Update Windows Embedded 8.1 devices that are protected by UWF

9/16/2013

Microsoft

September 2013

Summary

Helps you to update Windows Embedded 8.1 Industry (Industry 8.1) settings on devices that are protected with Unified Write Filter (UWF).

Applies To

Windows Embedded 8.1 Industry Pro

Windows Embedded 8.1 Industry Enterprise

Introduction

To use System Center Configuration Manager to update settings on a device that is protected with UWF, you must turn off UWF, use Configuration Manager to deploy a new configuration baseline that has the necessary changes, and then turn UWF back on again. Optionally, you can write a program or script to accomplish these tasks.

Prerequisites

• You’ve done one of the following:
  • Made the desired changes to a reference device and then used the Lockdown Baseline Tool (LBT) to import the features into System Center Configuration Manager. For more information, see Update Windows Embedded 8.1 settings after deployment on TechNet.
  • Made the desired changes to a configuration baseline that you already imported into Configuration Manager. For more information, see How to Manage Configuration Baselines for Compliance Settings in Configuration Manager on TechNet
• You have access to Configuration Manager, a remote client management suite.

To update a device that is protected with UWF

1. Turn off UWF at an administrator command prompt by typing the following command.

   uwfmgr.exe filter disable
   

2. Restart the device by typing the following command.

   uwfmgr.exe restart
   

3. From Configuration Manager, deploy the configuration baseline to your devices. For more information, see How to Deploy Configuration Baselines in Configuration Manager on TechNet.

   The Windows PowerShell scripts run automatically and apply the lockdown and branding settings to the other devices.

4. Turn on UWF at an administrator command prompt by typing the following command.

   uwfmgr.exe filter enable
   

5. Restart the device by typing the following command.

   uwfmgr.exe restart
   

6. Optionally, you can monitor the result of the deployment. For more information, see How to Monitor for Compliance Settings in Configuration Manager.

Conclusion

These instructions should help you update the settings in Industry 8.1 devices that are deployed and have UWF enabled. Using Configuration Manager, you can not only change a configuration baseline, but you can then monitor compliance.