Product Documentation

Managing Windows 8.1 Configurations

Oct 20, 2015

You can apply the following device management policies and configurations to users' enrolled Windows 8.1 devices. Auto-discovery for user enrollment is required to enable management of Windows 8.1 devices. For more information about auto-discovery, see To enable auto-discovery for user enrollment.

  • Credentials. Deliver credentials to users' devices to enable integrated authentication with your XenMobile PKI configuration.
  • Web Clip. Place shortcuts to useful webpages on the Apps screens of your users' desktops. Users must manually pin the shortcuts to their Start screens.
  • Restriction. Prevent users from performing certain actions and disable functionality on their devices.
  • Password Policy. Enforce device password settings that comply with your corporate security policy.
  • Custom. Create your own custom XML configuration by using the Open Mobile Alliance Device Management (OMA DM) API in Windows 8.1.

To create a Windows 8.1 device configuration

  1. Using a web browser, navigate to http[s]://serveraddress[:port]/zdm, where serveraddress is the fully qualified domain name (FQDN) or IP address of the Device Manager server and port is the optional port number if you changed the default setting.
  2. Log on to the Device Manager web console using an account with administrative permissions.
  3. Click the Policies tab and then in the left pane under MDM Policies, click Windows 8.1 Tablet > Configurations.
  4. In the results pane, click New Configuration and then select the configuration that you want to create.
  5. Give the configuration a name that will help you to identify it and, optionally, include a comment describing the configuration.
  6. Configure the additional settings as required.

    See the following section for more details about specific options for individual configurations.

Credentials Configuration Settings

Store Device. Select the certificate store in which to store the credential on users' devices. Choose My to install the credential in users' certificate stores.

Restriction Configuration Settings

User Account Control. Specify the circumstances under which Windows User Account Control will notify users of changes to their devices.

  • Always Notify—Users are notified both when applications make changes and when Windows settings that require administrator permissions are modified.
  • Notify App Changes—Users are notified only when applications make changes and not when Windows settings that require administrator permissions are modified.
  • Notify App Changes (No Dim)—Users are notified only when applications make changes and their desktops are not dimmed when the User Account Control dialog box appears.
  • Never Notify— Users are not notified of any changes to their devices.

Enable Windows Error Reporting. Select the check box to enable Windows to report hardware and software issues to Microsoft, notifying users of any available solutions.

Enable Smart Screen. Select the check box to enable SmartScreen Filter in Internet Explorer, which checks for malicious websites and downloads.

Password Policy Configuration Settings

Disallow Convenience Logon. Select the check box to prevent users from accessing their devices with picture passwords or biometric logons.

Minimum Password Complex Characters. Specify the minimum number of non-alphanumeric characters that users must include in their passwords.

Password History. Specify the number of previous passwords that are stored to prevent users from continually reusing a small number of passwords.