaticonvisibilityonthetaskbar).
585
+
586
+
- Experience
587
+
- Configure Chat Icon - **Disabled**
588
+
589
+
-**Control which tenants the Teams desktop client can sign in to**
590
+
When this policy is configured on a device, users can only sign in with accounts homed in an Azure AD tenant that is included in the "Tenant Allow List" defined in this policy. The "Tenant Allow List" is a comma seperated list of Azure AD tenant IDs. By specifing this policy and defining an Azure AD tenant you also block sign in to Teams for personal use. For more information see [How to restrict sign in on desktop devices](/microsoftteams/sign-in-teams#how-to-restrict-sign-in-on-desktop-devices).
591
+
592
+
- Administrative Templates \ Microsoft Teams
593
+
- Restrict sign in to Teams to accounts in specific tenants (User) - **Enabled**
594
+
584
595
### Device Restrictions
585
596
586
597
Windows Device restrictions templates contain many of the settings required to secure and manage a Windows endpoint using Windows Configuration Service Providers (CSPs). More of these settings will be made available in the settings catalog over time. For more information, see [Device Restrictions](./intune/configuration/device-restrictions-configure.md).
0 commit comments