enterprise
234 TopicsEarly preview of Microsoft Edge group policies
Update July 22nd 2019: Hey folks, Thanks for all the great feedback! We announced last week that Edge is now ready for Enterprise evaluations. You can find the latest ADMX files and MSIs/PKGs here: https://www.microsoftedgeinsider.com/enterprise And you can find all the enterprise-focused documentation here: https://docs.microsoft.com/DeployEdge There is also an Enterprise-focused section of these Insider forums which the team will be monitoring. Direct link here: https://techcommunity.microsoft.com/t5/Enterprise/bd-p/EdgeInsiderEnterprise Thanks again for the great feedback and engagement. Looking forward to continuing to hear from all of you! (Note: I have removed the ADMX zip file which was originally attached to this mail. Please see the latest versions at the links above) Original post follows: Hi everyone, We've been asked fairly regularly what policies we intend to support. We're still working on the list, but I’d like to share an early preview of the management policies we are working on for the new version of Microsoft Edge. You can find a zip file attached to this post, that includes the ADMX file, an English (US) version of the ADML file, and an English (US) HTML doc with the list of policies and descriptions. Please note that not all of the associated policies have been implemented by current canary or dev builds! Please send us feedback on the list, or the description text in the policies if something seems unclear. IMPORTANT This is a work in progress. We are sharing this early draft with you for your feedback, but the list will change between now and our final release, with policies being added, removed or changed based on feedback. The HTML file includes both Mac and Windows policies. Policies for managing updates aren’t included; those will be in a separate administrative template file. These are only in English (US). We are working to localize the policy descriptions and documentation before our final release. Please let us know if there are policies missing from the list, and give us feedback on the policy design. Thanks for your interest! Sean, on behalf of the Microsoft Edge teamSolved57KViews22likes80CommentsHow To Learn about Windows 365 Cloud PC in 2022 to jumpstart your implementation
With the increased demand and interest in Windows 365 Cloud PC, this might be a good moment to summarize all the resources available online that can help ramp you up on the technical and business aspects to get started. " With Windows 365, we’re bringing the operating system to the cloud and creating a new category: the cloud PC, providing organizations with greater flexibility and a secure way to empower their workforce, regardless of location.” – Satya Nadella, CEO of Microsoft Let’s get started and show you all the resources that are freely available on the internet to kick the tires with Windows 365 Cloud PC as part of your journey to SaaS-based Cloud PCs. Microsoft certification course Learning about Windows 365 will soon be something you can get rewarded on as well. We are working on an official Modern Desktop Administrator. You can already follow the instructor-led training courses to get trained on Windows 365 today! Stay tuned, more news coming soon! Microsoft 365 Certified: Modern Desktop Administrator Associate - Learn | Microsoft Docs What's new in Windows 365 Learn what new features are available in Windows 365. What's new in Windows 365 Enterprise | Microsoft Docs Windows 365 for Partners Grow your Microsoft 365 cloud services business with Windows 365, the following resources will help you establish maximum benefit from the Microsoft cloud as a Partner. Windows 365 Official Partner Portal Page Windows 365 Partner FAQ Windows 365 Partner PowerPoint deck Windows 365 Official Training material Windows 365 Product Brochure Technical deployment guide Upcoming partner (free) sales training March 31, 2022, 8:00-9:00 AM, Pacific time Register here: https://aka.ms/W365Salestraining1 April 5, 2022, 5:00-6:00 PM, Pacific time Register here: https://aka.ms/W365Salestraining2 April 7, 2022, 8:00-9:00 AM, Pacific time Register here: https://aka.ms/w365technicaltraining1 April 12, 2022, 5:00-6:00 PM, Pacific time Register here: https://aka.ms/w365technicaltraining2 Windows 365 PowerPoint presentations We know like no other that content is sometimes more important than the technology itself to share the benefits for business before starting a proof-of-concept implementation. Therefore, we made our official Microsoft presentation material publicly available for anyone. L100 overview deck of Windows 365 Enterprise L100 overview deck of Windows 365 Business Windows 365 Business vs Enterprise comparison deck L300 technical deep-dive deck of Windows 365 Enterprise Paperback book: Mastering Microsoft Endpoint Manager and Windows 365 One of the main reasons for the slow adoption of Modern Workplace solutions designed to simplify the management layer of your environment is the lack of understanding and knowledge of the product. With this book, you'll learn everything you need to know to make the shift to Modern Workplace, running Windows 10, Windows 11, or Windows 365. You can order it here: Amazon.com: Mastering Microsoft Endpoint Manager: Deploy and manage Windows 10, Windows 11, and Windows 365 on both physical and cloud PCs: 9781801078993: Brinkhoff, Christiaan, Larsen, Per, Pan, Ken, Manchester, Scott: Books Windows in the Cloud – YouTube webcast series This free live Microsoft Teams webcast series highlights new features, best practices from both Microsoft Engineering and the community, and Windows 365 success stories. We hope you’ll join us right here as we explore technology-focused topics alongside members of the community, Microsoft Engineering, customers, and users. Episode 6: Windows 365 Enterprise and Azure AD join support with Christian Montoya Episode 5: Monitoring, endpoint analytics, and alerting for Windows 365 with Navnith Ramkrishnan Episode 4: Windows 365 Business deep dive with Joydeep Mukherjee Episode 3: Learn from the Experts – MVPs with MVP Anoop Nair Episode 2: Windows 365 at Microsoft Ignite with Scott Manchester Episode 1: Welcome to the Show with Jen Gentleman Demo bytes Create Windows 365 Enterprise Azure AD Join Cloud PCs on your own network How to use the Windows 365 Web Portal the best way possible How to make your Windows 365 Cloud PC users a local administrator How to proactively monitor your Windows 365 Cloud PCs with Endpoint Analytics Windows 365 Business – deep dive technical walkthrough Windows 365 Business is a version of Windows 365 made specifically for use in smaller companies (up to 300 seats). It offers an easy, streamlined way of providing Cloud PCs to your users. Learn in this blog how to configure it. Get started with Windows 365 Business - Microsoft Tech Community Windows 365 Enterprise – deep dive technical walkthrough Find out what you need to know to jump into this new service and make it even easier for your users to connect to Windows running in the Microsoft cloud. Learn in this blog how to configure it. Get started with Windows 365 Enterprise - Microsoft Tech Community How to configure Windows 365 Enterprise Azure AD join (mindcore.dk) Universal Print, Defender, and OneDrive with Windows 365 Learn about how to use Windows 365 with other Microsoft 365 Cloud services such as Universal Print and Defender! Get started with Universal Print and Windows 365 Cloud PC - Microsoft Tech Community Learn how to configure Microsoft Defender for Endpoint for your Windows 365 cloud PCs and physical endpoints via Microsoft Endpoint Manager Learn how to exclude files and extensions in Windows 365 cloud PCs from syncing in to OneDrive via both GPOs and Microsoft Endpoint Manager Linkedin Learning – Deploy, Provision and Manage Windows 365 Cloud PCs by Brian Posey Learn more about how to configure and enable supporting infrastructure in Azure to create a virtual remote network. Get the skills you need to deploy a secure, manageable network, setting up your organization for success. Brian shows you why Windows 365 is so appealing, as it combines the simplicity of the PC with the security and power of the cloud. Welcome to Windows 365 | Linkedin Learning (linkedin.com) Puralsight online training – Windows 365 In this course, Windows 365 Cloud PC, we explore the value of Windows 365 and walk through accessing your cloud PC from both a browser and through an app called Remote Desktop. Windows 365 Cloud PC | Pluralsight Microsoft Endpoint Manager: Windows Autopilot, Windows 365 | Pluralsight Ask Microsoft Anything – Windows 365 New series! Join us every month with your questions about Windows 365 features, deployment, customization, and best practices. During these one-hour Ask Microsoft Anything (AMA) events, we'll have members of the Microsoft engineering and product teams ready to help and provide answers. Not sure where to start? Watch our Windows in the Cloud web series to catch up on the latest. Upcoming AMAs: Ask Microsoft Anything: Windows 365 - February 2022 Ask Microsoft Anything: Windows 365 - March 2022 Ask Microsoft Anything: Windows 365 - April 2022 Ask Microsoft Anything: Windows 365 - May 2022 Ask Microsoft Anything: Windows 365 - June 2022 Microsoft Mechanics Watch as Microsoft engineers show you how to get the most from the software, service, and hardware they built. Through in-product demos, recommendations, how-to's, and tips, they simplify complex topics so you can share them with clients, peers, and your management team. Windows 365, your Cloud PC | What it is, how it works, and how to set it up - YouTube Windows 365 admin setup and management tutorial for Cloud PCs - YouTube Microsoft Docs Official product documentation for Windows 365 Business Windows 365 Enterprise documentation | Microsoft Docs Windows 365 Business documentation | Microsoft Docs Windows 365 Feedback portal Share your ideas for future features and functionality for Windows 365—and vote on your favorites! Windows 365 feature requests - Microsoft Tech Community Windows 365 Roadmap To help in your readiness and planning, this page lists Windows 365 updates and features that are in development but not yet released. In development - Windows 365 Enterprise | Microsoft Docs Become a Microsoft MVP for Windows 365 Do you aspire to be a Microsoft Most Valuable Professional (MVP) for Windows 365? We just announced our new program. If you're interested in becoming an MVP, please reach out to me on social media! Join our Windows 365 Community – led by MVPs! We are a group of EUC, Enterprise Mobility and Azure specialists, sharing their knowledge actively with the wider virtual desktop communities. Our community is open to everyone, and several Microsoft MVPs will keep you posted every week on the latest news and announcements of Windows 365! Welcome to the brand new Windows 365 Community! - Windows 365 Community (w365community.com)15KViews9likes2CommentsInitial ISV solutions for Windows 365
Today we announced Windows 365, a cloud service that introduces a new way to experience Windows 10 or Windows 11. Windows 365 takes the operating system to the Microsoft cloud, streaming the full Windows experience—including your apps, content, and settings—to any device. Windows 365 also creates a new hybrid personal computing category called cloud PC, which uses both the power of the cloud and the capabilities of the device to provide a full, personalized Windows experience. As Partner Director with over 20 years of experience at Microsoft, I've worked on many projects and built many different products and services. For the last two years I've been leading the team of engineers to develop Windows 365. Through the process, I've spoken with customers, relied on the inputs of colleagues and applied all my industry knowledge to build this solution. I'm excited about the many features and capabilities we've put into Windows 365. Although we've built an end-to-end solution with Windows 365, we know that our partners are always able to find new ways to expand and extend Microsoft services. To support our partners, extensibility via Graph APIs is a core design principle of Windows 365. Over the last 12 months, we began working with four different ISVs during a private service preview. These companies were chosen because of the consistent innovations they've developed and because of their own unique perspectives. We gave them an overview of our product strategy, provided access to the preview service and Graph APIs, and then watched them get to work. Here's a look at the four ISVs and what they've built: Nerdio Nerdio provides deployment, management, and optimization services that simplify Azure deployments and empower Managed Services Providers and IT Professionals to be successful with Windows 365. Microsoft has worked closely with Nerdio to expand their Nerdio Manager for MSP and Nerdio Manager for Enterprise products to make it even easier for MSPs and IT professionals to deploy and manage Windows 365 with ease. With Nerdio, MSPs and enterprises of all sizes can facilitate the pricing, design, deployment, and management of cloud PCs from a central console. MSPs and enterprise organizations can use Nerdio Manager to roll out Windows 365 environments to individual customers or across multiple tenants. UKG UKG is a leading global provider of Human Capital Management (HCM), payroll, HR service delivery, and workforce management solutions that help companies create great work experiences for all employees. UKG has now expanded their signature UKG Pro solution to make the process of delivering Windows 365 to employees even simpler. Through the service, when HR enters the new hire's information in UKG Pro, a workflow is launched that results in a fully provisioned cloud PC delivered directly to the employee. Similarly, when employees leave the company and their credentials are revoked, UKG Pro and Windows 365 return that cloud PC to inventory, ready for the next person. ServiceNow ServiceNow enables organizations to create digital workflows that optimize how business gets done. Working with Microsoft, the ServiceNow team has integrated Windows 365 and Microsoft Teams with their ServiceNow IT Service Management (ITSM) solution. Through this integration, end users themselves can request cloud PCs through the familiar interface of Microsoft Teams. The platform automates the workflow to collect the necessary approvals, provision the machines, and deliver the cloud PCs to the end users. Through this automation, IT saves time and end users get access to the resources they need, all through a system that provides regular status updates. NetApp NetApp is a Microsoft Partner that gives managed services providers (MSPs) the tools they need to provision, deploy, manage, and troubleshoot virtual infrastructure. Spot PC by NetApp gives MSPs a powerful, single-pane-of-glass through which they can manage Windows 365 instances. This software as a service (SaaS) offering blends the power of Windows 365 with NetApp's enterprise-class infrastructure management so that MSPs can deliver highly available, scalable, and performant cloud PCs that meet their clients' needs—in minutes. MSPs can manage their entire customer base of cloud PCs through a single partner dashboard with full multi-tenant security, from which they can drill down into any given tenant to correct performance issues, troubleshoot problems, and allocate new cloud PC instances. Excitement for what's to come I'm excited about the great work these partners have done. They've helped Windows 365 integrate with popular tools and solutions to meet customers where they are. Now that we've launched Windows 365, the same Graph APIs used by these partners are available to everyone. You can find these resources here on Microsoft Docs. I look forward to seeing the next set of services that will be built by our partner ecosystem.14KViews8likes1CommentWindows 365 Cloud PC Self-Service Automated Request Process
How to automate Windows 365 Cloud PC self-service requests (Windows 365, Azure Active Directory, Microsoft Forms, Power Automate, MS Graph) Contributors: Juan José Guirola Sr. (Next Generation Endpoint GBB for Americas) Bobby Chang (Power Platform GBB for Americas) Azim Manjee (Cloud Endpoint Technical Specialist) Windows 365 simplifies how organizations offer Cloud PCs to their employees. As a cloud-based service from Microsoft, Windows 365 provides a personal, secure streamed experience from any supported device. It comes with all the productivity, security, and collaboration benefits of Microsoft 365. Windows 365 removes the need to manage a complex infrastructure and it integrates with existing cloud-based networking investments such as Azure Active Directory, Microsoft Endpoint Manager, and more. As the workplace continues to shift toward hybrid work, Windows 365 gives more organizations the ability to issue a cloud-native, persistent Cloud PC that is available 24 hours a day, 7 days a week, all with the ease of assigning a license. This simplified approach to provisioning Cloud PCs opens up the potential for automation and self-service scenarios. With Windows 365, you can provide your employees with Cloud PCs on demand, and here, we’ll show you how. Prerequisites The following items are required to provide automated, self-service Cloud PC request of Windows 365 deployment in a production environment: (For personal development and sandbox/testing scenario, you can use the Microsoft 365 Developer Plan and Power Apps Developer Plan). Windows 365 Enterprise Licenses Windows 10 Enterprise or Windows 11 Enterprise Azure Active Directory (Azure AD) Premium (P1/P2) Azure AD native group (must NOT be a synced group) Microsoft Intune (previously known as Microsoft Endpoint Manager) Microsoft Forms Power Automate per flow plan Microsoft Graph (Windows 365 Cloud PC MS Graph API in beta) Working with Windows 365 Cloud PCs using the Microsoft Graph API Azure App Registration with the following permissions: CloudPC.Read.All. For enterprise production scenarios, we would recommend leveraging the Application Lifecycle Management (ALM) capabilities in Power Platform, in order to safely adopt future changes to your processes. However, this is outside of the scope of this blog post. Before you begin Before you set up automation and a self-service Cloud PC request process, identify and assign the target Azure AD group(s) for the Windows 365 Cloud PC license assignment and provisioning policy. In our scenario, we have three Azure AD Groups (one Azure AD group for each of our three business segments), for both license and provisioning policy assignments. To configure group license assignments, see Assign licenses to users by group membership in Azure Active Directory. For information about how to target the groups for provisioning policies, see Create Windows 365 Cloud PC provisioning policies. Once you have the group assignment, set up the self-service process starting with Microsoft Forms. Create the request intake form Establishing an intake process will not only allow your employees to request the Windows 365 Cloud PC on-demand, but also allow you to build in an approval process and a feedback loop once the license is provisioned and ready for access. For our scenario, we are using Microsoft Forms as the intake form for requesting a Cloud PC. If your organization needs additional requirements around data validations and user experience in the form, we recommend leveraging Power Apps instead. To create a form with Microsoft Forms, see the Microsoft Forms help and learning home page or Create a form with Microsoft Forms. The following are the key components of our example form: Purpose-specific title “Windows 365 Cloud PC Request Form” Four questions to identify the requesting employee’s business segment, the type of Cloud PC they require, their region, and their contact number (aka mobile number) Shared to people in the organization only, for security, tracking, and notification purposes Alt text: Example Windows 365 Cloud PC Request Form in Microsoft Forms. Register MS Graph in Azure AD Once the request form is complete, register MS Graph as an Enterprise application in Azure Active Directory. Log into the Azure portal with appropriate permissions for making application registrations. Global Administrator privileges will provide the permissions to make application registrations; there are other options by following the custom role details in this documentation Custom role permissions for app registration - Azure AD - Microsoft Entra | Microsoft Docs. In the Azure services portal, click Azure Active Directory > Azure Active Directory. Alt text: A screenshot of the Azure Active Directory blade in the Azure services portal. Select App registrations in the left navigation menu. Click New registration. Give the application a name, select Single Tenant for the supported account type, and then click Register. Alt text: A screenshot of the Register an application screen, showing the details that need to be identified for the new application. Note. Alt text: A screenshot of the recently created application overview with the Application (client) ID and Directory (tenant) ID details highlighted. Click API permissions in the left navigation menu. . Select Microsoft.Graph and choose Application permissions. Ensure the following permissions are added: CloudPC.Read.All User.Read User.Read.All Group.Read.All Mail.Send (optional for sending messages via Graph ) Alt text: A screenshot of the Select permissions setup. Once the permissions have been added, click Grant consent. Click Certificates & secrets in the left navigation menu, and then click New client secret. Important! Note this key and store it somewhere safe, like a key vault. This key will only be visible upon creation. Once you navigate away, you will be unable to expose the key again and will have to generate a new key. Create the Cloud PC provisioning process automation In this section, we will build the Power Automate flows that will orchestrate the self-service process. This decision flow illustrates the end-to-end process of adding the requestor to proper AD security group, prompting an approval process, and then notifying requestor of their Cloud PC readiness. Alt text: A flowchart depicting the process for the automated provisioning process. To begin, sign into Microsoft Power Automate with your Microsoft 365 organization credentials. From the left navigation menu, click + Create then: Click Automated cloud flow. Name the flow and choose the flow trigger, “When a new response is submitted” (Microsoft Forms) from list. Click Create. Alt text: A screenshot that shows the flow name and trigger selection options. In When a new response is submitted, select your form from the Form Id drop down, then: Click + New step. Search for “forms” in Choose an operation and select Get response details (Microsoft Forms) from Actions. For Get response details, select your form from the Form Id drop down and then select Response Id as Dynamic content. Alt text: A screenshot of the criteria for the Get response details step. Click on + New step (To add variable for the Object ID of the targeted group in Azure AD). In Choose an operation, type variable. Select Initialize variable from Actions. Type VARGroup ID details screen. Give it a name, e.g., VARGroupID and select “String” as Type. Click + New step (To add variable for the “id” attribute value of the Cloud PC). Choose an operation, type variable. Select Initialize variable from Actions. Give it a name, e.g. VARCloudPCID and select “String” as Type. Click on + New step (To add variable for the “status” provisioning value of the Cloud PC). Search for VAR in Choose an operation. Select Initialize variable. Give it a name (e.g. VARProvisioningStatus) and select “String” as Type. Click on + New step (To add variable for your tenant ID). Choose an operation, type variable. Select Initialize variable from Actions. Give it a name (e.g., VARTenantGUID) and select “String” as Type. Tenant ID/Tenant GUID is required for authentication against the CloudPC Microsoft.Graph API. For information on getting your tenent ID, see How to find your Azure Active Directory tenent ID.For information on getting your tenent ID, see How to find your Azure Active Directory tenant ID. In the Value field, enter your Tenant ID. Click on + New step (To add variable for your Choose an operation, type variable. Select Initialize variable from Actions. Give it a name (e.g., VARAppID) and select “String” as Type. (This AppID represents the App Registration Client GUID, which is required for authentication against the CloudPC Microsoft.Graph API). In the Value field, enter your App Registration Client ID. Click on + New step (To add variable for the “Secret,” which is your . Choose an operation, type variable. Select Initialize variable from Actions. Give it a name (e.g., VARSecretID) and select “String” as Type. This is required for authentication against the CloudPC Microsoft.Graph API. Refer to Step 6 in the “Register MS Graph in Azure AD” section of this document. For additional protection, use Azure KeyVault to store and retrieve this client secret. Refer to Defining inputs and outputs for this variable action to obfuscate the secret during run time and from the logs. In the Value field, enter your Client Secret. At this point, we need to determine the automated actions, based on the “Business Segment” value provided by requestor. This can be accomplished by applying a Switch action. : Click on + New step. Search for “Switch” in Choose an operation and select Switch (Control). Next to On, select What Business Segment are you part of? from Dynamics content. Add as many “Cases” as needed to meet your specific needs. In our example, we have 3 Cases, which represent the 3 business segments: South Enterprise, LATAM, and Microsoft Federal. Within each Case, click Add an action Search for “variable” and select Set variable. Select VARGroupID from the Name drop down. Insert the Object ID of the desired targeted group for each “Case.” Note: The Object ID can be retrieved by viewing the group properties in Azure AD. Alt text: A screenshot of options for setting the Case variables. Click on + New step (This step will initiate the approval process) Search for “approval” in Choose an operation and select Start and wait for an approval. Select Approve/Reject – Everyone must approve from the Approval type drop down. Enter the email addresses for approvers in the Assigned to field. Fill in the remaining fields as desired. In our example, we elected to use values gathered from the requestor. Alt text: A screenshot of the available settings for the approval process in Start and wait for an approval. Click on + New step. This step will set up the execution process determined by approval outcome. Search for “Condition” in Choose an operation and select Condition control. Select Outcome under Dynamic content as the value. Choose is equal to and type “Approve” for the value. You will be presented with two sub processes, If yes and If no. Add necessary flows for each. Alt text: A screenshot of the If yes and If no sub-process flow setup options. For the If yes process: Click Add an action. Search for “Azure AD” in Choose an operation and select Get User. Select Responders’ Email for the User Id or Principal Name value. Click Add an action. Search for “Azure AD” in Choose an operation and select Add user to group. Select VARGroupID for Group Id and Id for User Id. Click Add an action. Search for “Send email” in Choose an operation and select Send an email (V2) Office 365 Outlook. Select VARGroupID for Group Id and Id for User Id. Rename to “Send an approved email.” Fill in all fields, as desired. Alt text: A screenshot of the Send an approval email setup. [Optional] If you want to added notification, click Add an action. You can add notification to your flow. In our example we are using Twilio, but you can choose to use other services. Follow your SMS provider’s instructions to properly configure in Power Automate Flow. Click Add an action. To pause the flow and allow the provisioning process to kick off in the backend, select Delay and configure the desired time. In our example, we’ve elected to delay the flow for 1 minute. Search for Delay in Choose an operation. Click Add an action. Important! To add the control to perform Graph API calls against tenant to monitor requestors Cloud PC provisioning status, search. In the Method field, select GET. Under URI, set it up exactly as illustrated below, placing the UserPrincipalName dynamic content inside the string: https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs?$filter=userPrincipalName eq '@{outputs('Get_user')?['body/userPrincipalName']}' and status eq 'Provisioning'&$count=true For Authentication, select Active Directory OAuth. Leave the authority as default. Enter your TenantID variable under Tenant, https://graph.microsoft.com under Audience, the AppID under Client ID, and the Secret in the Secret section. Alt text: Example setup for Graph API controls to monitor requestor Cloud PC provisioning status. Click Add an action, and search for “Parse JSON.” Under (note in the UI you will also see Parse User CPCs), select Body for the Content field and insert the body of the HTTP request response into the Schema field. Use the following schema: Alt text: A screenshot of completed content and schema details for Parse JSON. { "type": "object", "properties": { "@@odata.context": { "type": "string" }, "@@odata.count": { "type": "integer" }, "value": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string" }, "displayName": { "type": "string" }, "imageDisplayName": {}, "provisioningPolicyId": { "type": "string" }, "provisioningPolicyName": { "type": "string" }, "onPremisesConnectionName": { "type": "string" }, "servicePlanId": { "type": "string" }, "servicePlanName": { "type": "string" }, "status": { "type": "string" }, "userPrincipalName": { "type": "string" }, "lastModifiedDateTime": { "type": "string" }, "managedDeviceId": {}, "managedDeviceName": {}, "aadDeviceId": {}, "gracePeriodEndDateTime": {}, "servicePlanType": { "type": "string" }, "statusDetails": {} }, "required": [ "id", "displayName", "imageDisplayName", "provisioningPolicyId", "provisioningPolicyName", "onPremisesConnectionName", "servicePlanId", "servicePlanName", "status", "userPrincipalName", "lastModifiedDateTime", "managedDeviceId", "managedDeviceName", "aadDeviceId", "gracePeriodEndDateTime", "servicePlanType", "statusDetails" ] } } } } Note: You can also get this schema by using the Graph explorer to request from the same endpoint. Use the Generate from example button to generate the schema: Click Add action and search for “Apply to each.” In the Output field, select Value from our Parse JSON step. A Do until step should appear., If it doesn’t, click Add an action and search for “Do until.” Alt text: A screenshot of the Do until setup. In the Do until step, select the ProvisioningStatus variable is equal to string(‘provisioned’). Click and search for “Set Variable.” Configure the CPC-ID Variable to the ID of the item from the Parse JSON. Click Add an action and search for “HTTP.” Configure the HTTP using the same variables for TenantID, APpID, and Secret, as in the previous HTTP action, but using the following URI: https://graph.microsoft.com/beta/deviceManagement/virtualEndpoint/cloudPCs/@{variables('CPC-ID')} Example: Alt text: Example setup for monitoring Cloud PC. Click Add an action, search for “Parse JSON.” Select Body for the Content field and insert the following into the Schema field: { "type": "object", "properties": { "@@odata.context": { "type": "string" }, "id": { "type": "string" }, "displayName": { "type": "string" }, "imageDisplayName": { "type": "string" }, "provisioningPolicyId": { "type": "string" }, "provisioningPolicyName": { "type": "string" }, "onPremisesConnectionName": { "type": "string" }, "servicePlanId": { "type": "string" }, "servicePlanName": { "type": "string" }, "status": { "type": "string" }, "userPrincipalName": { "type": "string" }, "lastModifiedDateTime": { "type": "string" }, "managedDeviceId": { "type": "string" }, "managedDeviceName": { "type": "string" }, "aadDeviceId": { "type": "string" }, "gracePeriodEndDateTime": {}, "servicePlanType": { "type": "string" }, "statusDetails": {} } } Alt text: A screenshot of the Parse JSON schema. Click Add an action and search for “Set Variable.” Select ProvisioningStatus for the Name and configure the provisioning status variable to the status of the item from the Parse JSON. Click Add an action and search for “Delay.” Set a delay in an appropriate increment to recheck the status based on your typical Cloud PC provisioning time (e.g., 30 minutes is a normal time increment). In our example, we selected an increment of every 15 seconds. Consider throttling concerns to not overwhelm the API and cause timeouts. Once you’re past the Do Until scope, Click Add an action and search for “Send an Email.” Create your “successful” provisioning email. In our example, we use several variables and dynamic content to ensure clarity. You can also embed links to the different clients available to the employee for accessing their Cloud PC. Alt text: An example of a “successful” provisioning email setup. Click Add an action and search for “Send Text Message.” Create your “successful” provisioning SMS. In our example, we use several variables and dynamic content for clarity. Alt text: An example “successful” provisioning SMS message setup. Once you’re past the Apply to Each scope, Click Add an action, and search for “Terminate.” Set the Status to Successful. Return to the Approval Conditon to setup the rejection or If no process. Scroll up in the workflow to access this setup. Click Add an action and search for “Send Email.” Create and carefully word the rejection email. Alt text: An example of a rejection email setup. Click Add an action and search for Terminate. Set the Status as Cancelled. The entire Power Automate flow should look like the image below. Alt text: A Power Automatic flow diagram depicting the process described in this document. Once you’ve completed adding in steps to your automation flow, you’re ready to test the solution. Select Test and execute the steps described in the User experience section of this document. User experience Once the self-service experience is configured, the employee or requestor should be able to generate a request. The following is an example of what the user can expect during their request experience. The requestor completes the Self-service user request form. Alt text: An example of a completed self-service request form filled in by an employee. The flow kicks off based on information entered in the form by the requestor. The approval process begins. Alt text: An illustration of the approval process flow. The Approver gets an email and Microsoft Teams notification to approve, reject, or reassign the request. Alt text: An example of an approval request. Once approved or rejected, the flow continues to add the user to the proper Azure AD Group, which in turn will assign the proper Windows 365 license and the correct provisioning policy. Alt text: An illustration of the If yes and If no process flows. If the request is approved, the approval email and SMS text will be sent to the requestor informing them that the request was approved. If the request is rejected, the rejection email will be sent. Alt text: An example of an approval email. Alt text: An example of an approval text message. Power Automate will monitor the provisioning status as it changes from “provisioning” to “provisioned.” Once the Cloud PC status changes to “provisioned,” the requestor will receive an email and SMS text message informing them that their Cloud PC has been provisioned and is ready to access. Alt text: An example email message informing the requestor that their Cloud PC has been provisioned. Alt text: An example text message informing the requestor that their Cloud PC has been provisioned. Continue the conversation by joining us in the Microsoft 365 Tech Community! Whether you have product questions or just want to stay informed with updates on new releases, tools, and blogs, Microsoft 365 Tech Community is your go-to resource to stay connected.8.1KViews6likes2CommentsUnlocking the Power of Windows 365 in 2025: Your Ultimate Learning Guide
Fun fact, the article below is written by Microsoft Copilot! Before kicking off, I want to wish all of you Happy (and successful) New Year! As we move further into 2025, the digital workspace continues to evolve, and Windows 365 remains at the forefront, offering seamless and flexible cloud computing solutions. Last year, we have been recognized for the second consecutive year as a Leader in the 2024 Gartner® Magic Quadrant™ for Desktop as a Service (DaaS). Whether you're a seasoned professional or new to the world of cloud PCs, there's always more to learn about making the most out of Windows 365. To kick this year off with a tradition, here’s your comprehensive new guide to mastering Windows 365 in the year 2025! Getting started with Windows 365 Microsoft provides a wealth of resources to help users understand and maximize Windows 365. Start by exploring the official Windows 365 website for detailed documentation, tutorials, and updates. Additionally, the Microsoft Learn platform offers structured learning paths and modules specifically tailored to Windows 365. Windows 365 migration: It's easier than you think - Windows IT Pro Blog Windows 365 Cloud PCs and Microsoft Intune for VDI administrators | Windows IT Pro Blog New end-user experiences for Windows in the cloud: December 2024 | Microsoft Community Hub Technical deep dive bootcamp on Microsoft AVD and Windows 365 The future of Windows, Windows 365 and AI | Microsoft 365 Community Conference Create provisioning policies for Windows 365 Windows 365 deployment overview Windows 365 networking deployment options Windows in the Cloud video series Windows in the Cloud video series dives into Windows 365 capabilities: Windows 365 and Azure Virtual Desktop news from Microsoft Ignite - Windows in the Cloud What’s next in Windows 365 Frontline - Windows in the Cloud Introducing Windows 365 Link – the first Cloud PC device Microsoft Teams in the Windows cloud Windows App: what's new and what's next | Windows in the Cloud GPU-enhanced Windows 365 Cloud PCs - Windows in the Cloud Leadership spotlights Leadership spotlight: Melissa Grant, Windows Marketing Leadership spotlight: Marcus Ash on the future of Windows and AI design Customer spotlights Episode 1 - Windows 365 Customer Spotlights with Sepideh AMAs (Ask Microsoft Anything) Looking for more tips to deploy and manage Windows 365 and Azure Virtual Desktop faster, better, and simple? Catch up on the most recent sessions on-demand: AMA: The latest in Windows 365 and Windows in the cloud(December 2024) AMA: Windows 365 - Q3 2024 capabilities(October 2024) AMA: Windows 365 GPU-enabled Cloud PCs(September 2024) AMA: Windows App(August 2024) Upcoming dates: January 29, 2025 - AMA: Windows 365 February 26, 2025 - AMA: Windows 365 March 26, 2025 - AMA: Windows 365 Microsoft Ignite ’24 content available on demand In case you missed any of the breakout sessions that the Windows cloud engineering team delivered to Microsoft Ignite, they are now available on demand. Here are just a few highlights: Transform end-user computing experiences with Windows, Windows 365 and Intune Download PowerPoint slides here. Secure and resilient Windows strategy from Client to Cloud Download PowerPoint slides here. What's New in Windows Security, Productivity and Cloud What's new and what's next for Azure Virtual Desktop Books Mastering Windows 365 Mastering Microsoft Intune Get Microsoft certified As a candidate for this certification, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. You’re responsible for: Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types. Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Copilot for Security, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365. Implementing identity, security, access, policies, updates, and apps for endpoints. Learn more about the course via: Microsoft 365 Certified: Endpoint Administrator Associate - Certifications | Microsoft Learn Join the Windows 365 Community Engage with the Windows 365 community to share experiences, ask questions, and learn from others. Participate in forums such as the Microsoft Tech Community and follow relevant hashtags on social media platforms like LinkedIn and Twitter. Connecting with peers and experts can provide valuable insights and tips. Windows 365 Community weekly newsletters Follow us on LinkedIn Join our community on Discord Hands-On Practice There’s no substitute for hands-on experience. Set up your own Windows 365 environment and experiment with its features. Create different scenarios, troubleshoot issues, and explore various settings to get a practical understanding of how Windows 365 works. This practical approach will help solidify your knowledge and boost your confidence in using the platform. Go for our Interactive Demo for Windows 365 to: https://aka.ms/w365demo Attend Virtual Events and Webinars Save the date now for the third installment of the Microsoft Technical Takeoff for Windows and Microsoft Intune! This free, virtual skilling event will offer prescriptive, technical deep dives and panel-based discussions to help you feel prepared and confident in deploying and managing devices, apps, and experiences from client to cloud! Microsoft Technical Takeoff | Microsoft Community Hub Community events in 2025 to attend Workplace Ninja Summit + local user groups Workplace Ninja Summit is another amazing community event where you can learn about all things Intune and Windows 365. Its goal is to share knowledge with the community and to make workplace management with Microsoft Technologies simpler for everybody. Dates: 22 - 25 September 2025 More information can be found at Workplace Ninja Summit 2025 UK edition Workplace Ninjas UK 2025 - Expo + Breakouts | Edinburgh - 16 - 17 June 2025 Australia edition Workplace Ninja Australia Tour 2025 - Canberra, Fri, Feb 14, 2025, 9:00 AM | Meetup USA edition Workplace Ninjas US | 2025 Two-Day Conference Announcement December 2025 MMS Minnesota The Midwest Management Summit is a 4-day conference purposely capped at 750 attendees so that nobody gets lost in the crowd. Speakers have time to meet and talk to you. There are no people rushing out of a session to get the next speaker going. You have time to absorb what you see and talk it over with speakers and other attendees. Dates: May 4-8, 2025 at the Radisson Blu in Bloomington, MN More information can be found at https://mmsmoa.com/ MEM Summit Modern Endpoint Management Summit is an event dedicated to exploring the latest trends, innovations, and best practices in the field of endpoint management. Dates: 23 - 25 April 2025 - Paris, France Learn more about the event via: MEM Summit 2025 EUC Tech Summit Denmark EUCtech Denmark, an independent organization focusing on End User Computing technologies from Citrix and Microsoft. Dates: May 22, 2025 @ 7:30 am - 4:30 pm Learn more: EUCtech Denmark AVD Techfest AVD TechFest is an international festival bringing industry experts, vendors, and community speakers together to share and discover best practices for Windows 365 and Microsoft Azure Virtual Desktop (AVD) technology. Learn more at avdtechfest.com Stay in touch with us. Learning about Windows 365 in 2025 is an ongoing journey that combines official resources, community engagement, and hands-on experience. By tapping into these diverse learning avenues, you can stay ahead of the curve and fully harness the potential of Windows 365 to transform your digital workspace. Oh, and if you did not already, make sure to follow me on Linkedin to stay connected! Happy learning! Christiaan2.5KViews3likes0CommentsAnnouncing new regions for Windows 365.
Today I am pleased to announce that we have enabled two new regions for Windows 365. You can now deploy your Cloud PCs into Italy and Poland, specifically the Italy North and Poland Central regions. Within a provisioning policy if you select the European Geography, you can then select Italy North or Poland Central: This increases the number of Azure regions that Windows 365 supports enabling you more choice as to where you locate your Cloud PCs and enables you to place them closer to your user estate in those locations, reducing the latency for users in those locations. We will continue to enable new regions over the coming years to provide more choice and flexibility for your Cloud PCs, providing the maximum choice of global Azure regions. Over the coming years new Azure regions will be announced and we will be enabling Windows 365 from these as they become available. This also demonstrates our commitment to our customers to continue to evolve the service to grow into existing and new Azure regions, so that you can provide the best service to your own organization.2.2KViews3likes1CommentOfficial Download links for Microsoft Edge Stable Enterprise
I'm not 100% sure it's final but anyone who wishes/wants can test it. Microsoft Edge Stable Enterprise X64.msi http://go.microsoft.com/fwlink/?LinkID=2093437 X86.msi http://go.microsoft.com/fwlink/?LinkID=2093505 MicrosoftEdgePolicyTemplates.cab http://go.microsoft.com/fwlink/?LinkID=2099616 MicrosoftEdgeIntunePolicyTemplate.cab http://go.microsoft.com/fwlink/?LinkID=2099617 macOS.pkg http://go.microsoft.com/fwlink/?LinkID=2093438 Blocker Toolkit to disable automatic delivery of Microsoft Edge https://docs.microsoft.com/en-us/deployedge/microsoft-edge-blocker-toolkit84KViews3likes20CommentsLack of GUI for creating Always-on VPN on Windows 10 Enterprise
We still have to use Powershell to setup AOVPN, there is no GUI in the latest Windows 10 Enterprise to create a user or device tunnel. please add it as an option when creating a new connection in control panel or in the settings. https://aka.ms/AA5u26v861Views2likes0Comments