Skip to content

Commit

Permalink
Merging changes synced from https://github.com/MicrosoftDocs/Devices-…
Browse files Browse the repository at this point in the history
…docs-pr (branch live)
  • Loading branch information
Learn Build Service GitHub App authored and Learn Build Service GitHub App committed Dec 23, 2024
2 parents 2368f52 + a3e610a commit 97941d0
Show file tree
Hide file tree
Showing 9 changed files with 46 additions and 130 deletions.
2 changes: 1 addition & 1 deletion surface-hub/accessibility-surface-hub.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Adjust accessibility settings on Surface Hub
description: Users can adjust Ease of Access settings for Microsoft Surface Hub.
description: Learn how to adjust Ease of Access settings on Surface Hub for personalized accessibility, including Magnifier, Narrator, and more.
ms.assetid: 1D44723B-1162-4DF6-99A2-8A3F24443442
ms.reviewer: dpandre
manager: frankbu
Expand Down
2 changes: 1 addition & 1 deletion surface-hub/admin-group-management-for-surface-hub.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Admin group management
description: Every Microsoft Surface Hub can be configured individually by opening the Settings app on the device.
description: Manage admin accounts on Surface Hub with local, domain, or Microsoft Entra join options. Enhance security with tailored admin controls.
ms.assetid: FA67209E-B355-4333-B903-482C4A3BDCCE
ms.reviewer:
manager: frankbu
Expand Down
155 changes: 34 additions & 121 deletions surface-hub/appendix-a-powershell-scripts-for-surface-hub.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: PowerShell for Surface Hub (v1)
description: This page includes PowerShell scripts intended for the original Surface Hub (v1)
description: Learn to manage Surface Hub (v1) accounts with PowerShell scripts. Create, validate, and customize device accounts for seamless operation.
ms.assetid: 3EF48F63-8E4C-4D74-ACD5-461F1C653784
manager: frankbu
ms.service: surface-hub
Expand Down Expand Up @@ -29,7 +29,7 @@ appliesto:
- [Allowing device IDs for ActiveSync](#allowing-device-ids-for-activesync)
- [Auto-accepting and declining meeting requests](#auto-accept-meetings-cmdlet)
- [Accepting external meeting requests](#accept-ext-meetings-cmdlet)

> [!NOTE]
> See also [Modern Auth and Unattended Scripts in Exchange Online PowerShell V2](https://techcommunity.microsoft.com/t5/exchange-team-blog/modern-auth-and-unattended-scripts-in-exchange-online-powershell/ba-p/1497387)
Expand All @@ -45,14 +45,14 @@ To successfully execute these PowerShell scripts, you need to install the follo

What do the scripts do?

- Create device accounts for setups using pure single-forest on-premises (Microsoft Exchange and Skype 2013 and later only) or online (Microsoft Office 365), that are configured correctly for your Surface Hub.
- Validate existing device accounts for any setup (on-premises or online) to make sure they're compatible with Surface Hub.
- Provide a base template for anyone wanting to create their own device account creation or validation scripts.
- Create device accounts for setups using pure single-forest on-premises (Microsoft Exchange and Skype 2013 and later only) or online (Microsoft Office 365), that are configured correctly for your Surface Hub.
- Validate existing device accounts for any setup (on-premises or online) to make sure they're compatible with Surface Hub.
- Provide a base template for anyone wanting to create their own device account creation or validation scripts.

What do you need in order to run the scripts?

- Remote PowerShell access to your organization's domain or tenant, Exchange servers, and Skype for Business servers.
- Admin credentials for your organization's domain or tenant, Exchange servers, and Skype for Business servers.
- Remote PowerShell access to your organization's domain or tenant, Exchange servers, and Skype for Business servers.
- Admin credentials for your organization's domain or tenant, Exchange servers, and Skype for Business servers.

> [!NOTE]
> Whether you’re creating a new account or modifying an already-existing account, the validation script verifies that your device account is configured correctly. You should always run the validation script before adding a device account to Surface Hub.
Expand All @@ -61,120 +61,34 @@ What do you need in order to run the scripts?

The account creation scripts perform the following tasks:

- Ask for administrator credentials.
- Create device accounts in your domain/tenant.
- Create or assign a Surface Hub-compatible ActiveSync policy to the device accounts.
- Set various attributes for the created accounts in Exchange and Skype for Business.
- Assign licenses and permissions to the created accounts.
- Ask for administrator credentials.
- Create device accounts in your domain/tenant.
- Create or assign a Surface Hub-compatible ActiveSync policy to the device accounts.
- Set various attributes for the created accounts in Exchange and Skype for Business.
- Assign licenses and permissions to the created accounts.

These attributes are the attributes that are set by the scripts:

<table>
<colgroup>
<col width="33%" />
<col width="33%" />
<col width="33%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Cmdlet</th>
<th align="left">Attribute</th>
<th align="left">Value</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Set-Mailbox</p></td>
<td align="left"><p>RoomMailboxPassword</p></td>
<td align="left"><p>User-provided</p></td>
</tr>
<tr class="even">
<td align="left"><p></p></td>
<td align="left"><p>EnableRoomMailboxAccount</p></td>
<td align="left"><p>True</p></td>
</tr>
<tr class="odd">
<td align="left"><p></p></td>
<td align="left"><p>Type</p></td>
<td align="left"><p>Room</p></td>
</tr>
<tr class="even">
<td align="left"><p>Set-CalendarProcessing</p></td>
<td align="left"><p>AutomateProcessing</p></td>
<td align="left"><p>AutoAccept</p></td>
</tr>
<tr class="odd">
<td align="left"><p></p></td>
<td align="left"><p>RemovePrivateProperty</p></td>
<td align="left"><p>False</p></td>
</tr>
<tr class="even">
<td align="left"><p></p></td>
<td align="left"><p>DeleteSubject</p></td>
<td align="left"><p>False</p></td>
</tr>
<tr class="odd">
<td align="left"><p></p></td>
<td align="left"><p>DeleteComments</p></td>
<td align="left"><p>False</p></td>
</tr>
<tr class="even">
<td align="left"><p></p></td>
<td align="left"><p>AddOrganizerToSubject</p></td>
<td align="left"><p>False</p></td>
</tr>
<tr class="odd">
<td align="left"><p></p></td>
<td align="left"><p>AddAdditionalResponse</p></td>
<td align="left"><p>True</p></td>
</tr>
<tr class="even">
<td align="left"><p></p></td>
<td align="left"><p>AdditionalResponse</p></td>
<td align="left"><p>&quot;This is a Surface Hub room!&quot;</p></td>
</tr>
<tr class="odd">
<td align="left"><p>New-MobileDeviceMailboxPolicy</p></td>
<td align="left"><p>PasswordEnabled</p></td>
<td align="left"><p>False</p></td>
</tr>
<tr class="even">
<td align="left"><p></p></td>
<td align="left"><p>AllowNonProvisionableDevices</p></td>
<td align="left"><p>True</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Enable-CSMeetingRoom</p></td>
<td align="left"><p>RegistrarPool</p></td>
<td align="left"><p>User-provided</p></td>
</tr>
<tr class="even">
<td align="left"><p></p></td>
<td align="left"><p>SipAddress</p></td>
<td align="left"><p>Set to the User Principal Name (UPN) of the device account</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Set-MsolUserLicense (O365 only)</p></td>
<td align="left"><p>AddLicenses</p></td>
<td align="left"><p>User-provided</p></td>
</tr>
<tr class="even">
<td align="left"><p>Set-MsolUser (O365 only)</p></td>
<td align="left"><p>PasswordNeverExpires</p></td>
<td align="left"><p>True</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Set-AdUser (On-premises only)</p></td>
<td align="left"><p>Enabled</p></td>
<td align="left"><p>True</p></td>
</tr>
<tr class="even">
<td align="left"><p>Set-AdUser (On-premises only)</p></td>
<td align="left"><p>PasswordNeverExpires</p></td>
<td align="left"><p>True</p></td>
</tr>
</tbody>
</table>
| Cmdlet | Attribute | Value |
|---------------------------------|-------------------------------|------------------------------------------------|
| Set-Mailbox | RoomMailboxPassword | User-provided |
| | EnableRoomMailboxAccount | True |
| | Type | Room |
| Set-CalendarProcessing | AutomateProcessing | AutoAccept |
| | RemovePrivateProperty | False |
| | DeleteSubject | False |
| | DeleteComments | False |
| | AddOrganizerToSubject | False |
| | AddAdditionalResponse | True |
| | AdditionalResponse | "This is a Surface Hub room!" |
| New-MobileDeviceMailboxPolicy | PasswordEnabled | False |
| | AllowNonProvisionableDevices | True |
| Enable-CSMeetingRoom | RegistrarPool | User-provided |
| | SipAddress | Set to the User Principal Name (UPN) of the device account |
| Set-MsolUserLicense (O365 only) | AddLicenses | User-provided |
| Set-MsolUser (O365 only) | PasswordNeverExpires | True |
| Set-AdUser (On-premises only) | Enabled | True |
| Set-AdUser (On-premises only) | PasswordNeverExpires | True |

[!INCLUDE [Azure AD PowerShell deprecation note](includes/aad-powershell-deprecation-note.md)]

Expand All @@ -186,7 +100,6 @@ The account creation scripts cannot modify an already existing account, but can

### <a href="" id="create-on-premises-ps-scripts"></a>Create an on-premises account


```PowerShell
# SHAccountCreateOnPrem.ps1
Expand Down Expand Up @@ -1613,8 +1526,8 @@ In the following cmdlets, `$strPolicy` is the name of the ActiveSync policy, and

In order to run the cmdlets, you need to set up a remote PowerShell session and:

- Your admin account must be remote-PowerShell-enabled. This setting allows the admin to use the PowerShell cmdlets that are needed by the script. (This permission can be set using `set-user $admin -RemotePowerShellEnabled $true`)
- Your admin account must have the "Reset Password" role if you plan to run the creation scripts. This role allows the admin to change the password of the account, which is needed for the script. The Reset Password Role can be enabled using the Exchange Admin Center.
- Your admin account must be remote-PowerShell-enabled. This setting allows the admin to use the PowerShell cmdlets that are needed by the script. (This permission can be set using `set-user $admin -RemotePowerShellEnabled $true`)
- Your admin account must have the "Reset Password" role if you plan to run the creation scripts. This role allows the admin to change the password of the account, which is needed for the script. The Reset Password Role can be enabled using the Exchange Admin Center.

Create the policy.

Expand Down
2 changes: 1 addition & 1 deletion surface-hub/change-language-on-surface-hub.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Change display language on Surface Hub
description: Once a Surface Hub admin installs other language packs, users can change the display language by selecting a new one from the available installed languages.
description: Learn how Surface Hub users can change the display language, with admin-installed options, for a personalized collaboration experience.
manager: frankbu
ms.service: surface-hub
author: coveminer
Expand Down
2 changes: 1 addition & 1 deletion surface-hub/check-surface-hub-warranty.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Check Surface Hub warranty status
description: Describes how to check the warranty status of Surface Hub devices directly from Surface Hub or from the cloud.
description: Easily check your Surface Hub warranty status via the Surface app, Support for Business portal, or Surface Management Portal.
manager: frankbu
ms.service: surface-hub
author: coveminer
Expand Down
2 changes: 1 addition & 1 deletion surface-hub/collect-surface-hub-log-files.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Collect Surface Hub log files
description: This page shows how admins can collect log files for use when troubleshooting Surface Hub.
description: Learn how to collect Surface Hub log files locally via USB or remotely through Teams Admin Center for troubleshooting and analysis.
ms.reviewer:
manager: frankbu
ms.service: surface-hub
Expand Down
2 changes: 1 addition & 1 deletion surface-hub/connect-and-display-with-surface-hub.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Connect other devices and display with Surface Hub
description: You can connect other device to your Surface Hub to display content.
description: Learn how to connect devices & displays to Surface Hub. Use Guest Mode, Replacement PC Mode, Video Out, or Bluetooth for flexibility.
ms.assetid: 8BB80FA3-D364-4A90-B72B-65F0F0FC1F0D
ms.reviewer: dpandre
manager: frankbu
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: Create and test a device account on Surface Hub
description: This article introduces how to create and test the device account that Microsoft Surface Hub uses to communicate with Microsoft Exchange and Skype.
description: Set up a Surface Hub device account for seamless meeting scheduling and conferencing with Exchange and Teams integration.
ms.assetid: C8605B5F-2178-4C3A-B4E0-CE32C70ECF67
ms.reviewer: rikot
manager: frankbu
Expand Down
7 changes: 5 additions & 2 deletions surface/surface-pro-nfc.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ms.localizationpriority: medium
author: coveminer
ms.author: chauncel
ms.topic: overview
ms.date: 09/04/2024
ms.date: 12/20/2024
ms.reviewer: chauncel
manager: frankbu
appliesto:
Expand All @@ -21,6 +21,9 @@ Although NFC can read information stored on the magnetic stripe of a bank card,

We engineered NFC in Surface Pro 10 and Surface Pro (11th Edition) for enterprise customers where the primary applications of NFC technology extend to authentication, access control, and the exchange of information. These use cases are fundamental in environments that demand heightened security and streamlined operations, such as workplaces and educational institutions.

> [!NOTE]
> **NFC support is available only on commercial Wi-Fi versions** of Surface Pro 10 and Surface Pro (11th Edition) for Business. The 5G models of Surface Pro 10 and Surface Pro (11th Edition) do not include NFC support. The consumer Wi-Fi version of Surface Pro (11th Edition) does not include NFC support.
## Authenticate with NFC

The NFC reader is located in the upper left bezel of the device, under the display.
Expand Down Expand Up @@ -144,7 +147,7 @@ For a managed approach, IT admins can disable NFC using SEMM (Surface Enterprise

### References

1. NFC is only available on Wi-Fi configurations of Surface Pro 10 and Surface Pro (11th Edition).
1. NFC is only available on commercial Wi-Fi configurations of Surface Pro 10 and Surface Pro (11th Edition).

## Download NFC Lock Screens

Expand Down

0 comments on commit 97941d0

Please sign in to comment.