Windows 10 Pro / Enterprise 2004 Build 19041.329 with Office Pro Plus 2019 Integrated

Microsoft’s next Windows 10 feature update is here! Known as the May 2020 Update (and version 2004), this new version of Windows 10 is all about fit and finish. There’s not a whole lot new here in regards to features, but there are plenty of changes and enhancements to features that have already been part of the OS for some time.

Windows Hello
Windows Hello is now supported as Fast Identity Online 2 (FIDO2) authenticator across all major browsers including Chrome and Firefox.You can now enable passwordless sign-in for Microsoft accounts on your Windows 10 device by going to Settings > Accounts > Sign-in options, and selecting On under Make your device passwordless. Enabling passwordless sign in will switch all Microsoft accounts on your Windows 10 device to modern authentication with Windows Hello Face, Fingerprint, or PIN.Windows Hello PIN sign-in support is added to Safe mode.Windows Hello for Business now has Hybrid Azure Active Directory support and phone number sign-in (MSA). FIDO2 security key support is expanded to Azure Active Directory hybrid environments, enabling enterprises with hybrid environments to take advantage of passwordless authentication.

Windows Defender System Guard
In this release, Windows Defender System Guard enables an even higher level of System Management Mode (SMM) Firmware Protection that goes beyond checking the OS memory and secrets to additional resources like registers and IO.

With this improvement, the OS can detect a higher level of SMM compliance, enabling devices to be even more hardened against SMM exploits and vulnerabilities. This feature is forward-looking and currently requires new hardware available soon.

Deployment

Windows Setup
Improvements in Windows Setup with this release include:

Reduced offline time during feature updatesImproved controls for reserved storageImproved controls and diagnosticsNew recovery options
SetupDiag
In Windows 10, version 2004, SetupDiag is now automatically installed.

SetupDiag is a command-line tool that can help diagnose why a Windows 10 update failed. SetupDiag works by searching Windows Setup log files. When searching log files, SetupDiag uses a set of rules to match known issues.

During the upgrade process, Windows Setup will extract all its sources files to the %SystemDrive%.~bt\Sources directory. With Windows 10, version 2004 and later, Windows Setup now also installs SetupDiag.exe to this directory. If there is an issue with the upgrade, SetupDiag is automatically run to determine the cause of the failure. If the upgrade process proceeds normally, this directory is moved under %SystemDrive%\Windows.Old for cleanup.

Windows Autopilot
With this release, you can configure Windows Autopilot user-driven Hybrid Azure Active Directory join with VPN support. This support is also backported to Windows 10, version 1909 and 1903.

If you configure the language settings in the Autopilot profile and the device is connected to Ethernet, all scenarios will now skip the language, locale, and keyboard pages. In previous versions, this was only supported with self-deploying profiles.

Servicing

Delivery Optimization
Windows PowerShell cmdlets have been improved:
Get-DeliveryOptimizationStatus has added the -PeerInfo option for a real-time peak behind the scenes on peer-to-peer activity (for example the peer IP Address, bytes received / sent).Get-DeliveryOptimizationLogAnalysis is a new cmdlet that provides a summary of the activity in your DO log (# of downloads, downloads from peers, overall peer efficiency). Use the -ListConnections option to for in-depth look at peer-to-peer connections.Enable-DeliveryOptimizationVerboseLogs is a new cmdlet that enables a greater level of logging detail to assist in troubleshooting.

Additional improvements:
Enterprise network throttling is enhanced to optimize foreground vs. background throttling.Automatic cloud-based congestion detection is available for PCs with cloud service support.
The following Delivery Optimization policies are removed in this release:
Percentage of Maximum Download Bandwidth (DOPercentageMaxDownloadBandwidth)Max Upload Bandwidth (DOMaxUploadBandwidth)Absolute max throttle (DOMaxDownloadBandwidth)

Windows Update for Business
Windows Update for Business enhancements in this release include:
Intune console updates: target version is now available allowing you to specify which version of Windows 10 you want devices to move to. Additionally, this capability enables you to keep devices on their current version until they reach end of service. Check it out in Intune, also available as a Group Policy and Configuration Service Provider (CSP) policy.Validation improvements: To ensure devices and end users stay productive and protected, Microsoft uses safeguard holds to block devices from updating when there are known issues that would impact that device. Also, to better enable IT administrators to validate on the latest release, we have created a new policy that enables admins to opt devices out of the built-in safeguard holds.

Virtualization

Windows Sandbox
Windows Sandbox is an isolated desktop environment where you can install software without the fear of lasting impact to your device. This feature was released with Windows 10, version 1903. Windows 10, version 2004 includes bug fixes and enables even more control over configuration.

Windows Sandbox configuration includes:
MappedFolders now supports a destination folder. Previously no destination could be specified, it was always mapped to the Sandbox desktop.AudioInput/VideoInput settings now enable you to share their host microphone or webcam with the Sandbox.ProtectedClient is a new security setting that runs the connection to the Sandbox with extra security settings enabled. This is disabled by default due to issues with copy & paste.PrinterRedirection: You can now enable and disable host printer sharing with the Sandbox.ClipboardRedirection: You can now enable and disable host clipboard sharing with the Sandbox.MemoryInMB adds the ability to specify the maximum memory usage of the Sandbox.
Windows Media Player is also added back to the Sandbox image in this release.

Windows Sandbox also has improved accessibility in this release, including:
Microphone support is available.Added functionality to configure the audio input device via the Windows Sandbox config file.A Shift + Alt + PrintScreen key sequence that activates the ease of access dialog for enabling high contrast mode.A ctrl + alt + break key sequence that allows entering/exiting fullscreen mode.
Windows Subsystem for Linux (WSL)
With this release, memory that is no longer in use in a Linux VM will be freed back to Windows. Previously, a WSL VM’s memory could grow, but would not shrink when no longer needed.

WSL2 support is has been added for ARM64 devices if your device supports virtualization.

Windows Virtual Desktop (WVD)
Windows 10 is an integral part of WVD, and several enhancements are available in the Spring 2020 update. Check out Windows Virtual Desktop documentation for the latest and greatest information, as well as the WVD Virtual Event from March.

Application settings
This release enables explicit control over when Windows automatically restarts apps that were open when you restart your PC.

Windows Shell
Several enhancements to the Windows 10 user interface are implemented in this release:

Cortana
Cortana has been updated and enhanced in Windows 10, version 2004:
Productivity: chat-based UI gives you the ability to interact with Cortana using typed or spoken natural language queries to easily get information across Microsoft 365 and stay on track. Productivity focused capabilities such as finding people profiles, checking schedules, joining meetings, and adding to lists in Microsoft To Do are currently available to English speakers in the US. In the coming months, with regular app updates through the Microsoft Store, we’ll enhance this experience to support wake word invocation and enable listening when you say "Cortana," offer more productivity capabilities such as surfacing relevant emails and documents to help you prepare for meetings, and expand supported capabilities for international users.Security: tightened access to Cortana so that you must be securely logged in with your work or school account or your Microsoft account before using Cortana. Because of this tightened access, some consumer skills including music, connected home, and third-party skills will no longer be available. Additionally, users get cloud-based assistance services that meet Office 365’s enterprise-level privacy, security, and compliance promises as set out in the Online Services Terms.Move the Cortana window: drag the Cortana window to a more convenient location on your desktop.

Virtual Desktops
You can now rename your virtual desktops, instead of getting stuck with the system-issued names like Desktop 1.

Bluetooth pairing
Pairing Bluetooth devices with your computer will occur through notifications, so you won’t need to go to the Settings app to finish pairing. Other improvements include faster pairing and device name display.

Reset this PC
The ‘reset this PC’ recovery function now includes a cloud download option.

Task Manager
The following items are added to Task Manager in this release:
GPU Temperature is available on the Performance tab for devices with a dedicated GPU card.Disk type is now listed for each disk on the Performance tab.
Graphics & display

DirectX
New DirectX 12 features are available in this release.

2-in-1 PCs
A new tablet experience for two-in-one convertible PCs is available. The screen will be optimized for touch when you detach your two-in-one’s keyboard, but you’ll still keep the familiar look of your desktop without interruption.

Specialized displays
With this update, devices running Windows 10 Enterprise or Windows 10 Pro for Workstations with multiple displays can be configured to prevent Windows from using a display, making it available for a specialized purpose.

Examples include:
Fixed-function arcade & gaming such as cockpit, driving, flight, and military simulatorsMedical imaging devices with custom panels, such as grayscale X-ray displaysVideo walls like those displayed in Microsoft StoreDedicated video monitoringMonitor panel testing and validationIndependent Hardware Vendor (IHV) driver testing and validation
To prevent Windows from using a display, choose Settings > Display and click Advanced display settings. Select a display to view or change, and then set the Remove display from desktop setting to On. The display will now be available for a specialized use.

Desktop Analytics
Desktop Analytics is a cloud-connected service, integrated with Configuration Manager that provides data-driven insights to the management of Windows endpoints in your organization. Desktop Analytics requires a Windows E3 or E5 license, or a Microsoft 365 E3 or E5 license.