Skip to content

Commit f30b028

Browse files
Update cloud-native-windows-endpoints.md
- Added some extra info for controlling Teams for personal use on Windows 11. - Remove section for configuring the Microsoft Edge built in app from Phase 1 as it's included in most current versions of Windows. - Added note to Microsoft Edge configuration section about which operating systems Edge is included inbox and how to trigger an update during deployment. - Fixed some link formatting.
1 parent 921ce8b commit f30b028

1 file changed

Lines changed: 27 additions & 16 deletions

File tree

memdocs/cloud-native-windows-endpoints.md

Lines changed: 27 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -297,20 +297,6 @@ Your cloud native endpoint will need some applications. To get started, we recom
297297

298298
To deploy Microsoft 365 Apps, see [Add Microsoft 365 apps to Windows devices using Microsoft Intune](./intune/apps/apps-add-office365.md)
299299

300-
- **Microsoft Edge**
301-
Microsoft Edge is the new browser from Microsoft built on Chromium open source. Edge can easily be deployed to devices using the built-in app profile in Intune.
302-
303-
To deploy Microsoft Edge, see [Add Microsoft Edge for Windows to Microsoft Intune](./intune/apps/apps-windows-edge.md).
304-
305-
> [!NOTE]
306-
> Microsoft Edge is included on devices that run:
307-
>
308-
> - Windows 11
309-
> - Windows 10 20H2 or later.
310-
> - Windows 10 1803 or later, with the May 2021 or later cumulative monthly security update.
311-
312-
For more information, see [New Microsoft Edge to replace Microsoft Edge Legacy with April’s Windows 10 Update Tuesday release](https://techcommunity.microsoft.com/t5/microsoft-365-blog/new-microsoft-edge-to-replace-microsoft-edge-legacy-with-april-s/ba-p/2114224).
313-
314300
- **Company Portal**
315301
Deploying the Intune *Company Portal* app to all devices as a required application is recommended. Company Portal is the self-service hub for users that they use to install applications from multiple sources, like Intune, Microsoft Store, and Configuration Manager. Users also use the portal to sync their device with Intune, check compliance status, and so on.
316302

@@ -517,15 +503,28 @@ In this phase, you'll apply organization-specific settings, apps, and review you
517503
- [Applications](#applications)
518504

519505
### Microsoft Edge
506+
#### Microsoft Edge Deployment
507+
Microsoft Edge is included on devices that run:
508+
- Windows 11.
509+
- Windows 10 20H2 or later.
510+
- Windows 10 1803 or later, with the May 2021 or later cumulative monthly security update.
511+
512+
Microsoft Edge will update automatically post user logon. To trigger an update for Microsoft Edge during deployment you could run the following command:
513+
```powershell
514+
Start-Process -FilePath "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" -argumentlist "/silent /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=True"
515+
```
520516

517+
To deploy Microsoft Edge to previous versions of Windows, see [Add Microsoft Edge for Windows to Microsoft Intune](./intune/apps/apps-windows-edge.md).
518+
519+
#### Microsoft Edge Configuration
521520
Two components of the Microsoft Edge experience, which apply when users sign in with their Microsoft 365 credentials, can be configured from the Microsoft 365 Admin Center.
522521

523522
- The start page logo in Microsoft Edge can be customized by configuring the *Your organization* section within the Microsoft 365 admin center. For more information, see [Customize ‎Office 365‎ for your organization](/microsoft-365/admin/setup/customize-your-organization-theme).
524523
- The default new tab page experience in Edge includes Office 365 information and personalized news. How this page is displayed can be customized from the Microsoft 365 admin center under **Settings** > **Org settings** > **News** > **Microsoft Edge new tab page**.
525524

526525
You can also set other settings for Microsoft Edge using settings catalog profiles. For example, you might want to configure specific sync settings for your organization.
527526

528-
- Microsoft Edge
527+
- **Microsoft Edge**
529528
- Configure the list of types that are excluded from synchronization - **passwords**
530529

531530
### Start and Taskbar layout
@@ -577,10 +576,22 @@ Following are some settings available in the settings catalog that might be rele
577576

578577
- **Block Gaming**
579578
Organizations might prefer that corporate endpoints cannot be used to play games. The Gaming page within the Settings app can be hidden entirely using the following setting.
580-
For additional information on the settings page visibility, refer to the CSP documentation [here](/windows/client-management/mdm/policy-csp-settings#settings-pagevisibilitylist) and the ms-settings URI scheme reference [here](/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference).
579+
For additional information on the settings page visibility, refer to the [CSP documentation](/windows/client-management/mdm/policy-csp-settings#settings-pagevisibilitylist) and the ms-settings [URI scheme reference](/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference).
581580
- Settings
582581
- Page Visibility List – **hide:gaming-gamebar;gaming-gamedvr;gaming-broadcasting;gaming-gamemode;gaming-trueplay;gaming-xboxnetworking;quietmomentsgame**
583582

583+
- **Control Chat Icon Visbility in Taskbar**
584+
The visiblity of the Chat icon in the Windows 11 taskbar can be controlled using the [Policy CSP](/windows/client-management/mdm/policy-csp-Experience#experience-configurechaticonvisibilityonthetaskbar).
585+
586+
- Experience
587+
- Configure Chat Icon - **Disabled**
588+
589+
- **Control which tenants the Teams desktop client can sign in to**
590+
When this policy is configured on a device, users can only sign in with accounts homed in an Azure AD tenant that is included in the "Tenant Allow List" defined in this policy. The "Tenant Allow List" is a comma seperated list of Azure AD tenant IDs. By specifing this policy and defining an Azure AD tenant you also block sign in to Teams for personal use. For more information see [How to restrict sign in on desktop devices](/microsoftteams/sign-in-teams#how-to-restrict-sign-in-on-desktop-devices).
591+
592+
- Administrative Templates \ Microsoft Teams
593+
- Restrict sign in to Teams to accounts in specific tenants (User) - **Enabled**
594+
584595
### Device Restrictions
585596

586597
Windows Device restrictions templates contain many of the settings required to secure and manage a Windows endpoint using Windows Configuration Service Providers (CSPs). More of these settings will be made available in the settings catalog over time. For more information, see [Device Restrictions](./intune/configuration/device-restrictions-configure.md).

0 commit comments

Comments
 (0)