You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/devices/enterprise-state-roaming-group-policy-settings.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,12 @@
1
1
---
2
-
title: Group Policy and MDM settings | Microsoft Docs
3
-
description: Provides information about group policy and mobile device management (MDM) settings that should be used on corporate-owned devices.
2
+
title: Group Policy and MDM settings for ESR - Azure Active Directory
3
+
description: Management settings for Enterprise State Roaming
4
4
5
5
services: active-directory
6
6
ms.service: active-directory
7
7
ms.subservice: devices
8
8
ms.topic: troubleshooting
9
-
ms.date: 06/28/2019
9
+
ms.date: 02/12/2020
10
10
11
11
ms.author: joflore
12
12
author: MicrosoftGuyJFlo
@@ -27,7 +27,7 @@ The following tables describe the policy settings available.
27
27
28
28
## MDM settings
29
29
30
-
The MDM policy settings apply to both Windows 10 and Windows 10 Mobile. Windows 10 Mobile support exists only for Microsoft account based roaming via user’s OneDrive account. Please refer to [Devices and endpoints](enterprise-state-roaming-windows-settings-reference.md) for details on what devices are supported for Azure ADbased syncing.
30
+
The MDM policy settings apply to both Windows 10 and Windows 10 Mobile. Windows 10 Mobile support exists only for Microsoft account based roaming via user’s OneDrive account. Refer to [Devices and endpoints](enterprise-state-roaming-windows-settings-reference.md) for details on what devices are supported for Azure AD-based syncing.
Copy file name to clipboardExpand all lines: articles/active-directory/devices/enterprise-state-roaming-overview.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,12 @@
1
1
---
2
-
title: What is enterprise state roaming in Azure Active Directory? | Microsoft Docs
3
-
description: Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device.
2
+
title: What is enterprise state roaming in Azure Active Directory?
3
+
description: Enterprise State Roaming provides users with a unified experience across their Windows devices
4
4
5
5
services: active-directory
6
6
ms.service: active-directory
7
7
ms.subservice: devices
8
8
ms.topic: overview
9
-
ms.date: 06/28/2019
9
+
ms.date: 02/12/2020
10
10
11
11
ms.author: joflore
12
12
author: MicrosoftGuyJFlo
@@ -27,11 +27,11 @@ Enterprise State Roaming is available in multiple Azure regions. You can find th
27
27
28
28
| Article | Description |
29
29
| --- | --- |
30
-
|[Enable Enterprise State Roaming in Azure Active Directory](enterprise-state-roaming-enable.md)|Enterprise State Roaming is available to any organization with a Premium Azure Active Directory (Azure AD) subscription. For more details on how to get an Azure AD subscription, see the [Azure AD product](https://azure.microsoft.com/services/active-directory) page. |
31
-
|[Settings and data roaming FAQ](enterprise-state-roaming-faqs.md)|This topic answers some questions IT administrators might have about settings and app data sync. |
30
+
|[Enable Enterprise State Roaming in Azure Active Directory](enterprise-state-roaming-enable.md)|Enterprise State Roaming is available to any organization with a Premium Azure Active Directory (Azure AD) subscription. For more information on how to get an Azure AD subscription, see the [Azure AD product](https://azure.microsoft.com/services/active-directory) page. |
31
+
|[Settings and data roaming FAQ](enterprise-state-roaming-faqs.md)|This article answers some questions IT administrators might have about settings and app data sync. |
32
32
|[Group policy and MDM settings for settings sync](enterprise-state-roaming-group-policy-settings.md)|Windows 10 provides Group Policy and mobile device management (MDM) policy settings to limit settings sync. |
33
-
|[Windows 10 roaming settings reference](enterprise-state-roaming-windows-settings-reference.md)|The following is a complete list of all the settings that will be roamed and/or backed-up in Windows 10. |
34
-
|[Troubleshooting](enterprise-state-roaming-troubleshooting.md)|This topic goes through some basic steps for troubleshooting, and contains a list of known issues. |
33
+
|[Windows 10 roaming settings reference](enterprise-state-roaming-windows-settings-reference.md)|A list of settings that will be roamed and/or backed-up in Windows 10. |
34
+
|[Troubleshooting](enterprise-state-roaming-troubleshooting.md)|This article goes through some basic steps for troubleshooting, and contains a list of known issues. |
Copy file name to clipboardExpand all lines: articles/active-directory/devices/enterprise-state-roaming-troubleshooting.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ services: active-directory
6
6
ms.service: active-directory
7
7
ms.subservice: devices
8
8
ms.topic: troubleshooting
9
-
ms.date: 11/21/2019
9
+
ms.date: 02/12/2020
10
10
11
11
ms.author: joflore
12
12
author: MicrosoftGuyJFlo
@@ -31,7 +31,7 @@ Before you start troubleshooting, verify that the user and device have been conf
31
31
1. Windows 10, with the latest updates, and a minimum Version 1511 (OS Build 10586 or later) is installed on the device.
32
32
1. The device is Azure AD joined or hybrid Azure AD joined. For more information, see [how to get a device under the control of Azure AD](overview.md).
33
33
1. Ensure that **Enterprise State Roaming** is enabled for the tenant in Azure AD as described in [To enable Enterprise State Roaming](enterprise-state-roaming-enable.md). You can enable roaming for all users or for only a selected group of users.
34
-
1. The user must already be assigned an Azure Active Directory Premium license.
34
+
1. The user is assigned an Azure Active Directory Premium license.
35
35
1. The device must be restarted and the user must sign in again to access Enterprise State Roaming features.
36
36
37
37
## Information to include when you need help
@@ -67,13 +67,13 @@ Enterprise State Roaming requires the device to be registered with Azure AD. Alt
67
67
1. Once the command prompt is open, type “*dsregcmd.exe /status*”.
68
68
1. For expected output, the **AzureAdJoined** field value should be “YES”, **WamDefaultSet** field value should be “YES”, and the **WamDefaultGUID** field value should be a GUID with “(AzureAd)” at the end.
69
69
70
-
**Potential issue**: **WamDefaultSet** and **AzureAdJoined** both have “NO” in the field value, the device was domain-joined and registered with Azure AD, and the device does not sync. If it is showing this, the device may need to wait for policy to be applied or the authentication for the device failed when connecting to Azure AD. The user may have to wait a few hours for the policy to be applied. Other troubleshooting steps may include retrying auto-registration by signing out and back in, or launching the task in Task Scheduler. In some cases, running “*dsregcmd.exe /leave*” in an elevated command prompt window, rebooting, and trying registration again may help with this issue.
70
+
**Potential issue**: **WamDefaultSet** and **AzureAdJoined** both have “NO” in the field value, the device was domain-joined and registered with Azure AD, and the device does not sync. If it is showing this, the device may need to wait for policy to be applied or the authentication for the device failed when connecting to Azure AD. The user may have to wait a few hours for the policy to be applied. Other troubleshooting steps may include retrying autoregistration by signing out and back in, or launching the task in Task Scheduler. In some cases, running “*dsregcmd.exe /leave*” in an elevated command prompt window, rebooting, and trying registration again may help with this issue.
71
71
72
-
**Potential issue**: The field for **SettingsUrl** is empty and the device does not sync. The user may have last logged in to the device before Enterprise State Roaming was enabled in the Azure Active Directory Portal. Restart the device and have the user login. Optionally, in the portal, try having the IT Admin navigate to **Azure Active Directory** > **Devices** > **Enterprise State Roaming** disable and re-enable **Users may sync settings and app data across devices**. Once re-enabled, restart the device and have the user login. If this does not resolve the issue, **SettingsUrl** may be empty in the case of a bad device certificate. In this case, running “*dsregcmd.exe /leave*” in an elevated command prompt window, rebooting, and trying registration again may help with this issue.
72
+
**Potential issue**: The field for **SettingsUrl** is empty and the device does not sync. The user may have last logged in to the device before Enterprise State Roaming was enabled in the Azure Active Directory Portal. Restart the device and have the user login. Optionally, in the portal, try having the IT Admin navigate to **Azure Active Directory** > **Devices** > **Enterprise State Roaming** disable and re-enable **Users may sync settings and app data across devices**. Once re-enabled, restart the device and have the user login. If this does not resolve the issue, **SettingsUrl** may be empty if there is a bad device certificate. In this case, running “*dsregcmd.exe /leave*” in an elevated command prompt window, rebooting, and trying registration again may help with this issue.
73
73
74
74
## Enterprise State Roaming and Multi-Factor Authentication
75
75
76
-
Under certain conditions, Enterprise State Roaming can fail to sync data if Azure Multi-Factor Authentication is configured. For additional details on these symptoms, see the support document [KB3193683](https://support.microsoft.com/kb/3193683).
76
+
Under certain conditions, Enterprise State Roaming can fail to sync data if Azure Multi-Factor Authentication is configured. For more information on these symptoms, see the support document [KB3193683](https://support.microsoft.com/kb/3193683).
77
77
78
78
**Potential issue**: If your device is configured to require Multi-Factor Authentication on the Azure Active Directory portal, you may fail to sync settings while signing in to a Windows 10 device using a password. This type of Multi-Factor Authentication configuration is intended to protect an Azure administrator account. Admin users may still be able to sync by signing in to their Windows 10 devices with their Microsoft Passport for Work PIN or by completing Multi-Factor Authentication while accessing other Azure services like Office 365.
79
79
@@ -150,12 +150,12 @@ Connect the device to a corporate network so that sync can resume.
150
150
151
151
### Azure AD Joined device is not syncing and the user has a mixed case User Principal Name.
152
152
153
-
If the user has a mixed case UPN (e.g. UserName instead of username) and the user is on an Azure AD Joined device which has upgraded from Windows 10 Build 10586 to 14393, the user's device may fail to sync.
153
+
If the user has a mixed case UPN (for example, UserName instead of username) and the user is on an Azure AD Joined device, which has upgraded from Windows 10 Build 10586 to 14393, the user's device may fail to sync.
154
154
155
155
**Recommended action**
156
156
The user will need to unjoin and rejoin the device to the cloud. To do this, login as the Local Administrator user and unjoin the device by going to **Settings** > **System** > **About** and select "Manage or disconnect from work or school". Clean up the files below, and then Azure AD Join the device again in **Settings** > **System** > **About** and selecting "Connect to Work or School". Continue to join the device to Azure Active Directory and complete the flow.
157
157
158
-
In the cleanup step, cleanup the following files:
158
+
In the cleanup step, clean up the following files:
159
159
- Settings.dat in `C:\Users\<Username>\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\`
160
160
- All the files under the folder `C:\Users\<Username>\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AC\TokenBroker\Account`
The following is a complete list of all the settings that will be roamed or backed up in Windows 10.
20
+
The following is a list of the settings that will be roamed or backed up in Windows 10.
21
21
22
22
## Devices and endpoints
23
23
@@ -36,7 +36,7 @@ Windows settings generally sync by default, but some settings are only backed up
36
36
37
37
## Windows Settings overview
38
38
39
-
The following settings groups are available for end-users to enable/disable settings sync on Windows 10 devices.
39
+
The following settings groups are available for endusers to enable/disable settings sync on Windows 10 devices.
40
40
41
41
* Theme: desktop background, user tile, taskbar position, etc.
42
42
* Internet Explorer Settings: browsing history, typed URLs, favorites, etc.
@@ -61,7 +61,7 @@ For Windows 10 version 1803 or later, Internet Explorer setting group (favorites
61
61
62
62
## Windows Settings details
63
63
64
-
In the following table, Other entries in the Settings Group column refers to settings that can be disabled by going to Settings > Accounts > Sync your settings > Other Windows settings.
64
+
In the following table, Other entries in the Settings Group column refer to settings that can be disabled by going to Settings > Accounts > Sync your settings > Other Windows settings.
65
65
66
66
Internal entries in the Settings Group column refer to settings and apps that can only be disabled from syncing within the app itself or by disabling sync for the entire device using mobile device management (MDM) or Group Policy settings.
67
67
Settings that don't roam or sync will not belong to a group.
@@ -70,7 +70,7 @@ Settings that don't roam or sync will not belong to a group.
70
70
| --- | --- | --- | --- |
71
71
|**Accounts**: account picture |sync |X |Theme |
72
72
|**Accounts**: other account settings |X |X ||
73
-
|**Advanced mobile broadband**: Internet connection sharing network name (enables auto-discovery of mobile Wi-Fi hotspots via Bluetooth) |X |X |Passwords |
73
+
|**Advanced mobile broadband**: Internet connection sharing network name (enables autodiscovery of mobile Wi-Fi hotspots via Bluetooth) |X |X |Passwords |
74
74
|**App data**: individual apps can sync data |sync backup |sync backup |internal |
75
75
|**App list**: list of installed apps |X |backup |Other |
0 commit comments