http___live.mscommunity.net_blogs_tbronzin__1.xml
1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 3.1 4.1 5.1 6.1 7.1 8.1 8.2 8.3 8.4 8.5 9.1 9.2 9.3 10.1 10.2 11.1 12.1 13.1 13.2 13.3 13.4 13.5 14.1 14.2 14.3 14.4 14.5 15.1 15.2 15.3 15.4 15.5 15.6 15.7 15.8 16.1 16.2 16.3 17.1 17.2 17.3 17.4 17.5 17.6 17.7 18.1 18.2 18.3 18.4 19.1 20.1 20.2 20.3 20.4 20.5 20.6 21.1 21.2 22.1 22.2 23.1 23.2 23.3 23.4 23.5 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 32.3 33.1 33.2 34.1 35.1 36.1 36.2 37.1 37.2 37.3 37.4 37.5 37.6 37.7 37.8 38.1 39.1 40.1 41.1 41.2 41.3 41.4 41.5 42.1 42.2 42.3 43.1 43.2 43.3 43.4 43.5 44.1 44.2 44.3 44.4 44.5 45.1 45.2 45.3 45.4 45.5 45.6 45.7 45.8 45.9 46.1 46.2 46.3 47.1 47.2 48.1
With Windows 8, we introduce the optional capability to sign in to your PC with a Windows Live ID and, by doing so, gaining the ability to roam a broad range of settings across all of your PCs. In this article by Katie Frigon, the group program manager of the You-Centered Experience team, she describes the feature and its benefits. --StevenEach Windows user wants to have the ability to set up and use a PC in a way that is unique to them. Doing so, however, can be challenging in today’s multiple user and multiple PC environment. We know that shared PC usage is common and we’ve heard from many of you that switching between multiple accounts can be cumbersome. The difficulties associated with managing multiple accounts often lead to the sharing of a single account on a PC, and a less personal (and potentially less private) experience for each user. We also know that users are utilizing multiple devices more often now, and setting up a new PC can be inconvenient and time consuming. In Windows 8, we have set out to ensure that each PC user has a truly personal experience that seamlessly bridges their online and offline tasks, is simpler to set up and use, and persists across their set of Windows 8 PCs. To do this, we’ve introduced the ability to log in to Windows (optionally) with a Windows Live ID that works across devices, apps, and services, allowing you a uniquely personal experience with Windows. Shared PC usage occurs in 72% of desktops and 49% of laptops How user accounts are used on shared computers PCs per household in the United States Benefits of signing in to Windows 8 with Windows Live ID Signing in with an ID allows you to: When you buy a Windows 8 PC and set up your user account for the first time, you can optionally choose to create an account that is associated to a Windows Live ID. You can either use an existing ID or create a new one. If you choose to create a new one, you can use any email address you want as your new ID, and then create your unique password. For example, you can use example@live.com or you can use someone@example.com. You just need to identify an email address that you want to have associated with the Windows Live ID service, and provide a unique password.  Of course, you can also continue to use local Windows accounts as you always have and obviously, domain-administered accounts work as they always have as well. - Associate the most commonly used Windows settings with your user account. Saved settings are available when you sign in to your account on any Windows 8 PC. Your PC will be set up just the way you are used to! - Easily reacquire your Metro style apps on multiple Windows 8 PCs. The app’s settings and last-used state persist across all your Windows 8 PCs. - Save sign-in credentials for the different apps and websites you use and easily get back into them without having to enter credentials every time. - Automatically sign in to apps and services that use Windows Live ID for authentication. So, although many people assume they will need to sign up for a new email account to get a Windows Live ID, it’s actually not necessary. In fact, many online services use a "string" like someone@example.com to represent a user name, even though that string looks like an email address. For example, when you order books at an online bookstore, your user name may look like an email address, even though your online book seller does not manage your email. The someone@example.com address is just a convenient way of identifying you, since most Internet users these days have email addresses. So, your email account and password will still be managed by whatever email provider you choose, and we use the user name and password you give us to help manage your settings and state across your Windows 8 PCs, even if you haven’t signed up for Hotmail or other Microsoft services that use this ID. Like all of us, you probably spend a significant amount of time personalizing your Windows experience to reflect your style, your life, and how you use your PC. We all know how frustrating it is when all that work is lost when you buy a new PC or use a different one (or just reformat your hard drive). With Windows 8, we are working to change that—you will be able to have your personal Windows experience on any Windows 8 PC you sign in to with your Windows Live ID. Settings such as your lock screen picture, desktop background, user tile, browser favorites and history, spell check dictionaries, Explorer settings, mouse settings, and accessibility settings, among many others are now associated with your Windows 8 account and stored in the cloud. They are kept in sync and come down to each machine you use as they are changed or updated. Having a truly personal experience in Windows 8 also includes your Metro style apps—how you use them, the settings you use, and where you left off. It will be easy to see which Metro style apps you’ve purchased and choose which ones you want to have on each of your Windows 8 PCs. By using your ID to sign in to Windows, the settings and state for your Metro style apps stay in sync between each PC you use. For example, let’s say you are reading the news in a reader app on your tablet. If you add specific feeds you want to continue to follow, those feeds could automatically be available in the same reader app on any of your other Windows 8 PCs. We will also enable developers to build Metro style apps that tell Windows their state, so you can pick up where you left off as you move between PCs. You can pick up on the same page of a book, the same level of a game, or the same place in the movie you were watching as you switch between your Windows 8 PCs. In the developer preview of Windows 8, you can see this functionality in Internet Explorer 10. You might be wondering how you can roam non-Metro style apps and settings without a domain. This isn't something that can be done with Windows Live ID, and we would discourage using tools that manually attempt to do this by mechanisms such as going through the registry or copying around executables. However, using the new Restore/Refresh tools, it is possible to easily create an image that has your preferred desktop apps installed, and then use that as a refresh point.  If you do want to roam your settings for desktop apps then you can continue to use the mechanisms available for roaming profiles and client side caching of files available with Active Directory and Windows Server. Another benefit of signing in with a Windows Live ID is how we’ve simplified the need to sign in to multiple services and applications. We accomplish this in two ways. First, once you’ve signed in to Windows with your ID, you do not need to enter it again to sign in to any app or website that also uses Windows Live ID. For example, once you sign in to Windows with your ID, you can launch the Windows Messaging app and start talking with your friends without the need to sign in again. Similarly, you can browse to your Hotmail inbox page without needing to enter your email address and password again. You can always sign out of a webpage and sign in as a different user, but by default you will be automatically signed in. To be clear, however, those applications and websites do not have special access to your Windows PC or your personal data. Second, if you choose to, Windows can store separate Metro style app and web site credentials. Those credentials can then sync to each Windows 8 PC that you’ve trusted and verified yourself with. You won’t have to type in your user name or password; just confirm your sign-in as needed. Similar to the Messaging application example, when launching a Metro style application that uses this feature, you will be signed in automatically and the application will resume right where you left off. User controls There is a lot of benefit to using a Windows Live ID to sign in to Windows. However, it is important to note that every Windows user is unique in their needs. Your Windows 8 experience is in your control. When you create a Windows account, you choose the type of account you want to use. You can choose to create one that associates with Windows Live ID, or stick with a local account that works just like in Windows 7. You can also change a local account to link it with a Windows Live ID at a later date. If you choose to associate your local account with an ID, we’ve provided control over what you want to sync to each Windows 8 PC you use. In Control Panel, there is a section called “Sync PC Settings” where you can manually turn settings sync on or off. You can choose to turn off all syncing or you can turn off syncing per the type of setting. The settings groups include: We’ve recommended a default behavior that assumes you want to roam settings that are used most often to personalize and customize the way you use your PC. In particular, we’ve heard from you that visual personalization for your PC is important. For Windows 8 we’ve included key settings like changing your lock screen image. In addition, you can also roam the desktop themes you use and create, including colors, sounds, and desktop background (note: currently for the background image we roam the original image that was selected if it’s under 2MB. If the image is over 2MB we compress and crop the image to 1920x1200). - Personalize - Themes - Ease of access - Language preferences - Apps - Web browser - Other stuff - Some passwords It is also important that you maintain control of your data when work and personal start to mix. In Windows 8, when you link your Windows domain account to a Windows Live ID, we ask you up front (before data is synced) what data you want to sync between your domain-joined PC and other PCs you use with that ID. That way, you can decide if things like your web history, favorites, or credentials should sync to your work machine, or if you’d prefer to keep those or anything else that is synced only on your personal machines. We also empower IT administrators to control what a user can sync to a work PC through group policy. We have provided control to IT administrators to decide if a worker can link their domain account to an ID, and if the admin allows that link, what types of data the worker is allowed to sync. Finally it’s important to note that credentials that are entered and stored on a domain-joined machine do not get uploaded to the cloud, and never get synced to your other PCs – this ensures that corporate credentials stay on the PCs that are managed by the IT admin. Privacy and security We understand that when using services connected to the cloud, privacy and security are on the top of your mind. When you associate your Windows user account with a Windows Live ID, there are three categories of data that are especially interesting from the privacy and security perspective: We’ve taken measures to safeguard the ID and password you use to sign in to Windows. We do this in a couple ways. First, we will require a strong password (and you can’t leave password blank). Next, we’ll collect a secondary proof of your identity. This will allow us to establish “trust” with specific PCs that you use frequently or own. This in turn will also enable more secure syncing of private data like passwords. Collecting the secondary proof of your identity also helps make account recovery easier and more secure. Examples of secondary proofs are alternative email addresses, mobile phone numbers, and questions with secret answers—something that generally only you will know. - Your Windows Live ID user name and password - Your Windows Live ID user profile - The settings and data you choose to sync Signing in with a Windows Live ID also gives you much more control over your password, including your ability to recover a lost one. If you use a local account and you forget your password, you’re in a tough spot, and your options are limited. You may be able to recover your password with a hint or a recovery key, but if neither of those works, you’re generally left with having to rebuild your PC from scratch. (Technically there are some password cracking tools available on the Internet that you could download and try, but they’re unlikely to work on a suitably strong password, and many of the cracking tools available online are actually malware downloads!)  However, if you sign in to your PC with your Windows Live ID and you later forget your password, you can reset your password from another PC by navigating to https://login.live.com and clicking on “forgot my password.”  This will allow you to reset your password in a secure fashion without losing any information on your PC. Resetting your password this way is also more secure because it takes advantage of the secondary proof we mentioned earlier to make sure it’s really you resetting your password. You might also be wondering, “what happens if somehow my Windows Live ID gets stolen?”  Well, we have some help for you there too. Windows Live ID includes a number of different safety features to detect if your account is stolen, and it will change your account to a “compromised” state (limiting what it can do) until you can regain control of your account using the two-factor authentication features (secondary proofs) that you set up earlier. Importantly, you will still have full access to your PC, since your PC will allow you to log in with the password you had before your account was stolen – you just won’t be able to use the services and applications that rely on this ID until you go through our “recover my account” workflow online. With Windows 8, we want to put you in control of how your data is used and what you want to sync between Windows 8 PCs. When you choose to sign in to your Windows 8 PC with a Windows Live ID, only a small amount – your first name, last name, and display name -- are shared with Windows. Windows does not use any of your other profile data. Your profile data stored in the cloud is released to apps or websites that you allow to have that data. While any Metro style app can leverage Windows Live ID for their own sign-in authentication, they must always ask you first if you want to allow access to particular details from your profile. As mentioned earlier, there are three categories of data that can be synced to your Windows 8 PCs when you sign in with your ID: 1) Windows settings, 2) App settings and data, and 3) credentials. This data is stored in the cloud so that it is available to you when you sign in to your various Windows 8 PCs. The size of the data we roam is minimal and we only enforce some limits on a per setting basis, for example, the file size for the lock screen image. None of this counts against your Windows Live storage quota. This data is also stored separately from your other Windows Live data, for example, what you store on SkyDrive. You might be concerned with how profile data is protected. In order to secure user data, we’ve taken several measures. First, we do not roam data over WWAN by default. Second, all user data is encrypted on the client before it is sent to the cloud. All data and settings that leave your PC are transmitted using SSL/TLS. The most sensitive information, like your credential information, is encrypted once based on your password and then encrypted again as it is sent across the Internet. The data stored is not available to other Microsoft services or third parties. Lastly, before the sensitive information can be accessed on a second Windows 8 PC for the first time, you must establish “trust” for that PC by providing further proof of your identity. This further proof can be done by providing Windows with a code sent to your mobile phone number or by following the instructions sent to an alternate email address. Any of the data that is saved to the cloud via the roaming mechanism is only accessed by Windows for roaming. This is very important. So for example, Internet Explorer's history is saved as a roaming state but is not used or accessed in any other context—it is no different than if you had manually created that same record of website history on another PC. We are very excited about the opportunity to make the Windows 8 experience more personal and easier to set up in a way that protects your privacy and safety. We look forward to hearing about how you are enjoying the feature and to receiving your feedback! Katie Frigon
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 7.3 8.1 9.1 10.1 10.2 11.1 12.1 12.2 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 44.2 44.3 45.1 46.1 47.1
This is my article published on April 14 as introduction to Dobrisa Adamec (MVP) and my WinDays 2012 session "How to use the same user profile and settings on different devices that are using Windows 8?" Even it is in Croatian, by using bing/google translate you can read it in your language :-) Enjoy! Kako imati isti korisnički profil na više računala koja koriste Windows 8? Zašto isti korisnički profil na različitim računalima? Windows 8 operativni sustav dolazi sa opcijom da se korisnik prijavi sa svojim Windows Live ID korisničkim računom i na taj način čitav svoj korisnički profil, koji uz podatke o korisniku, postavkama za spajanje i ostalim podacima, može uključivati i popis aplikacija, jezik korisničkog sučelja i regionalne postavke, pozadinu s radnog stola (desktopa), da li je uključena tipkovnica koja se pokazuje na ekranu, da li je uključeno prepoznavanje govora, postavke grafičke okoline poput Aero opcije, kako je podešena Windows traka s alatima (taskbar), postavke Windows Explorer-a, miša, mrežne postavke, snimljene postavke prava pristupa web odredištima (saved website credentials) itd. Gore navedeno se „stručno“ (od strane Microsofta) zove: Windows 8 User Profile Roaming with Windows Live. Razlog zašto se Microsoft odlučio za implementaciju navedenog mehanizma je dvojak: korisnici žele koristiti svoje korisničke račune na različitim računalima/uređajima i drugi je da više korisnika koristi isto računala i to u 72% slučaja na stolnim računalima i 46% slučajeva na prijenosnim računalima. Istraživanja su pokazala da, u SAD-u, u 36% domaćinstva postoji 2 i više računala/uređaja. Primjer scenarija korištenja sinkronizacije postavki operativnog sustava Windows 8 korištenjem Windows Live servisa Primjer jednog scenarija korištenja prijenosa korisničkog profila sa jednog na drugo računalo dan je u nastavku teksta: Prilikom završetka postavljanja operativnog sustava na 2. Računalu, korisnik mora samo upisati svoj Windows Live ID korisnički račun, te nakon toga i lozinku. Nakon toga, Windows 8 se spaja na servis u oblaku i priprema računalo, kao što se vidi na slijedećoj slici. Nakon nekoliko trenutaka se pojavljuje početni ekran, a sustav je spreman za rad. Naravno, sinkronizacija podataka o korisniku se dešava u pozadini kako ne bi ometala trenutačnu korisnikovu aktivnost. Postavke se pojavljuju pomalo, kako se skidaju, pa tako nakon nekoliko sekundi je vidljiva slika korisnika koja je odabrana za taj profil: Isto tako se pojavljuju ostali podaci, poput npr. web odredišta koja smo priboli na početni ekran: Kao i ako korisnik ode u Internet Explorer, vide se npr. sva ona web odredišta koja često posjećuje, plus ona koja je korisnik prikvačio: Kao i Windows postavke poput isključenja zvuka pri tipkanju na tipkovnicu koja se prikazuje na ekranu: A ako korisnik ode na neku od aplikacija koje je odabrao na drugom računalu, takve aplikacije, poput ove za pregled video sadržaja s Microsoft Build konferencije, pamte koji je video korisnik gledao i gdje je stao s pregledavanjem video zapisa: Osim toga, sve druge postavke, poput npr. svih RSS feed-ova koje je korisnik odabrao na drugom računalu, automatski se prenose na novo/drugo računalo i dostupne su korisniku: A ako korisnik zaključa računalo i na taj način ode do početnog ekrana, vidjeti će da je prenijeta i pozadina na tom ekranu, umjesto inicijalne zelene pozadine. Popis svih mogućnosti sinkronizacije postavki vezanih uz Windows Live ID Osim navedenog scenarija, potpuna lista mogućnosti sinkronizacije podataka između različitih računala/uređaja, korištenjem Windows Live ID korisničkog računa, je slijedeća: - Moguće je povezati većinu postavki unutar Windows 8 operativnog sustava sa Windows Live ID korisničkim računom, te prijavom s tim korisničkim računom na drugo Windows 8 računalo prenijeti postavke vezane s tim korisničkim profilom (računom) - Moguće je jednostavno prenijeti svoje METRO aplikacije na druga Windows 8 računala, zajedno s njihovim postavkama i trenutnim stanjem (npr. nastaviti gledati video na drugom računalu ili pisati e-mail) - Moguće je snimiti sve pristupne korisničke račune i lozinke u korisnički profil povezan s Windows Live ID korisnika, pa onda omogućiti automatsku prijavu na razne aplikacije i web odredišta, bez potrebe za ponovnom prijavom sa korisničkim računom/lozinkom (single sign-in) - Omogućiti jednostavnom prijavom na operativni sustav i automatsku prijavu na sve aplikacije i web servise koje koriste Windows Live ID korisnički račun Nažalost, navedene mogućnosti nije moguće koristiti s „starim“, odnosno aplikacijama koje nisu razvijene za METRO sučelje. Važno je napomenuti da svaki korisnik Windowsa može sam odrediti da li uopće želi sinkronizaciju s Windows Live servisima ili ne želi (npr. korisnik je dio poslovne domene). Isto tako, ako odluči koristiti sinkronizaciju postavki, korištenjem Windows Live sinkronizacijskog mehanizma, korisnik je u mogućnosti odabrati koje postavke želi sinkronizirati i da li uopće želi išta sinkronizirati, za slijedeće grupe postavki: - Personalizacija - Teme - Lakoća pristupa (ease of access) - Postavke jezika - Aplikacije - Web browser - Druge stvari - Lozinke Naravno, od ostalih Windows Live servisa tu je i mogućnost integracije s Skydrive servisom (već opisanim na ovom portalu), te Hotmail i Messanger servisima. Sigurnost podataka Što se tiče sigurnosti, sve potrebne mjere su poduzete kako bi se zaštitili: a) Windows Live ID korisničko ime i lozinka b) Windows Live ID korisnički profil c) Postavke i podatke koje je korisnik odabrao za sinkronizaciju Vezano za korisničko ime i lozinku, uz zahtjeve da lozinka bude dovoljno komplicirana da je netko ne može (lako) dokučiti, omogućena je i provjera identiteta s dodatnim pitanjima/odgovorima o korisniku. Isti podaci služe u slučaju da je korisnik zaboravio lozinku i želi da mu se ona ponovo generira, bez gubitka podataka na računalu. Svaka aplikacija koja želi pristupiti Windows Live ID korisničkom profilu u računalnom oblaku, mora prvo eksplicitno zatražiti pristanak od korisnik, te tek onda može pristupiti podacima. Naravno, svaka Windows 8 METRO aplikacija može pohraniti i svoje podatke, no postoji za njih limit koliko postavke mogu biti velike. Sama komunikacija između računala i računalnog oblaka je sigurna jer se koristi SSL/TLS, a osjetljivi podaci poput korisničkih računa i lozinki za razne aplikacije i servise, te njihovi podaci se dodatno šifriraju na samom računalu korisnika i tako prenose do računalnog oblaka. Takvi podaci nisu dostupni ostalim Microsoft servisima u računalnom oblaku ili drugim aplikacijama, a da bi se mogli koristiti na drugom računalu potrebno je da se (kod prvog spajanja) uspostavi „povjerenje“ (trust) s tim drugim računalima, pružanjem dodatnih dokaza o identitetu korisnika. Takav npr. dokaz može biti slanje SMS poruke na broj mobilnog uređaja zapisan u profilu korisnika. Ukoliko se radi o računalu koje je dio korporativne mreže, administratoru računala je omogućeno da potpuno sinkronizaciju ili pojedine opcije. Vrlo je važno napomenuti da sve postavke i podaci koji su na gore opisani način spremljeni u računalni oblak su dostupni jedino i isključivo kroz mehanizam Windows 8 User Profile Roaming with Windows Live. Navedeni mehanizam bi trebao olakšati kako migraciju sa jednog na drugo računalo, tako i sinkronizaciju između različitih računala/uređaja u svakodnevnom radu, te sinkronizaciju stanja i podataka METRO aplikacija.