Bainistigh naisc ó chomhpháirteanna chóras oibriúcháin Windows 10 le Seirbhísí Microsoft ag úsáid Freastalaí MDM Microsoft IntuneManage connections from Windows 10 operating system components to Microsoft services using Microsoft Intune MDM Server

Baineann sé leApplies to

  • Windows 10 Enterprise leagan 1903 agus leaganacha níos déanaíWindows 10 Enterprise 1903 version and newer

Déanann an t-airteagal seo cur síos ar na naisc líonra a dhéanann comhpháirteanna Windows 10 le Microsoft agus an Soláthraí Bainistíochta Gléas Soghluaiste/Cumraíocht Seirbhíse (MDM/CSP) agus Aitheantóir Acmhainne Comhionanna Oscailte Alliance Mobile (OMA URI) polasaithe ar fáil do Ghairmithe TF ag baint úsáide as Microsoft Intune chun cabhrú leis na sonraí a roinntear le Microsoft a bhainistiú.This article describes the network connections that Windows 10 components make to Microsoft and the Mobile Device Management/Configuration Service Provider (MDM/CSP) and custom Open Mobile Alliance Uniform Resource Identifier (OMA URI) policies available to IT Professionals using Microsoft Intune to help manage the data shared with Microsoft. Má theastaíonn uait naisc ó Windows chuig Seirbhísí Microsoft a íoslaghdú, nó socruithe príobháideachais a chumrú, tá roinnt socruithe le cur san áireamh.If you want to minimize connections from Windows to Microsoft services, or configure privacy settings, there are a number of settings for consideration. Mar shampla, is féidir leat sonraí diagnóiseacha a chumrú chuig an leibhéal is ísle don leagan Windows atá agat agus measúnú a dhéanamh ar na naisc eile a chruthaíonn Windows le Seirbhísí Microsoft, ar mhian leat iad a chasadh as ag baint úsáide as na treoracha san alt seo.For example, you can configure diagnostic data to the lowest level for your edition of Windows and evaluate other connections Windows makes to Microsoft services you want to turn off using the instructions in this article. Cé gur féidir naisc líonra le Microsoft a íoslaghdú, is iomaí cúis atá leis na cumarsáidí seo a chumasú de réir réamhshocraithe, cosúil le sainmhínithe bogearraí mailíseacha a nuashonrú agus liostaí reatha aisghairm na ndeimhnithe a chothabháil.While it is possible to minimize network connections to Microsoft, there are many reasons why these communications are enabled by default, such as updating malware definitions and maintaining current certificate revocation lists. Cabhraíonn na sonraí seo linn eispéireas pearsantaithe slán, iontaofa agus suas chun dáta a chur ar fáil.This data helps us deliver a secure, reliable, and up-to-date experience.

Tábhachtach

  • Tá na críochphointí Tráchta Ceadaithe do chumrú MDM liostaithe anseo: Trácht CeadaitheThe Allowed Traffic endpoints for an MDM configuration are here: Allowed Traffic
    • Ní féidir trácht líonra an CRL (Liosta Cúlghairme Deimhnithe) agus OCSP (Prótacal Stádas Teastais Ar Líne) a dhíchumasú agus beidh sé fós le feiceáil i rianta líonra.CRL (Certificate Revocation List) and OCSP (Online Certificate Status Protocol) network traffic cannot be disabled and will still show up in network traces. Déantar seiceálacha CRL agus OCSP chuig na húdaráis eisiúna deimhnithe.CRL and OCSP checks are made to the issuing certificate authorities. Tá Microsoft ar cheann de na húdaráis seo.Microsoft is one of these authorities. Tá a lán údarás eile ann chomh maith cosúil le DigiCert, Thawte, Google, Symantec agus VeriSign.There are many others such as DigiCert, Thawte, Google, Symantec, and VeriSign.
    • Tá roinnt tráchta ann a theastaíonn go sonrach do bhainistíocht Microsoft Intune do ghléasanna Windows 10.There is some traffic which is specifically required for the Microsoft Intune based management of Windows 10 devices. Áirítear leis an trácht seo Seirbhís Fógraí Windows (WNS), Nuashonrú Deimhnithe Fréimhe Uathoibríoch (ARCU), agus roinnt tráchta a bhaineann le Windows Update.This traffic includes Windows Notifications Service (WNS), Automatic Root Certificates Update (ARCU), and some Windows Update related traffic. Cuimsíonn an trácht thuasluaite an Trácht Ceadaithe do Fhreastalaí MDM Microsoft Intune le gléasanna Windows 10 a bhainistiú.The aforementioned traffic comprises the Allowed Traffic for Microsoft Intune MDM Server to manage Windows 10 devices.
  • Ar chúiseanna slándála, tá sé tábhachtach a bheith cúramach agus cinneadh á dhéanamh ar na socruithe a chumrú toisc go dtig gléas nach bhfuil chomh slán a bheith mar thoradh orthu.For security reasons, it is important to take care in deciding which settings to configure as some of them may result in a less secure device. I measc samplaí de shuíomhanna ar féidir cumraíocht gléas nach bhfuil chomh slán a bheith mar thoradh orthu tá: díchumasú Windows Update, Nuashonrú Deimhnithe Uathoibríoch Fréamhacha, agus díchumasú Cosantóir Windows.Examples of settings that can lead to a less secure device configuration include: disabling Windows Update, disabling Automatic Root Certificates Update, and disabling Windows Defender. Dá réir sin, ní mholaimid aon cheann de na gnéithe seo a dhíchumasú.Accordingly, we do not recommend disabling any of these features.
  • Chun a chinntiú go bhfuil tosaíocht ag CSPanna thar Pholasaithe Grúpa i gcás coinbhleachtaí, bain úsáid as an bpolasaí ControlPolicyConflict.To ensure CSPs take priority over Group Policies in case of conflicts, use the ControlPolicyConflict policy.
  • Seans nach n-oibreoidh na naisc Cabhair agus Tabhair Aiseolas dúinn a thuilleadh i ndiaidh roinnt de na socruithe MDM/CSP nó iad uilig a chur i bhfeidhm.The Get Help and Give us Feedback links in Windows may no longer work after applying some or all of the MDM/CSP settings.

Rabhadh

Má ritheann úsáideoir an t-ordú “Athshocraigh an ríomhaire seo” (Socruithe -> Nuashonrú & slándáil -> Athshlánú) leis an rogha “Bain gach rud”, caithfear socruithe Fheidhmiúlacht Theoranta Tráchta Shrianta Windows a chur i bhfeidhm arís chun trácht amach an ghléis a athshrianadh.If a user executes the "Reset this PC" command (Settings -> Update & Security -> Recovery) with the "Remove Everything" option the >Windows Restricted Traffic Limited Functionality settings will need to be re-applied in order re-restrict the device's egress traffic. Caithfear an cliant a athchlárú le seirbhís Microsoft Intune chun é sin a dhéanamh.>To do this the client must be re-enrolled to the Microsoft Intune service. D’fhéadfadh go dtarlódh trácht amach sa tréimhse roimh shocruithe Fheidhmiúlacht Theoranta Tráchta Shrianta Windows a chur i bhfeidhm arís.Egress traffic may occur during the period prior to the re->application of the Restricted Traffic Limited Functionality settings. Má ritheann an t-úsáideoir “Athshocraigh an ríomhaire seo” leis an rogha “Coinnigh mo chomhaid”, coinneofar socruithe Fheidhmiúlacht Theoranta Tráchta Shrianta Windows ar an ngléas agus bainfidh cumraíocht trácht theoranta leis an gcliant fós le linn agus tar éis “Coinnigh mo chomhaid” a athshocrú. Ní bheidh ar an gcliant athchlárú.If the user executes a "Reset this PC" with the "Keep my files" >option the Restricted Traffic Limited Functionality settings are retained on the device, and therefore the client will remain in a >Restricted Traffic configuration during and after the "Keep my files" reset, and no re-enrollment is required.

Le haghaidh tuilleadh eolais ar Microsoft Intune féach le do thoil Athraigh seachadadh seirbhíse TF do d'ionad oibre nua-aimseartha agus Doiciméadúchán Intune Microsoft.For more information on Microsoft Intune please see Transform IT service delivery for your modern workplace and Microsoft Intune documentation.

Féach faisnéis mhionsonraithe faoi naisc líonra a bhainistiú le Seirbhísí Microsoft ag baint úsáide as Socruithe Windows, Polasaithe Grúpa agus socruithe Clárlainne Bainistigh naisc ó chomhpháirteanna córais oibriúcháin Windows 10 go seirbhísí Microsoft.For detailed information about managing network connections to Microsoft services using Windows Settings, Group Policies and Registry settings see Manage connections from Windows 10 operating system components to Microsoft services.

Déanaimid ár ndícheall i gcónaí an doiciméadúchán atá againn a fheabhsú agus cuirimid fáilte roimh d’aiseolas.We are always striving to improve our documentation and welcome your feedback. Is féidir leat aiseolas a sheoladh trí ríomhphost a sheoladh chuig telmhelp@microsoft.com.You can provide feedback by sending email to telmhelp@microsoft.com.

Socruithe i gcomhair Windows 10 Enterprise leagan 1903 agus níos déanaíSettings for Windows 10 Enterprise edition 1903 and newer

Déanann an tábla seo a leanas roghanna bainistíochta a liostáil do gach suíomh.The following table lists management options for each setting.

I gcomhair Windows 10, tá na polasaithe MDM seo a leanas ar fáil sa CSP polasaí.For Windows 10, the following MDM policies are available in the Policy CSP.

  1. Nuashonrú uathoibríoch ar fhréamhdheimhnitheAutomatic Root Certificates Update

    1. Polasaí MDM: Níl aon MDM ar fáil d'aon turas le haghaidh Nuashonrú Deimhnithe Fréimhe Uathoibríoch.MDM Policy: There is intentionally no MDM available for Automatic Root Certificate Update. Níl ann don MDM seo óir go gcuirfeadh sé cosc ar oibriú agus ar bhainistíocht de bhainistíocht MDM ar ghléasanna.This MDM does not exist since it would prevent the operation and management of MDM management of devices.
  2. Cortana agus CuardachCortana and Search

    1. Polasaí MDM: Eispéireas/AllowCortana.MDM Policy: Experience/AllowCortana. Roghnaigh cibé an gceadófar do Cortana suiteáil agus rith ar an ngléas.Choose whether to let Cortana install and run on the device. Socraigh ag 0 (náid)Set to 0 (zero)
    2. Polasaí MDM: Search/AllowSearchToUseLocation.MDM Policy: Search/AllowSearchToUseLocation. Roghnaigh cibé an féidir le Cortana agus Cuardaigh torthaí cuardaigh atá feasach ar shuíomh a sholáthar.Choose whether Cortana and Search can provide location-aware search results. Socraigh ag 0 (náid)Set to 0 (zero)
  3. Dáta & AmDate & Time

    1. Polasaí MDM: Settings/AllowDateTime.MDM Policy: Settings/AllowDateTime. Ligeann sé don úsáideoir socruithe dáta agus ama a athrú.Allows the user to change date and time settings. Socraigh ag 0 (náid)Set to 0 (zero)
  4. Aisghabháil meiteashonraí gléisDevice metadata retrieval

    1. Polasaí MDM: DeviceInstallation/PreventDeviceMetadataFromNetwork.MDM Policy: DeviceInstallation/PreventDeviceMetadataFromNetwork. Roghnaigh cibé ar chóir cosc a chur ar Windows meiteashonraí gléis a aisghabháil ón Idirlíon nó nár chóir.Choose whether to prevent Windows from retrieving device metadata from the Internet. Socraigh go CumasaitheSet to Enabled
  5. Aimsigh Mo GhléasFind My Device

    1. Polasaí MDM: Experience/AllowFindMyDeviceMDM Policy: Experience/AllowFindMyDevice. Casann an polasaí seo Aimsigh Mo Ghléas ar.This policy turns on Find My Device. Socraigh ag (náid)Set to 0 (zero)
  6. Sruthú clófhoirneFont streaming

    1. Polasaí MDM: System/AllowFontProviders.MDM Policy: System/AllowFontProviders. Socrú a dhearbhaíonn cibé an bhfuil cead ag Windows clónna agus sonraí catalóige cló a íoslódáil ó sholáthraí cló ar líne.Setting that determines whether Windows is allowed to download fonts and font catalog data from an online font provider. Socraigh ag (náid)Set to 0 (zero)
  7. Úsáidtear chun Windows Insider Preview Insider a aisghabháil.Insider Preview builds

    1. Polasaí MDM: System/AllowBuildPreview.MDM Policy: System/AllowBuildPreview. Dearbhaíonn an socrú polasaí seo cibé an féidir le húsáideoirí rochtain a fháil ar na rialuithe tógála Insider sna hArdroghanna do Windows Update.This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. Socraigh go 0 (náid)Set to 0 (zero)
  8. Internet Explorer Tá na polasaithe MDM Microsoft Internet Explorer seo a leanas ar fáil san Internet Explorer CSPInternet Explorer The following Microsoft Internet Explorer MDM policies are available in the Internet Explorer CSP

    1. Polasaí MDM: InternetExplorer/AllowSuggestedSites.MDM Policy: InternetExplorer/AllowSuggestedSites. Molann sé suíomhanna gréasáin bunaithe ar ghníomhaíocht brabhsála an úsáideora.Recommends websites based on the user’s browsing activity. Socraigh go Díchumasaithe.Set to Disabled
    2. Polasaí MDM: InternetExplorer/PreventManagingSmartScreenFilter.MDM Policy: InternetExplorer/PreventManagingSmartScreenFilter. Cuireann sé cosc ar an úsáideoir riar a dhéanamh ar SmartScreen Cosantóir Windows, a thugann rabhadh don úsáideoir má tá iarrachtaí ar chuairteanna mailíseacha ar bun ar an suíomh le sonraí pearsanta a bhailiú.Prevents the user from managing Windows Defender SmartScreen, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through "phishing," or is known to host malware. Socraigh go Teaghrán le Luach:Set to String with Value:
      1. <enabled/><data id=”IE9SafetyFilterOptions” value=”1”/>
    3. Polasaí MDM: InternetExplorer/DisableFlipAheadFeature.MDM Policy: InternetExplorer/DisableFlipAheadFeature. Dearbhaíonn sé cibé an féidir le húsáideoir svaidhpeáil trasna an scáileáin nó cliceáil Ar Aghaidh chun dul chuig an gcéad leathanach réamhluchtaithe suímh Ghréasáin eile.Determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website. Socraigh go CumasaitheSet to Enabled
    4. Polasaí MDM: InternetExplorer/DisableHomePageChange.MDM Policy: InternetExplorer/DisableHomePageChange. Dearbhaíonn cibé an féidir le húsáideoirí an Leathanach Baile réamhshocraithe a athrú nó nach féidir.Determines whether users can change the default Home Page or not. Socraigh go Teaghrán le Luach:Set to String with Value:
      1. <enabled/><data id=”EnterHomePagePrompt” value=”Start Page”/>
    5. Polasaí MDM: InternetExplorer/DisableFirstRunWizard.MDM Policy: InternetExplorer/DisableFirstRunWizard. Cuireann sé cosc ar Internet Explorer an draoi Chéad Rith a rith an chéad uair a thosaíonn úsáideoir an brabhsálaí tar éis Internet Explorer nó Windows a shuiteáil.Prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows. Socraigh go Teaghrán le Luach:Set to String with Value:
      1. <enabled/><data id=”FirstRunOptions” value=”1”/>
  9. Tíleanna BeoLive Tiles

    1. Polasaí MDM: Notifications/DisallowTileNotification.MDM Policy: Notifications/DisallowTileNotification. Casann an socrú polasaí seo fógraí tíle as.This policy setting turns off tile notifications. Má chumasaíonn tú an socrú polasaí seo ní bheidh feidhmchláir agus gnéithe córais in ann a gcuid tíleanna agus suaitheantais tíle a nuashonrú ar an Scáileán tosaigh.If you enable this policy setting applications and system features will not be able to update their tiles and tile badges in the Start screen. Luach Slánuimhreach 1Integer value 1
  10. Sioncronú ríomhphostMail synchronization

    1. Polasaí MDM: Accounts/AllowMicrosoftAccountConnection.MDM Policy: Accounts/AllowMicrosoftAccountConnection. Sonraíonn sé cibé an bhfuil cead ag an úsáideoir cuntas MSA a úsáid le haghaidh fíordheimhniú agus seirbhísí nasctha nach mbaineann le ríomhphost.Specifies whether the user is allowed to use an MSA account for non-email related connection authentication and services. Socraigh ag 0 (náid)Set to 0 (zero)
  11. Cuntas MicrosoftMicrosoft Account

    1. Polasaí MDM: Accounts/AllowMicrosoftAccountSignInAssistant.MDM Policy: Accounts/AllowMicrosoftAccountSignInAssistant. Díchumasaigh an Cúntóir Sínithe Isteach chuntas Microsoft.Disable the Microsoft Account Sign-In Assistant. Socraigh ag 0 (náid)Set to 0 (zero)
  12. Microsoft Edge Tá na polasaithe MDM Microsoft Edge seo ar fáil sa Policy CSP.Microsoft Edge The following Microsoft Edge MDM policies are available in the Policy CSP. Chun liosta iomlán a fháil de pholasaithe Microsoft Edge, féach Polasaithe atá ar fáil i gcomhair Microsoft Edge.For a complete list of the Microsoft Edge policies, see Available policies for Microsoft Edge.

    1. Polasaí MDM: Browser/AllowAutoFill.MDM Policy: Browser/AllowAutoFill. Roghnaigh cibé an féidir le fostaithe uathlíonadh a úsáid ar shuíomhanna Gréasáin.Choose whether employees can use autofill on websites. Socraigh ag 0 (náid)Set to 0 (zero)
    2. Polasaí MDM: Browser/AllowDoNotTrack.MDM Policy: Browser/AllowDoNotTrack. Roghnaigh cibé an féidir le fostaithe ceanntásca Ná Rianaigh a sheoladh.Choose whether employees can send Do Not Track headers. Socraigh ag 0 (náid)Set to 0 (zero)
    3. Polasaí MDM: Browser/AllowMicrosoftCompatbilityList.MDM Policy: Browser/AllowMicrosoftCompatbilityList. Sonraigh liosta comhoiriúnachta Microsoft in Microsoft Edge.Specify the Microsoft compatibility list in Microsoft Edge. Socraigh ag 0 (náid)Set to 0 (zero)
    4. Polasaí MDM: Browser/AllowPasswordManager.MDM Policy: Browser/AllowPasswordManager. Roghnaigh cibé an féidir le fostaithe pasfhocail a shábháil go logánta ar a gcuid gléasanna.Choose whether employees can save passwords locally on their devices. Socraigh ag 0 (náid)Set to 0 (zero)
    5. Polasaí MDM: Browser/AllowSearchSuggestionsinAddressBar.MDM Policy: Browser/AllowSearchSuggestionsinAddressBar. Roghnaigh cibé an dtaispeántar moltaí cuardaigh sa Bharra Seoltaí.Choose whether the Address Bar shows search suggestions. Socraigh ag 0 (náid)Set to 0 (zero)
    6. Polasaí MDM: Browser/AllowSmartScreen.MDM Policy: Browser/AllowSmartScreen. Roghnaigh cibé an mbíonn SmartScreen Chosantóir Windows casta air nó casta as.Choose whether Windows Defender SmartScreen is turned on or off. Socraigh ag 0 (náid)Set to 0 (zero)
  13. Táscaire Stádas Naisc LíonraNetwork Connection Status Indicator

    1. Nascacht/DisallowNetworkConnectivityActiveTaighde.Connectivity/DisallowNetworkConnectivityActiveTests. Nóta: I ndiaidh duit an polasaí seo a chur i bhfeidhm, caithfidh tú an gléas a atosú le héifeacht a thabhairt don socrú polasaí.Note: After you apply this policy you must restart the device for the policy setting to take effect. Socraigh go 1 (aon)Set to 1 (one)
  14. Mapaí as líneOffline maps

    1. Polasaí MDM: AllowOfflineMapsDownloadOverMeteredConnection.MDM Policy: AllowOfflineMapsDownloadOverMeteredConnection. Ceadaíonn sé íoslódáil agus nuashonrú de shonraí mapa thar naisc mhéadraithe.Allows the download and update of map data over metered connections.
      Socraigh ag 0 (náid)Set to 0 (zero)
    2. Polasaí MDM: EnableOfflineMapsAutoUpdate.MDM Policy: EnableOfflineMapsAutoUpdate. Díchumasaíonn sé íoslódáil agus nuashonrú uathoibríoch de shonraí mapaí.Disables the automatic download and update of map data. Socraigh ag (náid)Set to 0 (zero)
  15. OneDriveOneDrive

    1. Polasaí MDM: DisableOneDriveFileSync.MDM Policy: DisableOneDriveFileSync. Ceadaíonn sé do Riarthóirí TF feidhmchláir agus gnéithe a chosc ó bheith ag obair le comhaid ar OneDrive.Allows IT Admins to prevent apps and features from working with files on OneDrive. Socraigh go 1 (aon)Set to 1 (one)
    2. Sú isteach an ADMX - Leis an gcomhad OneDrive ADMX is déanaí a fháil beidh cliant Windows 10 cothrom le dáta de dhíth.Ingest the ADMX - To get the latest OneDrive ADMX file you need an up-to-date Windows 10 client. Tá na comhaid ADMX suite faoin gcosán seo a leanas: %LocalAppData%\Microsoft\OneDrive\ tá fillteán leis an tógáil reatha OneDrive (m.sh. "18.162.0812.0001").The ADMX files are located under the following path: %LocalAppData%\Microsoft\OneDrive\ there's a folder with the current OneDrive build (e.g. "18.162.0812.0001"). Tá fillteán darb ainm "adm" ina bhfuil na comhaid sainmhínithe polasaí admx agus adml.There is a folder named "adm" which contains the admx and adml policy definition files.
    3. Polasaí MDM: Cuir cosc ar Thrácht Líonra roimh SignIn Úsáideora.MDM Policy: Prevent Network Traffic before User SignIn. PreventNetworkTrafficPreUserSignIn.PreventNetworkTrafficPreUserSignIn. Tá an luach OMA-URI: ./Device/Vendor/MSFT/Policy/Config/OneDriveNGSC~Policy~OneDriveNGSC/PreventNetworkTrafficPreUserSignIn, Cineál sonradh: teaghrán, Luach: <enabled/>The OMA-URI value is: ./Device/Vendor/MSFT/Policy/Config/OneDriveNGSC~Policy~OneDriveNGSC/PreventNetworkTrafficPreUserSignIn, Data type: String, Value: <enabled/>
  16. Socruithe Príobáideachta Ach amháin an leathanach Aiseolais agus Diagnóisice, ní mór na socruithe seo a chumrú do gach cuntas úsáideora a shíníonn isteach ar an ríomhaire.Privacy settings Except for the Feedback & Diagnostics page, these settings must be configured for every user account that signs into the PC.

    1. Ginearálta - TextInput/AllowLinguisticDataCollectionGeneral - TextInput/AllowLinguisticDataCollection. Rialaíonn an socrú polasaí seo an cumas sonraí breacadh dúigh agus clóscríofa a sheoladh chuig Microsoft.This policy setting controls the ability to send inking and typing data to Microsoft. Socraigh ag 0 (náid)Set to 0 (zero)
    2. Láthair - System/AllowLocation.Location - System/AllowLocation. Sonraíonn cibé ar chóir rochtain feidhmchláir ar an tseirbhís Láithreach a cheadú.Specifies whether to allow app access to the Location service. Socraigh go 0 (náid)Set to 0 (zero)
    3. Ceamara - Camera/AllowCamera.Camera - Camera/AllowCamera. Díchumasaíonn nó cumasaíonn sé an ceamara.Disables or enables the camera. Socraigh ag (náid)Set to 0 (zero)
    4. Micreafón - Privacy/LetAppsAccessMicrophone.Microphone - Privacy/LetAppsAccessMicrophone. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar an micreafón.Specifies whether Windows apps can access the microphone. Socraigh ag 2 (dó)Set to 2 (two)
    5. Fógraí - Privacy/LetAppsAccessNotifications.Notifications - Privacy/LetAppsAccessNotifications. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar fhógraí.Specifies whether Windows apps can access notifications. Socraigh ag 2 (dó)Set to 2 (two)
    6. Fógraí - Settings/AllowOnlineTips.Notifications - Settings/AllowOnlineTips. Cumasaíonn nó díchumasaíonn aisghabháil leideanna agus cabhair ar líne don aip Socruithe.Enables or disables the retrieval of online tips and help for the Settings app. Luach Slánuimhreach 0Integer value 0
    7. Caint, Breacadh dúigh & Clóscríbhneoireacht - Privacy/AllowInputPersonalization.Speech, Inking, & Typing - Privacy/AllowInputPersonalization. Sonraítear sa pholasaí seo cibé an bhfuil rogha ag úsáideoirí ar an ngléas aithint cainte ar líne a chumasú.This policy specifies whether users on the device have the option to enable online speech recognition. Socraigh go 0 (náid)Set to 0 (zero)
    8. Caint, Breacadh dúigh & Clóscríbhneoireacht: TextInput/AllowLinguisticDataCollectionSpeech, Inking, & Typing - TextInput/AllowLinguisticDataCollection. Rialaíonn an socrú polasaí seo an cumas sonraí breacadh dúigh agus clóscríofa a sheoladh chuig Microsoft Socraigh go 0 (náid)This policy setting controls the ability to send inking and typing data to Microsoft Set to 0 (zero)
    9. Faisnéis chuntais - Privacy/LetAppsAccessAccountInfo.Account info - Privacy/LetAppsAccessAccountInfo. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar fhaisnséis chuntais.Specifies whether Windows apps can access account information. Socraigh ag 2 (dó)Set to 2 (two)
    10. Teagmhálacha - Privacy/LetAppsAccessContacts.Contacts - Privacy/LetAppsAccessContacts. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar theagmhálacha.Specifies whether Windows apps can access contacts. Socraigh ag 2 (dó)Set to 2 (two)
    11. Féilire - Privacy/LetAppsAccessCalendar.Calendar - Privacy/LetAppsAccessCalendar. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar an bhféilire.Specifies whether Windows apps can access the calendar. Socraigh ag 2 (dó)Set to 2 (two)
    12. Stair glaonna - Privacy/LetAppsAccessCallHistory.Call history - Privacy/LetAppsAccessCallHistory. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar fhaisnséis chuntais.Specifies whether Windows apps can access account information. Socraigh ag 2 (dó)Set to 2 (two)
    13. Ríomhphost - Privacy/LetAppsAccessEmail.Email - Privacy/LetAppsAccessEmail. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar ríomhphost.Specifies whether Windows apps can access email. Socraigh ag 2 (dó)Set to 2 (two)
    14. Seoladh Teachtaireachtaí - Privacy/LetAppsAccessMessaging.Messaging - Privacy/LetAppsAccessMessaging. Sonraíonn sé cibé an féidir le feidhmchláir Windows teachtaireachtaí a léamh nó a sheoladh (téacs nó MMS).Specifies whether Windows apps can read or send messages (text or MMS). Socraigh ag 2 (dó)Set to 2 (two)
    15. Glaonna fóin - Privacy/LetAppsAccessPhone.Phone calls - Privacy/LetAppsAccessPhone. Sonraíonn sé cibé ar féidir le feidhmchláir Windows glaonna fóin a dhéanamh.Specifies whether Windows apps can make phone calls. Socraigh ag 2 (dó)Set to 2 (two)
    16. Raidiónna - Privacy/LetAppsAccessRadios.Radios - Privacy/LetAppsAccessRadios. Sonraíonn sé cibé an bhfuil rochtain ag feidhmchláir Windows le raidiónna a rialú.Specifies whether Windows apps have access to control radios. Socraigh ag 2 (dó)Set to 2 (two)
    17. Gléasanna eile - Privacy/LetAppsSyncWithDevices.Other devices - Privacy/LetAppsSyncWithDevices. Sonraíonn sé cibé ar féidir le feidhmchláir Windows sioncronú le gléasanna.Specifies whether Windows apps can sync with devices. Socraigh ag 2 (dó)Set to 2 (two)
    18. Gléasanna eile - Privacy/LetAppsAccessTrustedDevices.Other devices - Privacy/LetAppsAccessTrustedDevices. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar ghléasanna iontaofa.Specifies whether Windows apps can access trusted devices. Socraigh ag 2 (dó)Set to 2 (two)
    19. Aiseolas & diagnóisic - System/AllowTelemetry.Feedback & diagnostics - System/AllowTelemetry. Lig don ghléas sonraí diagnóiseacha agus úsáide teiliméadrachta, ar nós Watson a sheoladh.Allow the device to send diagnostic and usage telemetry data, such as Watson. Socraigh ag 0 (náid)Set to 0 (zero)
    20. Aiseolas & diagnóisic - Experience/DoNotShowFeedbackNotifications.Feedback & diagnostics - Experience/DoNotShowFeedbackNotifications. Cuireann sé cosc ar ghléasanna ceisteanna aiseolais ó Microsoft.Prevents devices from showing feedback questions from Microsoft. Socraigh go 1 (aon)Set to 1 (one)
    21. Feidhmchlár cúlra - Privacy/LetAppsRunInBackground.Background apps - Privacy/LetAppsRunInBackground. Sonraíonn sé an féidir le feidhmchláir Windows rith sa chúlra.Specifies whether Windows apps can run in the background. Socraigh ag 2 (dó)Set to 2 (two)
    22. Gluaiseacht: Privacy/LetAppsAccessMotionMotion - Privacy/LetAppsAccessMotion. Sonraíonn sé cibé ar féidir le feidhmchláir Windows rochtain a fháil ar shonraí gluaiseachta.Specifies whether Windows apps can access motion data. Socraigh ag 2 (dó)Set to 2 (two)
    23. Tascanna - Privacy/LetAppsAccessTasks.Tasks - Privacy/LetAppsAccessTasks. Múch an cumas roghnú cén acu feidhmchláir ag a bhfuil rochtain ar thascanna.Turn off the ability to choose which apps have access to tasks. Socraigh ag 2 (dó)Set to 2 (two)
    24. Diagnóisice Feidhmchláir - Privacy/LetAppsGetDiagnosticInfo.App Diagnostics - Privacy/LetAppsGetDiagnosticInfo. Feidhmigh cead, feidhmigh diúltú nó tabhair cead rialaithe úsáideoirí ar fheidhmchláir ar féidir leo faisnéis dhiagnóiseach faoi fheidhmchláir eile atá ag rith.Force allow, force deny or give user control of apps that can get diagnostic information about other running apps. Socraigh ag 2 (dó)Set to 2 (two)
  17. Ardán um Chosaint Bogearraí - Licensing/DisallowKMSClientOnlineAVSValidation.Software Protection Platform - Licensing/DisallowKMSClientOnlineAVSValidation. Diúltaigh de shonraí gníomhachtaithe cliaint KMS a sheoladh chuig Microsoft go huathoibríoch.Opt out of sending KMS client activation data to Microsoft automatically. Socraigh go 1 (aon)Set to 1 (one)

  18. Sláinte Stórais - Storage/AllowDiskHealthModelUpdatesí.Storage Health - Storage/AllowDiskHealthModelUpdates. Ceadaíonn sé do nuashonruithe samhail sláinte diosca.Allows disk health model updates. Socraigh ag 0 (náid)Set to 0 (zero)

  19. Sioncrónaigh do chuid socruithe - Experience/AllowSyncMySettings.Sync your settings - Experience/AllowSyncMySettings. Rialaigh cibé an ndéantar do shocruithe a shioncronú.Control whether your settings are synchronized. Socraigh ag 0 (náid)Set to 0 (zero)

  20. Teredo - Níl MDM de dhíth.Teredo - No MDM needed. Tá Teredo Casta As de réir réamhshocraithe.Teredo is Off by default. Is féidir le Barrfheabhsú Soláthair (DO) Teredo a chur air, ach déantar DO é féin a chasadh as trí MDM.Delivery Optimization (DO) can turn on Teredo, but DO itself is turned Off via MDM.

  21. Wi-Fi Sense - Níl MDM de dhíth.Wi-Fi Sense - No MDM needed. Níl Wi-Fi Sense ar fáil a thuilleadh ó Windows 10 leagan 1803 agus níos déanaí.Wi-Fi Sense is no longer available from Windows 10 version 1803 and newer.

  22. Cosantóir WindowsWindows Defender

    1. Defender/AllowCloudProtection.Defender/AllowCloudProtection. Dícheangal ón Sheirbhís Chosanta Microsoft in aghaidh bogearraí mailíseacha.Disconnect from the Microsoft Antimalware Protection Service. Socraigh ag 0 (náid)Set to 0 (zero)
    2. Defender/SubmitSamplesConsent.Defender/SubmitSamplesConsent. Stad de sheoladh samplaí comhaid ar ais chuig Microsoft.Stop sending file samples back to Microsoft. Socraigh ag 2 (dó)Set to 2 (two)
    3. Defender/EnableSmartScreenInShell.Defender/EnableSmartScreenInShell. Casann sé SmartScreen as i Windows do rith feidhmchláir agus comhaid.Turns off SmartScreen in Windows for app and file execution. Socraigh ag 0 (náid)Set to 0 (zero)
    4. SmartScreen Chosantóir Windows - Browser/AllowSmartScreen.Windows Defender SmartScreen - Browser/AllowSmartScreen. Díchumasaigh SmartScreen Chosantóir Windows.Disable Windows Defender SmartScreen. Socraigh ag 0 (náid)Set to 0 (zero)
    5. SmartScreen Chosantóir Windows EnableAppInstallControl - SmartScreen/EnableAppInstallControl.Windows Defender SmartScreen EnableAppInstallControl - SmartScreen/EnableAppInstallControl. Rialaíonn sé cibé an bhfuil cead ag úsáideoirí feidhmchláir a shuiteáil ó áiteanna seachas an Microsoft Store.Controls whether users are allowed to install apps from places other than the Microsoft Store. Socraigh ag 0 (náid)Set to 0 (zero)
    6. Cosaint (PUA) Feidhmchláir A Bhfuil Seans Nár Iarradh Iad Chosantóir Windows - Defender/PUAProtection.Windows Defender Potentially Unwanted Applications(PUA) Protection - Defender/PUAProtection. Sonraíonn sé an leibhéal braith d’fheidhmchláir a bhfuil seans ann nár iarradh iad (PUAs).Specifies the level of detection for potentially unwanted applications (PUAs). Socraigh go 1 (aon)Set to 1 (one)
    7. Defender/SignatureUpdateFallbackOrder.Defender/SignatureUpdateFallbackOrder. Cuireann sé ar do chumas an t-ord inar chóir teagmháil a dhéanamh le foinsí nuashonraithe sainmhínithe a shainiú.Allows you to define the order in which different definition update sources should be contacted. Is é an OMA-URI do seo ná: ./Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFallbackOrder, Cineál sonraí: Teaghrán, Luach: FileSharesThe OMA-URI for this is: ./Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFallbackOrder, Data type: String, Value: FileShares
  23. Spotsolas Windows - Experience/AllowWindowsSpotlight.Windows Spotlight - Experience/AllowWindowsSpotlight. Díchumasaigh Spotsolas WindowsDisable Windows Spotlight. Socraigh ag 0 (náid)Set to 0 (zero)

  24. Microsoft StoreMicrosoft Store

    1. ApplicationManagement/DisableStoreOriginatedApps.ApplicationManagement/DisableStoreOriginatedApps. Luach Boole a dhíchumasaíonn seoladh gach feidhmchlár ó Microsoft Store a tháinig réamh-shuiteáilte nó a íoslódáladh.Boolean value that disables the launch of all apps from Microsoft Store that came pre-installed or were downloaded. Socraigh go 1 (aon)Set to 1 (one)
    2. ApplicationManagement/AllowAppStoreAutoUpdate.ApplicationManagement/AllowAppStoreAutoUpdate. Sonraítear cibé an gceadaítear nuashonrú uathoibríoch de fheidhmchláir ó Microsoft Store.Specifies whether automatic update of apps from Microsoft Store are allowed. Socraigh ag 0 (náid)Set to 0 (zero)
  25. Feidhmchláir do shuíomhanna gréasáin - ApplicationDefaults/EnableAppUriHandlers.Apps for websites - ApplicationDefaults/EnableAppUriHandlers. Dearbhaíonn an socrú polasaí seo cibé an dtacaíonn Windows le nascadh gréasáin-le-feidhmchláir le láimhseálaithe feidhmchláir URI.This policy setting determines whether Windows supports web-to-app linking with app URI handlers. Socraigh ag 0 (náid)Set to 0 (zero)

  26. Barrfheabhsú Soláthair Windows Update -Tá na polasaithe MDM seo maidir le Barrfheabhsú Soláthair polasaithe MDM ar fáil sa Polasaí CSP.Windows Update Delivery Optimization - The following Delivery Optimization MDM policies are available in the Policy CSP.

    1. DDeliveryOptimization/DODownloadMode.DeliveryOptimization/DODownloadMode. Cuireann sé seo ar do chumas na háiteanna a roghnú a fhaigheann nó a sheolann an Barrfheabhsú soláthair nuashonruithe agus feidhmchláir.Let’s you choose where Delivery Optimization gets or sends updates and apps. Socruithe ag 99 (nócha a naoi)Set to 99 (ninety-nine)
  27. Windows UpdateWindows Update

    1. Update/AllowAutoUpdate.Update/AllowAutoUpdate. Cas as nuashonruithe uathoibríocha.Control automatic updates. Socraigh go 5 (cúig)Set to 5 (five)
    2. Ceadaigh Seirbhís Nuashonraithe Windows Update - Update/AllowUpdateService.Windows Update Allow Update Service - Update/AllowUpdateService. Sonraíonn cé cibé an bhféadfadh an gléas Microsoft Update, Seirbhísí Nuashonraithe Freastalaí Windows (WSUS), nó Microsoft Store a úsáid.Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store. Socraigh ag 0 (náid)Set to 0 (zero)
    3. Seirbhís URL Windows Update - Update/UpdateServiceUrl.Windows Update Service URL - Update/UpdateServiceUrl. Ceadaíonn sé don ghléas seiceáil do nuashonruithe ó fhreastalaí WSUS in ionad Microsoft Update.Allows the device to check for updates from a WSUS server instead of Microsoft Update. Socraigh go Teaghrán leis an Luach:Set to String with the Value:
      1. <Replace><CmdID>$CmdID$<Item><Meta><Format>chr<Type>text/plain</Meta><Target> <LocURI>./Vendor/MSFT/Policy/Config/Update/UpdateServiceUrl</Target><Data>http://abcd-srv:8530$CmdID$<Item><Meta><Format>chr<Type>text/plain</Meta><Target> <LocURI>./Vendor/MSFT/Policy/Config/Update/UpdateServiceUrl</Target><Data>http://abcd-srv:8530</Item></Replace>

Trácht ceadaithe do Microsoft Intune / cumraíochtaí MDMAllowed traffic for Microsoft Intune / MDM configurations

Críochphointí tráchta ceadaitheAllowed traffic endpoints
activation-v2.sls.microsoft.com/*activation-v2.sls.microsoft.com/*
cdn.onenote.netcdn.onenote.net
client.wns.windows.comclient.wns.windows.com
crl.microsoft.com/pki/crl/*crl.microsoft.com/pki/crl/*
ctldl.windowsupdate.comctldl.windowsupdate.com
*displaycatalog.mp.microsoft.com*displaycatalog.mp.microsoft.com
dm3p.wns.windows.comdm3p.wns.windows.com
*microsoft.com/pkiops/**microsoft.com/pkiops/*
ocsp.digicert.com/*ocsp.digicert.com/*
r.manage.microsoft.comr.manage.microsoft.com
tile-service.weather.microsoft.comtile-service.weather.microsoft.com
settings-win.data.microsoft.comsettings-win.data.microsoft.com