Windows 10 in cloud configuration

Published Feb 02 2021 08:05 AM 15K Views
Microsoft

We've heard organizations of all sizes express the desire for a streamlined way to deploy a set of standardized security and configuration settings to endpoints that only need a few apps and have focused needs. Developed to support these organizations, Windows 10 in cloud configuration is a recommended set of settings for Windows 10 devices that makes devices easy to deploy, highly secure, and cloud-first. It enables organizations to provide frontline workers, remote workers, and other individuals with a select set of applications, cloud-based data storage, and a familiar Windows experience.

Cloud config is set up within Microsoft Intune, a part of Microsoft Endpoint Manager[1]. It works on new and existing Windows 10 devices running Windows 10 Pro, Pro for Education, Pro for Workstations, Windows 10 Enterprise, and Windows 10 Education, and does not require any new licensing, software, or hardware[2]. It can be used to pre-configure new devices, so they are ready to go when users open them for the first time, or to repurpose existing hardware to extend its lifetime. In addition, Windows 10 devices in cloud  configuration have applications and capabilities specifically chosen by IT, helping to improve worker productivity while simultaneously improving the security posture and device compliance. Users are registered in Azure Active Directory (Azure AD) and devices are enrolled into Microsoft Intune for cloud management.

What is Windows 10 in cloud config?

Today, Windows 10 in cloud config is a recommended set of configuration settings for areas such as Windows Update for Business, Microsoft BitLocker, application deployment, and compliance. Microsoft will continue to innovate through cloud config—adding, removing, and modifying settings as needed—and is creating a guided scenario in Microsoft Intune for even easier configuration. More info on that soon!

What does cloud configuration include?

Windows 10 in cloud config includes Windows 10 Pro, Enterprise, or Education, Microsoft Teams, OneDrive for Business Known Folder Move (KFM), Microsoft Intune, and Azure AD. A number of Microsoft 365 subscriptions include all of these elements, or each can be licensed separately.

Do I need to reset devices into cloud config?

You are not required to wipe existing Windows 10 devices and start fresh to take advantage of Windows 10 in cloud config, but this process is recommended for those who would like to remove all extraneous apps, user accounts, and files from the device for maximum performance. Enrolling the device in Windows Autopilot and performing a Windows Autopilot reset is the preferred method, but it is not required.

Should I configure all of my devices in cloud config?

Windows 10 in cloud config is designed for users with simplified needs, such as productivity and browsing. You can start by identifying which users or teams in your organization would benefit from these specific policy and configuration settings. Ideal candidates are people who:

  • Have no dependency on on-premises infrastructure to be productive and successful in their role.
  • Use Windows 10 devices that do not require complex settings, configurations, or custom agents.
  • Use a focused set of apps like email, Teams, Microsoft Edge, and maybe a couple of internal line-of-business apps.

How does cloud config make things simpler?

Windows 10 in cloud configuration simplify both the end user experience and IT’s experience with endpoint management. Here are some of its key benefits:

  • Provides a uniform, simplified configuration optimized for the cloud that can be applied to Windows 10 Pro and Enterprise devices. Users enroll with cloud accounts (Azure AD) and devices are kept secure and compliant with Microsoft-recommended security settings. User data is redirected to compliant storage in OneDrive for Business[3].
  • Devices are configured with the default Windows 10 security baseline and are automatically updated through Windows Update for Business.
  • Microsoft Teams, Microsoft Edge, and additional Microsoft 365 Apps (optional) can be installed on the device and come securely configured, automatically updated, and ready to go.
  • Every Windows 10 in cloud config device has a uniform configuration, simplifying device replacements and troubleshooting.
  • Windows 10 in cloud config can be deployed using Microsoft Endpoint Manager.
  • Line-of-business apps may be installed on the device.
  • IT can provision apps both directly and through desktop/app virtualization.

Where can I learn more about Windows 10 in cloud config?

Check out the Windows 10 in cloud configuration page and download the Overview and setup guide today!


[1] Requires EMS E3 license or Microsoft 365 E3/E5 license.

[2] Additional software, hardware, or licenses may be required for certain features.

[3] Requires a Microsoft 365 Apps for Enterprise license to be assigned to the end user.

%3CLINGO-SUB%20id%3D%22lingo-sub-2111313%22%20slang%3D%22en-US%22%3EWindows%2010%20in%20cloud%20configuration%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2111313%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWe've%20heard%20organizations%20of%20all%20sizes%20express%20the%20desire%20for%20a%20streamlined%20way%20to%20deploy%20a%20set%20of%20standardized%20security%20and%20configuration%20settings%20to%20endpoints%20that%20only%20need%20a%20few%20apps%20and%20have%20focused%20needs.%20Developed%20to%20support%20these%20organizations%2C%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fwindows%2Fcloud-configuration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EWindows%2010%20in%20cloud%20configuration%3C%2FA%3E%20is%20a%20recommended%20set%20of%20settings%20for%20Windows%2010%20devices%20that%20makes%20devices%20easy%20to%20deploy%2C%20highly%20secure%2C%20and%20cloud-first.%20It%20enables%20organizations%20to%20provide%20frontline%20workers%2C%20remote%20workers%2C%20and%20other%20individuals%20with%20a%20select%20set%20of%20applications%2C%20cloud-based%20data%20storage%2C%20and%20a%20familiar%20Windows%20experience.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3ECloud%20config%20is%20set%20up%20within%20Microsoft%20Intune%2C%20a%20part%20of%20Microsoft%20Endpoint%20Manager%3CSUP%3E%3CA%20href%3D%22%23_note1%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%5B1%5D%3C%2FA%3E%3C%2FSUP%3E.%20It%20works%20on%20new%20and%20existing%20Windows%2010%20devices%20running%20Windows%2010%20Pro%2C%20Pro%20for%20Education%2C%20Pro%20for%20Workstations%2C%20Windows%2010%20Enterprise%2C%20and%20Windows%2010%20Education%2C%20and%20does%20not%20require%20any%20new%20licensing%2C%20software%2C%20or%20hardware%3CSUP%3E%3CA%20href%3D%22%23_note2%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%5B2%5D%3C%2FA%3E%3C%2FSUP%3E.%20It%20can%20be%20used%20to%20pre-configure%20new%20devices%2C%20so%20they%20are%20ready%20to%20go%20when%20users%20open%20them%20for%20the%20first%20time%2C%20or%20to%20repurpose%20existing%20hardware%20to%20extend%20its%20lifetime.%20In%20addition%2C%20Windows%2010%20devices%20in%20cloud%20%26nbsp%3Bconfiguration%20have%20applications%20and%20capabilities%20specifically%20chosen%20by%20IT%2C%20helping%20to%20improve%20worker%20productivity%20while%20simultaneously%20improving%20the%20security%20posture%20and%20device%20compliance.%20Users%20are%20registered%20in%20Azure%20Active%20Directory%20(Azure%20AD)%20and%20devices%20are%20enrolled%20into%20Microsoft%20Intune%20for%20cloud%20management.%3C%2FP%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId--527800606%22%20id%3D%22toc-hId--520584486%22%3EWhat%20is%20Windows%2010%20in%20cloud%20config%3F%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EToday%2C%20Windows%2010%20in%20cloud%20config%20is%20a%20recommended%20set%20of%20configuration%20settings%20for%20areas%20such%20as%20Windows%20Update%20for%20Business%2C%20Microsoft%20BitLocker%2C%20application%20deployment%2C%20and%20compliance.%20Microsoft%20will%20continue%20to%20innovate%20through%20cloud%20config%E2%80%94adding%2C%20removing%2C%20and%20modifying%20settings%20as%20needed%E2%80%94and%20is%20creating%20a%20guided%20scenario%20in%20Microsoft%20Intune%20for%20even%20easier%20configuration.%20More%20info%20on%20that%20soon!%3C%2FP%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId-1959712227%22%20id%3D%22toc-hId-1966928347%22%3EWhat%20does%20cloud%20configuration%20include%3F%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWindows%2010%20in%20cloud%20config%20includes%20Windows%2010%20Pro%2C%20Enterprise%2C%20or%20Education%2C%20Microsoft%20Teams%2C%20OneDrive%20for%20Business%20Known%20Folder%20Move%20(KFM)%2C%20Microsoft%20Intune%2C%20and%20Azure%20AD.%20A%20number%20of%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20365%20subscriptions%3C%2FA%3E%20include%20all%20of%20these%20elements%2C%20or%20each%20can%20be%20licensed%20separately.%3C%2FP%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId-152257764%22%20id%3D%22toc-hId-159473884%22%3EDo%20I%20need%20to%20reset%20devices%20into%20cloud%20config%3F%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EYou%20are%20not%20required%20to%20wipe%20existing%20Windows%2010%20devices%20and%20start%20fresh%20to%20take%20advantage%20of%20Windows%2010%20in%20cloud%20config%2C%20but%20this%20process%20is%20recommended%20for%20those%20who%20would%20like%20to%20remove%20all%20extraneous%20apps%2C%20user%20accounts%2C%20and%20files%20from%20the%20device%20for%20maximum%20performance.%20Enrolling%20the%20device%20in%20Windows%20Autopilot%20and%20performing%20a%20Windows%20Autopilot%20reset%20is%20the%20preferred%20method%2C%20but%20it%20is%20not%20required.%3C%2FP%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId--1655196699%22%20id%3D%22toc-hId--1647980579%22%3EShould%20I%20configure%20all%20of%20my%20devices%20in%20cloud%20config%3F%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWindows%2010%20in%20cloud%20config%20is%20designed%20for%20users%20with%20simplified%20needs%2C%20such%20as%20productivity%20and%20browsing.%20You%20can%20start%20by%20identifying%20which%20users%20or%20teams%20in%20your%20organization%20would%20benefit%20from%20these%20specific%20policy%20and%20configuration%20settings.%20Ideal%20candidates%20are%20people%20who%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3EHave%20no%20dependency%20on%20on-premises%20infrastructure%20to%20be%20productive%20and%20successful%20in%20their%20role.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EUse%20Windows%2010%20devices%20that%20do%20not%20require%20complex%20settings%2C%20configurations%2C%20or%20custom%20agents.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EUse%20a%20focused%20set%20of%20apps%20like%20email%2C%20Teams%2C%20Microsoft%20Edge%2C%20and%20maybe%20a%20couple%20of%20internal%20line-of-business%20apps.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId-832316134%22%20id%3D%22toc-hId-839532254%22%3EHow%20does%20cloud%20config%20make%20things%20simpler%3F%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWindows%2010%20in%20cloud%20configuration%20simplify%20both%20the%20end%20user%20experience%20and%20IT%E2%80%99s%20experience%20with%20endpoint%20management.%20Here%20are%20some%20of%20its%20key%20benefits%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3EProvides%20a%20uniform%2C%20simplified%20configuration%20optimized%20for%20the%20cloud%20that%20can%20be%20applied%20to%20Windows%2010%20Pro%20and%20Enterprise%20devices.%20Users%20enroll%20with%20cloud%20accounts%20(Azure%20AD)%20and%20devices%20are%20kept%20secure%20and%20compliant%20with%20Microsoft-recommended%20security%20settings.%20User%20data%20is%20redirected%20to%20compliant%20storage%20in%20OneDrive%20for%20Business%3CSUP%3E%3CA%20href%3D%22%23_note3%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%5B3%5D%3C%2FA%3E%3C%2FSUP%3E.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EDevices%20are%20configured%20with%20the%20default%20Windows%2010%20security%20baseline%20and%20are%20automatically%20updated%20through%20Windows%20Update%20for%20Business.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EMicrosoft%20Teams%2C%20Microsoft%20Edge%2C%20and%20additional%20Microsoft%20365%20Apps%20(optional)%20can%20be%20installed%20on%20the%20device%20and%20come%20securely%20configured%2C%20automatically%20updated%2C%20and%20ready%20to%20go.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EEvery%20Windows%2010%20in%20cloud%20config%20device%20has%20a%20uniform%20configuration%2C%20simplifying%20device%20replacements%20and%20troubleshooting.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EWindows%2010%20in%20cloud%20config%20can%20be%20deployed%20using%20Microsoft%20Endpoint%20Manager.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ELine-of-business%20apps%20may%20be%20installed%20on%20the%20device.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EIT%20can%20provision%20apps%20both%20directly%20and%20through%20desktop%2Fapp%20virtualization.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId--975138329%22%20id%3D%22toc-hId--967922209%22%3EWhere%20can%20I%20learn%20more%20about%20Windows%2010%20in%20cloud%20config%3F%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3ECheck%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fwindows%2Fcloud-configuration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EWindows%2010%20in%20cloud%20configuration%3C%2FA%3E%20page%20and%20download%20the%20%3CSTRONG%3EOverview%20and%20setup%20guide%3C%2FSTRONG%3E%20today!%3C%2FP%3E%0A%3CHR%20%2F%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-size%3A%2014px%3B%20font-weight%3A%20400%3B%20color%3A%20%23333333%3B%22%3E%3CSUP%3E%3CA%20id%3D%22_note1%22%20target%3D%22_blank%22%3E%3C%2FA%3E%5B1%5D%3C%2FSUP%3E%20Requires%20EMS%20E3%20license%20or%20Microsoft%20365%20E3%2FE5%20license.%3C%2FP%3E%0A%3CP%20style%3D%22font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-size%3A%2014px%3B%20font-weight%3A%20400%3B%20color%3A%20%23333333%3B%22%3E%3CSUP%3E%3CA%20id%3D%22_note2%22%20target%3D%22_blank%22%3E%3C%2FA%3E%5B2%5D%3C%2FSUP%3E%20Additional%20software%2C%20hardware%2C%20or%20licenses%20may%20be%20required%20for%20certain%20features.%3C%2FP%3E%0A%3CP%20style%3D%22font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-size%3A%2014px%3B%20font-weight%3A%20400%3B%20color%3A%20%23333333%3B%22%3E%3CSUP%3E%3CA%20id%3D%22_note3%22%20target%3D%22_blank%22%3E%3C%2FA%3E%5B3%5D%3C%2FSUP%3E%20Requires%20a%20Microsoft%20365%20Apps%20for%20Enterprise%20license%20to%20be%20assigned%20to%20the%20end%20user.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2111313%22%20slang%3D%22en-US%22%3E%3CP%3EHighly%20secure.%20Cloud-first.%20Learn%20how%20to%20easily%20transform%20Windows%2010%20PCs%20into%20streamlined%2C%20easy-to-manage%20endpoints.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22cloud-config.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F251413iB2D2B89A8BA63BA4%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22cloud-config.PNG%22%20alt%3D%22cloud-config.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2111313%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDeployment%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDevice%20management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%2010%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Feb 09 2021 03:01 PM
Updated by: