Menedżer konfiguracji Podgląd techniczny Branch Update 1706.
Zawartość
Klient
- Include trust for specific file paths in Device Guard policies – Optionally, include a trust for a specific local file or folder path on clients running a Device Guard policy. Any binaries at the locations specified in the policy can run on targeted clients when enforcement is enabled in the policy.
- Register Okna 10 devices with Azure Aktywny katalog – A new client setting (in the Cloud Services group) is enabled by default to automatically register new Okna 10 domain-joined devices with Usługa Azure AD.
Application Lifecycle and Content
- Specify a different install content location and uninstall content location for a deployment type – You can now specify a different install content location and uninstall content location for a deployment type. Dodatkowo, you can also leave the uninstall content location empty.
- Improvements for Software Update Points in Grupy graniczne – Boundary groups now support configuring the time for fallback for software update points.
Operating System Deployment
- PXE network boot support for IPv6 – In an IPv6-only network, boot a device via PXE to start a task sequence OS deployment.
- Hide task sequence progress – Easily toggle when the task sequence progress is or is not displayed to the end user, on a granular step-by-step basis.
Conditional Access
- Device Health Attestation assessment for compliance policies for conditional access – Use Device Health Attestation status as a compliance policy rule for conditional access to company resources.
Software Updates
- Manage Microsoft Surface driver updates – You can now use Menedżer konfiguracji to manage Microsoft Surface driver updates.
- Okna Update for Business policy setting configuration – Use configuration items to configure deferral settings for Okna Update for Business.
Core Infrastructure
- Site Server Role High Availability – You can now add a primary site server in ‘passive mode’ to your standalone site to increase availability.
- Create and run scripts – Create and run scripts from Menedżer konfiguracji.
- Upgrade Readiness added to Azure Services Wizard – You can now use Azure Services Wizard to connect Menedżer konfiguracji to Upgrade Readiness in Okna Analytics to synchronize data to assess device compatibility with Okna 10.
- Accessibility improvements in the Konsola menedżera konfiguracji – This preview introduces several improvements to the accessibility features in the Konsola menedżera konfiguracji.
This release also includes the following improvement for customers using Menedżer konfiguracji programu System Center connected with Microsoft Intune to manage mobile devices:
- Android and iOS Enrollment Restrictions – Admins can now specify that users cannot enroll personal Android or iOS devices in their hybrid environment, limiting enrollment to predeclared company-owned devices or DEP-enrolled devices only.
- New options for compliance policies – You can now configure new options for compliance policies that were previously only available in Intune standalone.
- New compliance policy actions – You can now configure actions for compliance policies. These actions include setting a grace period for devices that are noncompliant before they lose access to company resources and creating emails to be sent to users with noncompliant devices.
- New settings for Okna configuration items – You can now configure new Okna configuration item settings that were previously only available in Intune standalone.
- Cisco (IPsec) support for iOS VPN Profiles – Admins can now use Cisco (IPsec) as a connection type for VPN profiles for iOS.
- App Protection settings to block printing and contact sync – Additional settings have been added to block printing and contact sync on Intune-enlightened applications.
- PFX certificate creation and distribution and S/MIME support – Admins can create and deploy PFX certificates to users utilizing an Entrust certification authority. These certificates can then be used for S/MIME encryption, decryption, and authentication by devices that the user has enrolled.