Skip to content

Commit

Permalink
Merge pull request #1853 from MicrosoftDocs/main
Browse files Browse the repository at this point in the history
Published main to live, Friday 05:00 PM IST, 11/15
  • Loading branch information
padmagit77 authored Nov 15, 2024
2 parents ab8c6a6 + f809da2 commit 7746f57
Show file tree
Hide file tree
Showing 13 changed files with 37 additions and 37 deletions.
2 changes: 1 addition & 1 deletion hololens/app-deploy-intune.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ appliesto:

# Intune & Company Portal

With Mobile Device Management (MDM), you can use your own custom apps through [Microsoft Endpoint Manager (Intune)](/intune/windows-holographic-for-business) to deploy it directly to your HoloLens devices. Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Intune is included in Microsoft's [Enterprise Mobility + Security (EMS) suite](https://www.microsoft.com/microsoft-365/enterprise-mobility-security), and enables users to be productive while keeping your organization data protected. To learn more about Intune, read [What is Intune](/mem/intune/fundamentals/what-is-intune).
With Mobile Device Management (MDM), you can use your own custom apps through [Microsoft Endpoint Manager (Intune)](/mem/intune/fundamentals/windows-holographic-for-business) to deploy it directly to your HoloLens devices. Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Intune is included in Microsoft's [Enterprise Mobility + Security (EMS) suite](https://www.microsoft.com/microsoft-365/enterprise-mobility-security), and enables users to be productive while keeping your organization data protected. To learn more about Intune, read [What is Intune](/mem/intune/fundamentals/what-is-intune).

## Setup

Expand Down
10 changes: 5 additions & 5 deletions hololens/hololens-certificates-network.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ To support the use of SCEP or PKCS certificates for authentication, Intune requi
> [!NOTE]
> When you use SCEP with a Microsoft CA, you must also configure the [Network Device Enrollment Service (NDES)](/mem/intune/protect/certificates-scep-configure#set-up-ndes)
For more information, see [Configure a certificate profile for your devices in Microsoft Intune.](/intune/certificates-configure)
For more information, see [Configure a certificate profile for your devices in Microsoft Intune.](/mem/intune/protect/certificates-configure)

## Deploy certificates and Wi-Fi/VPN profile

Expand All @@ -45,22 +45,22 @@ For more information, see [Configure a certificate profile for your devices in M
To deploy certificates and profiles, follow these steps:

1. Create a profile for each of the Root and Intermediate certificates (see [Create trusted certificate profiles](/intune/protect/certificates-configure#create-trusted-certificate-profiles).) Each of these profiles must have a description that includes an expiration date in DD/MM/YYYY format. **Certificate profiles without an expiration date will not be deployed.**
1. Create a profile for each of the Root and Intermediate certificates (see [Create trusted certificate profiles](/mem/intune/protect/certificates-configure#create-trusted-certificate-profiles).) Each of these profiles must have a description that includes an expiration date in DD/MM/YYYY format. **Certificate profiles without an expiration date will not be deployed.**

2. Create a profile for each SCEP or PKCS certificates (see [Create a SCEP certificate profile or Create a PKCS certificate profile](/intune/protect/certficates-pfx-configure#create-a-pkcs-certificate-profile)) Each of these profiles must have a description that includes an expiration date in DD/MM/YYYY format. **Certificate profiles without an expiration date will not be deployed.**
2. Create a profile for each SCEP or PKCS certificates (see [Create a SCEP certificate profile or Create a PKCS certificate profile](/mem/intune/protect/certficates-pfx-configure#create-a-pkcs-certificate-profile)) Each of these profiles must have a description that includes an expiration date in DD/MM/YYYY format. **Certificate profiles without an expiration date will not be deployed.**

> [!NOTE]
> As the HoloLens 2 is considered for many to be a shared device, multiple users per device, it is recommended to deploy Device certificates instead of User certificates for Wi-Fi authentication where possible

3. Create a profile for each corporate Wi-Fi network (see [Wi-Fi settings for Windows 10 and later devices](/intune/wi-fi-settings-windows)).
3. Create a profile for each corporate Wi-Fi network (see [Wi-Fi settings for Windows 10 and later devices](/mem/intune/configuration/wi-fi-settings-windows)).

> [!NOTE]
> It is recommended that the Wi-Fi profile be [assigned](/mem/intune/configuration/device-profile-assign) to Device groups rather than User groups where possible.

> [!TIP]
> You also can export a working Wi-Fi profile from a Windows 10 PC on your corporate network. This export creates an XML file with all the current settings. Then, import this file into Intune, and use it as the Wi-Fi profile for your HoloLens 2 devices. See [Export and import Wi-Fi settings for Windows devices.](/mem/intune/configuration/wi-fi-settings-import-windows-8-1)

4. Create a profile for each corporate VPN (see [Windows 10 and Windows Holographic device settings to add VPN connections using Intune](/intune/vpn-settings-windows-10)).
4. Create a profile for each corporate VPN (see [Windows 10 and Windows Holographic device settings to add VPN connections using Intune](/mem/intune/configuration/vpn-settings-windows-10)).

## Troubleshooting

Expand Down
26 changes: 13 additions & 13 deletions hololens/hololens-commercial-infrastructure.md
Original file line number Diff line number Diff line change
Expand Up @@ -112,23 +112,23 @@ Ongoing device management will depend on your mobile device management infrastru

1. [CSPs (Configuration Service Providers)](/windows/client-management/mdm/configuration-service-provider-reference#csps-supported-in-hololens-devices) lets you create and deploy management settings for the devices on your network. See the [list of HoloLens CSPs](/windows/client-management/mdm/configuration-service-provider-reference#csps-supported-in-hololens-devices) for reference.

1. [Compliance policies](/intune/device-compliance-get-started) are rules and settings that devices must meet to be compliant in your corporate infrastructure. Use these policies with Conditional Access to block access to company resources for devices that are non-compliant. For example, you can create a policy that requires BitLocker be enabled.
1. [Compliance policies](/mem/intune/protect/device-compliance-get-started) are rules and settings that devices must meet to be compliant in your corporate infrastructure. Use these policies with Conditional Access to block access to company resources for devices that are non-compliant. For example, you can create a policy that requires BitLocker be enabled.

1. [Create Compliance Policy](/intune/protect/compliance-policy-create-windows).
1. [Create Compliance Policy](/mem/intune/protect/compliance-policy-create-windows).

1. Conditional Access allows/denies mobile devices and mobile applications from accessing company resources. Two documents you may find helpful are [Plan your CA Deployment](/azure/active-directory/conditional-access/plan-conditional-access) and [Best Practices](/azure/active-directory/conditional-access/best-practices).

1. [This article](/intune/fundamentals/windows-holographic-for-business) talks about Intune's management tools for HoloLens.
1. [This article](/mem/intune/fundamentals/windows-holographic-for-business) talks about Intune's management tools for HoloLens.

1. [Create a device profile](/intune/configuration/device-profile-create)
1. [Create a device profile](/mem/intune/configuration/device-profile-create)

### Manage updates

Intune includes a feature called Update rings for Windows 10 devices, including HoloLens 2 and HoloLens v1 (with Holographic for Business). Update rings include a group of settings that determine how and when updates are installed.

For example, you can create a maintenance window to install updates, or choose to restart after updates are installed. You can also choose to pause updates indefinitely until you're ready to update.

Read more about [configuring update rings with Intune](/intune/windows-update-for-business-configure).
Read more about [configuring update rings with Intune](/mem/intune/protect/windows-update-for-business-configure).

### Application management

Expand All @@ -142,7 +142,7 @@ Manage HoloLens applications through:
Microsoft Store for Business and Education is a custom store for your corporate environment. It lets you use the Microsoft Store built into Windows 10 and HoloLens to find, acquire, distribute, and manage apps for your organization. It also lets you deploy apps that are specific to your commercial environment but not to the world.

1. Application deployment and management via Intune or another mobile device management solution
Most mobile device management solutions, including Intune, provide a way to deploy line of business applications directly to a set of enrolled devices. See this article for [Intune app install](/intune/apps-deploy).
Most mobile device management solutions, including Intune, provide a way to deploy line of business applications directly to a set of enrolled devices. See this article for [Intune app install](/mem/intune/apps/apps-deploy).

1. *not recommended* Device Portal
Applications can also be installed on HoloLens directly using the Windows Device Portal. This isn't recommended since Developer Mode has to be enabled to use the device portal.
Expand All @@ -151,29 +151,29 @@ Read more about [installing apps on HoloLens](hololens-install-apps.md).

### Certificates

You can distribute certificates through your MDM provider. If your company requires certificates, Intune supports PKCS, PFX, and SCEP. It's important to understand which certificate is right for your company. Please visit the [certificate configurations](/intune/protect/certificates-configure) documentation to determine which cert is best for you. If you plan to use certificates for HoloLens Authentication, PFX, or SCEP may be right for you.
You can distribute certificates through your MDM provider. If your company requires certificates, Intune supports PKCS, PFX, and SCEP. It's important to understand which certificate is right for your company. Please visit the [certificate configurations](/mem/intune/protect/certificates-configure) documentation to determine which cert is best for you. If you plan to use certificates for HoloLens Authentication, PFX, or SCEP may be right for you.

See the following steps for using [SCEP](/intune/protect/certificates-profile-scep).
See the following steps for using [SCEP](/mem/intune/protect/certificates-profile-scep).

### How to Upgrade to Holographic for Business Commercial Suite

> [!NOTE]
> Windows Holographic for Business (commercial suite) is only intended for HoloLens (1st gen) devices. The profile will not be applied to HoloLens 2 devices.
You can find directions for upgrading to the commercial suite in the [holographic upgrade](/intune/configuration/holographic-upgrade) documentation.
You can find directions for upgrading to the commercial suite in the [holographic upgrade](/mem/intune/configuration/holographic-upgrade) documentation.

### How to Configure Kiosk Mode Using Microsoft Intune

1. Sync Microsoft Store to Intune (See the following [instructions](/intune/apps/windows-store-for-business)).
1. Sync Microsoft Store to Intune (See the following [instructions](/mem/intune/apps/windows-store-for-business)).

1. Check your app settings
1. Log in to your Microsoft Store Business account
1. **Manage > Products and Services > Apps and Software > Select the app you want to sync > Private Store Availability > Select "Everyone" or "Specific Groups"**
>[!NOTE]
>If you don't see the app you want, you will have to "get" the app by searching the store for your app. **Click the "Search" bar in the upper right-hand corner > type in the name of the app > click on the app > select "Get"**.
1. If you don't see your apps in **Intune > Client Apps > Apps** , you may have to [sync your apps](/intune/apps/windows-store-for-business#synchronize-apps) again.
1. If you don't see your apps in **Intune > Client Apps > Apps** , you may have to [sync your apps](/mem/intune/apps/windows-store-for-business#synchronize-apps) again.

1. [Create a device profile for Kiosk mode](/intune/configuration/kiosk-settings#create-the-profile)
1. [Create a device profile for Kiosk mode](/mem/intune/configuration/kiosk-settings#create-the-profile)

> [!NOTE]
> You can configure different users to have different Kiosk Mode experiences by using "Microsoft Entra ID" as the "User logon type". However, this option is only available in Multi-App kiosk mode. Multi-App kiosk mode will work with only one app as well as multiple apps.
Expand All @@ -188,4 +188,4 @@ Certificates can be deployed via you MDM (see "certificates" in the [MDM Section

### Additional Intune Quick Links

1. [Create Profiles:](/intune/configuration/device-profile-create) Profiles allow you to add and configure settings that will be pushed to the devices in your organization.
1. [Create Profiles:](/mem/intune/configuration/device-profile-create) Profiles allow you to add and configure settings that will be pushed to the devices in your organization.
6 changes: 3 additions & 3 deletions hololens/hololens-enroll-mdm.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,20 +15,20 @@ appliesto:

# Enroll HoloLens in MDM

You can manage multiple Microsoft HoloLens devices simultaneously using solutions like [Microsoft Intune](/intune/windows-holographic-for-business). You'll be able to manage settings, select apps to install and set security configurations tailored to your organization's need. See [Manage devices running Windows Holographic with Microsoft Intune](/intune/windows-holographic-for-business), the [configuration service providers (CSPs) that are supported in Windows Holographic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/configuration-service-provider-reference#hololens), and the [policies supported by Windows Holographic for Business](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#hololenspolicies).
You can manage multiple Microsoft HoloLens devices simultaneously using solutions like [Microsoft Intune](/mem/intune/fundamentals/windows-holographic-for-business). You'll be able to manage settings, select apps to install, and set security configurations tailored to your organization's need. See [Manage devices running Windows Holographic with Microsoft Intune](/mem/intune/fundamentals/windows-holographic-for-business), the [configuration service providers (CSPs) that are supported in Windows Holographic](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/configuration-service-provider-reference#hololens), and the [policies supported by Windows Holographic for Business](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#hololenspolicies).

> [!NOTE]
> Mobile device management (MDM), including the VPN, Bitlocker, and kiosk mode features, is only available when you [upgrade to Windows Holographic for Business](hololens1-upgrade-enterprise.md).
## Requirements

Your organization will need to have Mobile Device Management (MDM) set up in order to manage HoloLens devices. Your MDM provider can be Microsoft Intune or a 3rd party provider that uses Microsoft MDM APIs.
Your organization will need to have Mobile Device Management (MDM) set up in order to manage HoloLens devices. Your MDM provider can be Microsoft Intune or a third party provider that uses Microsoft MDM APIs.

## Enrollment per scenario

Depending on what stage you are in your deployment we have the following recommendations:

- For multi-user shared devices being deployed in production it is suggested you use [Autopilot](hololens2-autopilot.md).
- For multi-user shared devices being deployed in production it's suggested you use [Autopilot](hololens2-autopilot.md).
- For multi-user shared devices that are being initially part of a pilot program, [Microsoft Entra join during OOBE](hololens-enroll-mdm.md#auto-enrollment-in-mdm) should be sufficient.
- For a proof of concept joining a device via the Settings menu may suit your needs if you don't need multiple users per device.

Expand Down
2 changes: 1 addition & 1 deletion hololens/hololens-gloves.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: Using HoloLens 2 With Gloves
description: Guidance on which types of gloves work best with hand tracking on HoloLens 2.
ms.date: 5/13/2024
ms.localizationpriority:
ms.localizationpriority: Low
ms.service: hololens
ms.topic: article
audience: HoloLens
Expand Down
2 changes: 1 addition & 1 deletion hololens/hololens-identity.md
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ One way in which developing for HoloLens differs from developing for Desktop is
Windows Hello for Business (which supports using a PIN to sign in) is supported for HoloLens (1st Gen). To allow Windows Hello for Business PIN sign-in on HoloLens (1st gen):

1. The HoloLens device must be [managed by MDM](hololens-enroll-mdm.md).
1. You must enable Windows Hello for Business for the device. ([See instructions for Microsoft Intune.](/intune/windows-hello))
1. You must enable Windows Hello for Business for the device. ([See instructions for Microsoft Intune.](/mem/intune/protect/windows-hello))
1. On the HoloLens device, the user can then use **Settings** > **Sign-in Options** > **Add PIN** to set up a PIN.

> [!NOTE]
Expand Down
4 changes: 2 additions & 2 deletions hololens/hololens-offline.md
Original file line number Diff line number Diff line change
Expand Up @@ -159,8 +159,8 @@ In addition to the list above, to take full advantage of HoloLens functionality,
- [Manage connection endpoints for Windows 10 Enterprise, version 1903](/windows/privacy/manage-windows-1903-endpoints)
- [Manage connections from Windows 10 operating system components to Microsoft services](/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services)
- [Manage connections from Windows 10 operating system components to Microsoft services using Microsoft Intune MDM Server](/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services-using-mdm)
- [Intune network configuration requirements and bandwidth](/intune/fundamentals/network-bandwidth-use#network-communication-requirements)
- [Network endpoints for Microsoft Intune](/intune/fundamentals/intune-endpoints)
- [Intune network configuration requirements and bandwidth](/mem/intune/fundamentals/network-bandwidth-use#network-communication-requirements)
- [Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints)
- [Office 365 URLs and IP address ranges](/office365/enterprise/urls-and-ip-address-ranges)
- [Prerequisites for Microsoft Entra Connect](/azure/active-directory/hybrid/how-to-connect-install-prerequisites)

Expand Down
Loading

0 comments on commit 7746f57

Please sign in to comment.