1Introduction 12
1.1Configuration 12
1.1.1Evaluated Configuration 12
1.1.2Mobile Device Management Solutions 13
2Management Functions 13
3Managing Audits 16
3.1Windows 10 16
3.1.1Audit Events 16
3.2Managing Audit Policy 36
3.2.1Windows 10 36
4Managing Wipe 38
4.1IT Administrator Guidance 39
4.2Windows 10 39
4.2.1Local Administrator Guidance 39
4.3Windows 10 Mobile 39
4.3.1User Guidance 39
5Managing EAP-TLS 39
5.1IT Administrator Guidance 40
5.2Windows 10 40
5.2.1Local Administrator Guidance 40
5.3User Guidance 40
6Managing TLS/DLTS 40
6.1IT Administrator Guidance 41
6.2Windows 10 41
6.2.1Local Administrator Guidance 41
6.3User Guidance 43
7Managing Apps 43
7.1IT Administrator Guidance 43
7.2Windows 10 44
7.2.1Local Administrator Guidance 44
8Managing Volume Encryption 44
8.1IT Administrator Guidance 45
8.2Windows 10 45
8.2.1Local Administrator Guidance 45
8.2.2User Guidance 46
8.3Windows 10 Mobile 46
8.3.1User Guidance 46
9Managing VPN 46
9.1IT Administrator Guidance 46
9.2Windows 10 46
9.2.1Local Administrator Guidance 46
10Managing Accounts 47
10.1IT Administrator Guidance 47
10.2Windows 10 47
10.3Local Administrator Guidance 47
11Managing Bluetooth 48
11.1IT Administrator Guidance 48
11.1.1User Guidance 49
11.2Windows 10 Mobile 49
11.2.1User Guidance 49
12Managing Passwords 49
12.1Strong Passwords 49
12.1.1IT Administrator Guidance 49
12.1.2Windows 10 50
12.2Protecting Passwords 50
12.2.1Windows 10 50
12.2.2Windows 10 Mobile 51
12.3Logon/Logoff Password Policy 51
12.3.1IT Administrator Guidance 51
12.3.2Windows 10 51
13Managing Notifications in the Locked State 52
13.1Windows 10 52
13.1.1User Guidance 52
13.2Windows 10 Mobile 52
13.2.1User Guidance 52
14Managing Certificates 53
14.1Certificate Validation 53
14.1.1Windows 10 54
14.2Developer Guidance 54
14.2.1Shared User Keys 55
14.2.2Custom Certificate Requests 55
14.3 IT Administrator Guidance 55
14.4Windows 10 55
14.4.1Local Administrator Guidance 55
14.4.2User Guidance 56
14.5Windows 10 Mobile 56
14.5.1User Guidance 56
15Managing Time 56
15.1Windows 10 57
15.1.1Local Administrator Guidance 57
15.2Windows 10 Mobile 57
15.2.1User Guidance 57
16Getting Version Information 58
16.1IT Administrator Guidance 58
16.2Windows 10 58
16.2.1User Guidance 58
16.3Windows 10 Mobile 58
16.3.1User Guidance 58
17Locking a Device 59
17.1IT Administrator Guidance 59
17.2Windows 10 59
17.2.1Local Administrator Guidance 59
17.2.2User Guidance 59
17.3Windows 10 Mobile 60
17.3.1User Guidance 60
17.4Managing Notifications Prior to Unlocking a Device 60
17.4.1IT Administrator Guidance 60
17.4.2Windows 10 61
18Managing Airplane Mode 61
18.1Windows 10 61
18.1.1User Guidance 61
18.2Windows 10 Mobile 61
18.2.1User Guidance 61
19Managing Device Enrollment 61
19.1IT Administrator Guidance 62
19.2Windows 10 62
19.2.1Local Administrator Guidance 62
19.3Windows 10 Mobile 63
19.3.1User Guidance 63
20Managing Updates 63
20.1IT Administrator Guidance 64
20.2Windows 10 64
20.2.1Local Administrator Guidance 64
21Managing Collection Devices 64
21.1IT Administrator Guidance 64
21.2Windows 10 64
21.2.1Local Administrator Guidance 64
22Managing USB 65
22.1IT Administrator Guidance 65
22.2Windows 10 65
22.2.1Local Administrator Guidance 65
23Managing Backup 65
23.1Windows 10 66
23.1.1Local Administrator Guidance 66
23.2Windows 10 and Windows 10 Mobile 66
23.2.1User Guidance 66
24Managing Enterprise Apps 66
24.1IT Administrator Guidance 66
24.2User Guidance 66
25Managing Developer Mode 67
25.1IT Administrator Guidance 67
25.2Windows 10 67
25.2.1Local Administrator Guidance 67
26Managing Cryptographic Algorithms 67
27Managing GPS 68
27.1IT Administrator Guidance 68
28Managing Location Services 68
28.1IT Administrator Guidance 68
28.2Windows 10 69
28.2.1Local Administrator Guidance 69
29Managing Wi-Fi 69
29.1IT Administrator Guidance 69
30Managing Wireless Networks (SSIDs) 69
30.1IT Administrator Guidance 69
30.2Windows 10 69
30.2.1Local Administrator Guidance 69
31Managing Personal Hotspots 70
31.1IT Administrator Guidance 70
31.2Windows 10 70
31.2.1Local Administrator Guidance 70
32Managing Mobile Broadband 70
32.1IT Administrator Guidance 70
33Managing Cellular Protocols 70
33.1Windows 10 Mobile 71
33.1.1IT Administrator Guidance 71
33.2Windows 10 71
33.2.1Local Administrator 71
34Managing Health Attestation 71
34.1IT Administrator Guidance 71
35Managing Sensitive Data 72
35.1IT Administrator Guidance 72
35.2Windows 10 72
35.2.1Local Administrator Guidance 72
35.3Windows 10 Mobile 72
36Managing USB Mass Storage 72
36.1IT Administrator Guidance 72
37Natively Installed Applications 72