行動裝置註冊和管理的新功能

• 適用於:

  ✅ Windows 11, ✅ Windows 10

本文提供有關行動裝置管理 (MDM 的新功能，) 所有 Windows 裝置的註冊和管理體驗。 本文也提供重大變更和已知問題以及常見問題的詳細數據。

如需適用於 Windows 之 Microsoft 行動裝置管理通訊協定的詳細資訊，請參閱 [MS-MDM]：行動 裝置管理 通訊協定和 [MS-MDE2]：行動裝置註冊通訊協定第 2 版。

適用於 Windows 11 版本 22H2 的 MDM 新功能

新增或更新的文章	描述
DeviceStatus DDF	新增下列節點： MDMClientCertAttestation
eUUICs	新增下列節點： IsDiscoveryServer
PersonalDataEncryption	新增雲端解決方案提供者
原則 CSP	新增下列節點： Accounts/RestrictToEnterpriseDeviceAuthenticationOnly DesktopAppInstaller/EnableAdditionalSources DesktopAppInstaller/EnableAllowedSources DesktopAppInstaller/EnableAppInstaller DesktopAppInstaller/EnableDefaultSource DesktopAppInstaller/EnableExperimentalFeatures DesktopAppInstaller/EnableHashOverride DesktopAppInstaller/EnableLocalManifestFiles DesktopAppInstaller/EnableMicrosoftStoreSource DesktopAppInstaller/EnableMSAppInstallerProtocol DesktopAppInstaller/EnableSettings DesktopAppInstaller/SourceAutoUpdateInterval Education/EnableEduThemes Experience/AllowSpotlightCollectionOnDesktop FileExplorer/DisableGraphRecentItems HumanPresence/ForceInstantDim InternetExplorer/EnableGlobalWindowListInIEMode InternetExplorer/HideIEAppRetirementNotification InternetExplorer/ResetZoomForDialogInIEMode LocalSecurityAuthority/AllowCustomSSPsAPs LocalSecurityAuthority/ConfigureLsaProtectedProcess MixedReality/AllowCaptivePortalBeforeLogon MixedReality/AllowLaunchUriInSingleAppKiosk MixedReality/AutoLogonUser MixedReality/ConfigureMovingPlatform MixedReality/ConfigureNtpClient MixedReality/ManualDownDirectionDisabled MixedReality/NtpClientEnabled MixedReality/SkipCalibrationDuringSetup MixedReality/SkipTrainingDuringSetup NetworkListManager/AllowedTlsAuthenticationEndpoints NetworkListManager/ConfiguredTLSAuthenticationNetworkName Printers/ConfigureCopyFilesPolicy Printers/ConfigureDriverValidationLevel Printers/ConfigureIppPageCountsPolicy Printers/ConfigureRedirectionGuard Printers/ConfigureRpcConnectionPolicy Printers/ConfigureRpcListenerPolicy Printers/ConfigureRpcTcpPort Printers/ManageDriverExclusionList Printers/RestrictDriverInstallationToAdministrators RemoteDesktopServices/DoNotAllowWebAuthnRedirection Search/AllowSearchHighlights Search/DisableSearch SharedPC/EnableSharedPCModeWithOneDriveSync Start/DisableControlCenter Start/DisableEditingQuickSettings Start/HideRecommendedSection Start/HideTaskViewButton Start/SimplifyQuickSettings 貼紙/EnableStickers Textinput/allowimenetworkaccess Update/NoUpdateNotificationDuringActiveHours WebThreatDefense/EnableService WebThreatDefense/NotifyMalicis WebThreatDefense/NotifyPasswordReuse WebThreatDefense/NotifyUnsafeApp Windowslogon/EnableMPRNotifications
SecureAssessment	新增下列節點： 評估
WindowsAutoPilot	新增下列節點： HardwareMismatchRemediationData

適用於 Windows 11 版本 21H2 的 MDM 新功能

新增或更新的文章	描述
原則 CSP	新增下列節點： Kerberos/PKInitHashAlgorithmConfiguration Kerberos/PKInitHashAlgorithmSHA1 Kerberos/PKInitHashAlgorithmSHA256 Kerberos/PKInitHashAlgorithmSHA384 Kerberos/PKInitHashAlgorithmSHA512 NewsAndInterests/AllowNewsAndInterests 體驗/設定ChatIcon Start/ConfigureStartPins Virtualizationbasedtechnology/HypervisorEnforcedCodeIntegrity Virtualizationbasedtechnology/RequireUEFIMemoryAttributesTable
DMClient CSP	已更新下列節點的描述： Provider/ProviderID/ConfigLock/Lock Provider/ProviderID/ConfigLock/UnlockDuration Provider/ProviderID/ConfigLock/SecuredCore
PrinterProvisioning	新增雲端解決方案提供者

適用於 Windows 10 版本 20H2 的 MDM 新功能

新增或更新的文章	描述
原則 CSP	新增下列節點： Experience/DisableCloudOptimizedContent LocalUsersAndGroups/Configure MixedReality/AADGroupMembershipCacheValidityInDays MixedReality/BrightnessButtonDisabled MixedReality/FallbackDiagnostics MixedReality/MicrophoneDisabled MixedReality/VolumeButtonDisabled Multitasking/BrowserAltTabBlowout
SurfaceHub CSP	已新增下列新節點： Properties/SleepMode
WindowsDefenderApplicationGuard CSP	已更新下列節點的描述： Settings/AllowWindowsDefenderApplicationGuard

適用於 Windows 10 版本 2004 的 MDM 新功能

新增或更新的文章	描述
原則 CSP	新增下列節點： ApplicationManagement/BlockNonAdminUserInstall Bluetooth/SetMinimumEncryptionKeySize DeliveryOptimization/DOCacheHostSource DeliveryOptimization/DOMaxBackgroundDownloadBandwidth DeliveryOptimization/DOMaxForegroundDownloadBandwidth Education/AllowGraphingCalculator TextInput/ConfigureJapaneseIMEVersion TextInput/ConfigureSimplifiedChineseIMEVersion TextInput/ConfigureTraditionalChineseIMEVersion 已更新下列原則： DeliveryOptimization/DOCacheHost 已取代下列原則： DeliveryOptimization/DOMaxDownloadBandwidth DeliveryOptimization/DOMaxUploadBandwidth DeliveryOptimization/DOPercentageMaxDownloadBandwidth
DevDetail CSP	已新增下列新節點： Ext/Microsoft/DNSComputerName
EnterpriseModernAppManagement CSP	新增下列節點： IsStub
SUPL CSP	新增下列節點： FullVersion

適用於 Windows 10 版本 1909 的 MDM 新功能

新增或更新的文章	描述
BitLocker CSP	新增下列節點： ConfigureRecoveryPasswordRotation RotateRecoveryPasswords RotateRecoveryPasswordsStatus RotateRecoveryPasswordsRequestID

適用於 Windows 10 版本 1903 的 MDM 新功能

新增或更新的文章	描述
原則 CSP	新增下列節點： DeliveryOptimization/DODelayCacheServerFallbackBackground DeliveryOptimization/DODelayCacheServerFallbackForeground DeviceHealthMonitoring/AllowDeviceHealthMonitoring DeviceHealthMonitoring/ConfigDeviceHealthMonitoringScope DeviceHealthMonitoring/ConfigDeviceHealthMonitoringUploadDestination DeviceInstallation/AllowInstallationOfMatchingDeviceInstanceIDs DeviceInstallation/PreventInstallationOfMatchingDeviceInstanceIDs Experience/ShowLockOnUserTile InternetExplorer/AllowEnhancedSuggestionsInAddressBar InternetExplorer/DisableActiveXVersionListAutoDownload InternetExplorer/DisableCompatView InternetExplorer/DisableFeedsBackgroundSync InternetExplorer/DisableGeolocation InternetExplorer/DisableWebAddressAutoComplete InternetExplorer/NewTabDefaultPage Power/EnergySaverBatteryThresholdOnBattery Power/EnergySaverBatteryThresholdPluggedIn Power/SelectLidCloseActionOnBatterybr> Power/SelectLidCloseActionPluggedIn Power/SelectPowerButtonActionOnBattery Power/SelectPowerButtonActionPluggedIn Power/SelectSleepButtonActionOnBattery Power/SelectSleepButtonActionPluggedIn Power/TurnOffHybridSleepOnBattery Power/TurnOffHybridSleepPluggedIn Power/UnattendedSleepTimeoutOnBattery Power/UnattendedSleepTimeoutPluggedIn Privacy/LetAppsActivateWithVoice Privacy/LetAppsActivateWithVoiceAboveLock Search/AllowFindMyFiles ServiceControlManager/SvchostProcessMitigation System/AllowCommercialDataPipelinebr> System/TurnOffFileHistory TimeLanguageSettings/ConfigureTimeZonebr> 疑難解答/AllowRecommendations Update/AutomaticMaintenanceWakeUp Update/ConfigureDeadlineForFeatureUpdates Update/ConfigureDeadlineForQualityUpdates Update/ConfigureDeadlineGracePeriod WindowsLogon/AllowAutomaticRestartSignOn WindowsLogon/ConfigAutomaticRestartSignOn WindowsLogon/EnableFirstLogonAnimation
原則 CSP - 稽核	已新增稽核原則 CSP。
ApplicationControl CSP	已新增 CSP。
Defender CSP	已新增下列新節點： Health/TamperProtectionEnabled Health/IsVirtualMachine 設定 組態/TamperProtection Configuration/EnableFileHashComputation
DiagnosticLog CSP DiagnosticLog DDF	已新增 1.4 版的 CSP。 已新增新的 1.4 版 DDF。 已新增下列新節點： 原則 原則/通道 原則/通道/ChannelName Policy/Channels/ChannelName/MaximumFileSize 原則/通道/ChannelName/SDDL Policy/Channels/ChannelName/ActionWhenFull 原則/通道/ChannelName/Enabled DiagnosticArchive DiagnosticArchive/ArchiveDefinition DiagnosticArchive/ArchiveResults
EnrollmentStatusTracking CSP	已新增 CSP。
PassportForWork CSP	已新增下列新節點： SecurityKey SecurityKey/UseSecurityKeyForSignin

適用於 Windows 10 版本 1809的 MDM 新功能

新增或更新的文章	描述
原則 CSP	新增下列節點： ApplicationManagement/LaunchAppAfterLogOn ApplicationManagement/ScheduleForceRestartForUpdateFailures 驗證/EnableFastFirstSignIn 僅 (預覽模式 驗證/EnableWebSignIn 僅 (預覽模式 Authentication/PreferredAadTenantDomainName Browser/AllowFullScreenMode Browser/AllowPrelaunch Browser/AllowPrinting Browser/AllowSavingHistory Browser/AllowSideloadingOfExtensions Browser/AllowTabPreloading Browser/AllowWebContentOnNewTabPage Browser/ConfigureFavoritesBar Browser/ConfigureHomeButton Browser/ConfigureKioskMode Browser/ConfigureKioskResetAfterIdleTimeout Browser/ConfigureOpenMicrosoftEdgeWith Browser/ConfigureTelemetryForMicrosoft365Analytics Browser/PreventCertErrorOverrides Browser/SetHomeButtonURL Browser/SetNewTabPageURL Browser/UnlockHomeButton Defender/CheckForSignaturesBeforeRunningScan Defender/DisableCatchupFullScan Defender/DisableCatchupQuickScan Defender/EnableLowCPUPriority Defender/SignatureUpdateFallbackOrder Defender/SignatureUpdateFileSharesSources DeviceGuard/ConfigureSystemGuardLaunch DeviceInstallation/AllowInstallationOfMatchingDeviceIDs DeviceInstallation/AllowInstallationOfMatchingDeviceSetupClasses DeviceInstallation/PreventDeviceMetadataFromNetwork DeviceInstallation/PreventInstallationOfDevicesNotDescribedByOtherPolicySettings DmaGuard/DeviceEnumerationPolicy Experience/AllowClipboardHistory Experience/DoNotSyncBrowserSettings Experience/PreventUsersFromTurningOnBrowserSyncing Kerberos/UPNNameHints Privacy/AllowCrossDeviceClipboard Privacy/DisablePrivacyExperience Privacy/UploadUserActivities Security/RecoveryEnvironmentAuthentication System/AllowDeviceNameInDiagnosticData System/ConfigureMicrosoft365UploadEndpoint System/DisableDeviceDelete System/DisableDiagnosticDataViewer Storage/RemovableDiskDenyWriteAccess TaskManager/AllowEndTask Update/DisableWUfBSafeguards Update/EngagedRestartDeadlineForFeatureUpdates Update/EngagedRestartSnoozeScheduleForFeatureUpdates Update/EngagedRestartTransitionScheduleForFeatureUpdates Update/SetDisablePauseUXAccess Update/SetDisableUXWUAccess WindowsDefenderSecurityCenter/DisableClearTpmButton WindowsDefenderSecurityCenter/DisableTpmFirmwareUpdateWarning WindowsDefenderSecurityCenter/HideWindowsSecurityNotificationAreaControl WindowsLogon/DontDisplayNetworkSelectionUI
BitLocker CSP	已新增節點 AllowStandardUserEncryption。 已新增 Pro 版本的支援。
Defender CSP	已新增節點 Health/ProductStatus。
DevDetail CSP	已新增節點 SMBIOSSerialNumber。
EnterpriseModernAppManagement CSP	已在 AppManagement 節點下新增非卸除式設定。
Office CSP	已新增 FinalStatus 設定。
PassportForWork CSP	已新增設定。
RemoteWipe CSP	已新增設定。
SUPL CSP	已新增三個新的憑證節點。
TenantLockdown CSP	已新增 CSP。
Wifi CSP	已新增節點 WifiCost。
WindowsDefenderApplicationGuard CSP	已新增設定。
WindowsLicensing CSP	已新增 S 模式設定和 SyncML 範例。
Win32CompatibilityAppraiser CSP	新的 CSP。