Example SyncML for Surface Hub MDM management

[David Phillips]

Here is some sample SyncML code for management of Surface Hub.  The code as a whole can be used with Airwatch or broken down and used with InTune.  You'll need to replace the data fields with your specific configuration.  

This profile does not contain all of the management options available, but hopefully it will help get some folks started with some ideas.

<Replace>

<CmdID>101</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/InBoxApps/WirelessProjection/PINRequired</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">bool</Format>
</Meta>
<Data>true</Data>
</Item>

<CmdID>102</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/MOMAgent/WorkspaceID</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
<Data><WorkspaceID_Text></Data>
</Item>

<CmdID>103</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/MOMAgent/WorkspaceKey</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
<Data><WorkspaceKey_Text></Data>
</Item>

<CmdID>104</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/InBoxApps/Welcome/CurrentBackgroundPath</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
<Data><PathToPNG></Data>
</Item>

<CmdID>105</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/InBoxApps/Welcome/MeetingInfoOption</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>1</Data>
</Item>

<CmdID>106</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/DeviceAccount/PasswordRotationEnabled</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>0</Data>
</Item>

<CmdID>107</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/DeviceAccount/ExchangeServer</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data><ExchangeServerActiveSync></Data>
</Item>

<CmdID>108</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/DeviceAccount/CalendarSyncEnabled</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">bool</Format>
</Meta>
<Data>true</Data>
</Item>

<CmdID>109</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/Properties/ScreenTimeout</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>30</Data>
</Item>

<CmdID>110</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/Properties/SessionTimeout</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>15</Data>
</Item>

<CmdID>111</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/Properties/SleepTimeout</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>60</Data>
</Item>

<CmdID>112</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/SurfaceHub/Properties/AllowSessionResume</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">bool</Format>
</Meta>
<Data>false</Data>
</Item>

<CmdID>301</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/Policy/Config/Browser/Homepages</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data><BrowserHomepage></Data>
</Item>

<CmdID>702</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBAudioQoS/AppPathNameMatchCondition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>microsoft.ppiskype.windows.exe</Data>
</Item>

<CmdID>703</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBAudioQoS/SourcePortMatchCondition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>50020-50119</Data>
</Item>

<CmdID>704</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBAudioQoS/DSCPAction</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>46</Data>
</Item>

<CmdID>705</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBVideoQoS/AppPathNameMatchCondition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>microsoft.ppiskype.windows.exe</Data>
</Item>

<CmdID>706</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBVideoQoS/SourcePortMatchCondition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>58000-58119</Data>
</Item>

<CmdID>707</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBVideoQoS/DSCPAction</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>34</Data>
</Item>

<CmdID>708</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBAppShareQoS/AppPathNameMatchCondition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>microsoft.ppiskype.windows.exe</Data>
</Item>

<CmdID>709</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBAppShareQoS/SourcePortMatchCondition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>42000-42099</Data>
</Item>

<CmdID>710</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/NetworkQoSPolicy/SfBAppShareQoS/DSCPAction</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
</Meta>
<Data>26</Data>
</Item>

<CmdID>801</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Microsoft.Office.Whiteboard_8wekyb3d8bbwe/AppSettingPolicy/EnableInkShapes</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>true</Data>
</Item>

<CmdID>802</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Microsoft.Office.Whiteboard_8wekyb3d8bbwe/AppSettingPolicy/EnableInkTables</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
</Meta>
<Data>true</Data>
</Item>

</Replace>

[#2]

The whiteboard OMA URI for ink to shape and ink to table stopped working.  I have an open case with MS Premier to investigate.  So far everything else is working well.

[#3]

Thanks so much for this David, has helped hugely for us to basically configure our devices entirely just by enrolling in MDM!

Have you had any follow-up or resolution to your MSPS queriy about whiteboard settings? I noticed not long ago they weren't applying properly.

[#4]

I'm glad it was helpful!  I have an open case on the whiteboard issue, I'll update here as soon as it gets resolved.

[#5]

@David Phillips Looks like this might not be getting resolved any time soon. Change history for the admin guide shows they've removed the CSP setting details.

[#6]

Thanks for the heads up.  I just pinged MS Premier for an update.  

On a related note, I would like to see CSP for controlling other UWP apps as well.  For example there are now VMWare Horizon Desktop and Citrix Receiver apps.  They work, but you have to fill in server info each time you restart a Surface Hub session, and they don't scale well on the 84" Surface Hubs, so we need to be able to control screen resolution.  If you want to see that type of control, be sure you're pushing those vendors to provide it.

[#7]

I finally had a chance to play with changing the Start Menu.  If you're using something other than InTune for your MDM solution, you'll probably need to escape the XML to get it to work.  I found this tool useful:  https://codebeautify.org/xml-escape-unescape 

Here's an example of the code I use with AirWatch:

<Replace>
<CmdID>3</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/Policy/Config/Start/StartLayout</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
<Data>&lt;LayoutModificationTemplate xmlns:defaultlayout=&quot;http://schemas.microsoft.com/Start/2014/FullDefaultLayout&quot; xmlns:start=&quot;http://schemas.microsoft.com/Start/2014/StartLayout&quot; Version=&quot;1&quot; xmlns=&quot;http://schemas.microsoft.com/Start/2014/LayoutModification&quot;&gt;
&lt;LayoutOptions StartTileGroupCellWidth=&quot;8&quot; /&gt;
&lt;DefaultLayoutOverride LayoutCustomizationRestrictionType=&quot;OnlySpecifiedGroups&quot;&gt;
&lt;StartLayoutCollection&gt;
&lt;defaultlayout:StartLayout GroupCellWidth=&quot;8&quot;&gt;
&lt;start:Group Name=&quot;My Productivity Apps &quot;&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;0&quot; Row=&quot;0&quot; AppUserModelID=&quot;Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge&quot; /&gt;
&lt;start:Tile Size=&quot;4x2&quot; Column=&quot;2&quot; Row=&quot;0&quot; AppUserModelID=&quot;Microsoft.Getstarted_8wekyb3d8bbwe!App&quot; /&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;0&quot; Row=&quot;2&quot; AppUserModelID=&quot;Microsoft.Office.PowerPoint_8wekyb3d8bbwe!Microsoft.pptim&quot; /&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;2&quot; Row=&quot;2&quot; AppUserModelID=&quot;Microsoft.Office.Word_8wekyb3d8bbwe!Microsoft.Word&quot; /&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;4&quot; Row=&quot;2&quot; AppUserModelID=&quot;Microsoft.Office.Excel_8wekyb3d8bbwe!Microsoft.Excel&quot; /&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;0&quot; Row=&quot;4&quot; AppUserModelID=&quot;c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy!App&quot; /&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;2&quot; Row=&quot;4&quot; AppUserModelID=&quot;microsoft.microsoftskydrive_8wekyb3d8bbwe!App&quot; /&gt;
&lt;start:Tile Size=&quot;2x2&quot; Column=&quot;4&quot; Row=&quot;4&quot; AppUserModelID=&quot;Microsoft.RemoteDesktop_8wekyb3d8bbwe!App&quot; /&gt;
&lt;/start:Group&gt;
&lt;/defaultlayout:StartLayout&gt;
&lt;/StartLayoutCollection&gt;
&lt;/DefaultLayoutOverride&gt;
&lt;/LayoutModificationTemplate&gt;
</Data>
</Item>
</Replace>

[#8]

Does anyone have a guide on how to Enroll a Surface Hub into AirWatch?