Custom Settings (CSP) for Windows 10

Windows 10 offers Configuration Service Provider interface to control various policies on device. These CSPs are used by MDM providers like Scalefusion to provide device management capabilities. However there are quite a lot of CSPs that control various settings and policies on the device. Since it is practically impossible to include support for all CSPs by providing a form or a UI, Scalefusion provides advanced IT Admins the option of creating their own CSPs and pushing it to the devices via Scalefusion.

By using the Custom Settings feature of a Scalefusion Windows Profile, IT Admins can use a top-notch XML editor and push a CSP directly to the devices. Scalefusion supports Add, Replace & Delete operations of CSP.

In this document we will understand how to configure and push a custom settings payload to the device.

Prerequisites

  1. Understanding of Configuration Service Provider
  2. Ability to create XML payloads basing on Windows CSP.

Steps

  1. Sign In to Scalefusion and navigate to Device Profiles.
  2. Select a Windows device profile and edit or create a new Windows profile to start adding the custom settings. Navigate to Settings > Custom Settings
  3. Send payload as Atomic Command: This setting controls if the entire payload should be wrapped in an Atomic command. Atomic payload makes sure that either all the commands in the CSP/Payload succeed or all fail. This gives the advantage that policies are not half-applied. Some commands need to be wrapped in Atomic without which they will fail and some don't.
  4. Select Conflict Resolution Method: In case the custom payload that you upload conflicts with rest of the settings in the Device Profile (like App whitelisting, Exchange settings etc) this setting decides which one to use to resolve those conflicts. The options are,
    1. Custom Payload Wins over Device Profile Settings: The settings in custom payload are given preference over Device Profile.
    2. Device Profiles Wins over Custom Payload: The settings in Device Profile are given preference over Custom Payload.

Select an option basing on your payload, if you want to override what is being set from Device Profile choose Option a else choose Option b

  1. Custom Payload: This is the actual payload editor and you can either choose to Type In your payload or Import a xml file using IMPORT FILES option.
    1. Payload Editor: For example if you want to turn ON Windows defender, you would refer to the Defender CSP and enter the payload like shown below,
    2. Validate: Once you have entered the payload click on VALIDATE to make sure there are no other syntactical/validation issues.
      1. ALL OK: If the entered payload is all good a green tick is displayed on the top-right section of editor.
      2. ERRORS: If there are errors then a red cross is displayed on the top-right section of editor and the first error will be displayed below the editor,
  2. Update Profile: Once you have made the required changes, click on UPDATE PROFILE to save the changes and push it to all the devices associated with this profile.

Please contact us at support@scalefusion.com if you have any questions or need support on using this feature.


How did we do?


Powered by HelpDocs