Merge pull request #6319 from MicrosoftDocs/main

12/7/2021 PM Publish

Author: Taojunshen

memdocs/intune/fundamentals/in-development.md

@@ -192,10 +192,7 @@ Filters allows you to include or exclude devices in policy or app assignments ba
 New assignment filters in Enrollment Restrictions will let you include or exclude restrictions based on device type. For example, you can allow personal devices, while blocking Windows 10 Home devices, by applying the operatingSystemSKU assignment filter. These filters will be released for public preview with a new configuration experience for enrollment restrictions and supported for Windows and Apple devices, with Android support coming at a later date. For more information about how to use filters, see [Create a filter](../fundamentals/filters.md).   
 
 <!-- vvvvvvvvvvvvvvvvvvvvvv -->
-## Monitor and troubleshoot
-
-### Adding event viewer for Windows 10 diagnostics<!-- 10741116 -->
-We're adding a new event viewer to Windows 10 device diagnostics called Microsoft-Windows-Windows Firewall with Advanced Security/Firewall. The event viewer will assist you in troubleshooting issues with the firewall.
+## Monitor and troubleshoot  
 
 ### Account protection policy changes in Endpoint security<!--  7492116   -->
 

memdocs/intune/fundamentals/whats-new.md

@@ -7,7 +7,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 12/01/2021
+ms.date: 12/07/2021
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: fundamentals
@@ -60,7 +60,15 @@ You can use RSS to be notified when this page is updated. For more information,
 ### Scripts
 -->
 
-## Week of November 22, 2021
+
+## Week of December 6, 2021  
+
+### Monitor and troubleshoot  
+
+#### New event viewer for Windows 10 diagnostics <!-- 10741116 -->
+We've added a new event viewer to Windows device diagnostics called *Microsoft-Windows-Windows Firewall with Advanced Security/Firewall*. The event viewer can assist you in troubleshooting issues with the firewall. For more information about Windows device diagnostics, see [Collect diagnostics from a Windows device](../remote-actions/collect-diagnostics.md).  
+
+## Week of November 22, 2021  
 
 <!-- vvvvvvvvvvvvvvvvvvvvvv -->
 

memdocs/intune/protect/certificate-connector-install.md

@@ -101,7 +101,7 @@ Use the following procedure to both configure a new connector and modify a previ
    - **SYSTEM**
    - **Domain user account** – Use any domain user account that is an administrator on the Windows Server.
 
-4. On the *Proxy* page, add details for your proxy server if you require a proxy for internet access. For example, *http://proxy.contoso.com*.
+4. On the *Proxy* page, add details for your proxy server if you require a proxy for internet access. For example, `http://proxy.contoso.com`.
 
 5. On the *Prerequisites* page, the wizard runs several checks on the server before the configuration can begin. Review and resolve any errors or warnings before you continue.
 

memdocs/intune/protect/device-compliance-partners.md

@@ -139,7 +139,7 @@ Sign in to the Azure portal and go to **Azure AD** > **Devices** > [**All device
 
 Use additional documentation from your third-party partner to create compliance policies for devices.
 
-- [Blackberry UEM](https://docs.blackberry.com/en/endpoint-management/blackberry-uem/12_15/installation-configuration/cloud-configuration/get15233768326701/Configure-Azure-AD-Conditional-Access)
+- [Blackberry UEM](https://docs.blackberry.com/en/id-comm-collab/blackberry-workspaces/blackberry-workspaces-plug-in-for-blackberry-uem/4_9/compatibility-matrix/imm1460398825659/ioz1460399956336)
 - [Citrix Endpoint Management - Integrate with Azure AD Conditional Access](https://docs.citrix.com/en-us/citrix-endpoint-management/prepare-to-enroll-devices-and-deliver-resources.html#integrate-with-azure-ad-conditional-access)
 - [MobileIron Device Compliance Cloud](https://forums.ivanti.com/s/article/MobileIron-Cloud-Azure-Device-Compliance-for-iOS-and-Android)
 - [VMware Workspace ONE UEM](https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/Directory_Service_Integration/GUID-800FB831-AA66-4094-8F5A-FA5899A3C70C.html)

memdocs/intune/protect/windows-10-feature-updates.md

@@ -7,7 +7,7 @@ keywords:
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 10/04/2021
+ms.date: 12/07/2021
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -102,7 +102,17 @@ The following are prerequisites for Intune's Feature updates for Windows 10 and
 
 - If you co-manage devices with Configuration Manager, feature updates policies might not immediately take effect on devices when you newly configure the [Windows Update policies workload](../../configmgr/comanage/workloads.md#windows-update-policies) to Intune. This delay is temporary but can initially result in devices updating to a later feature update version than is configured in the policy.
 
-  To prevent this initial delay from impacting your co-managed devices, configure a [Feature updates for Windows 10 and later](../protect/windows-10-feature-updates.md) policy and target the policy to your devices before you configure them for co-management or you shift the Windows Update workload to Intune. You can validate whether a device is enrolled for the feature update profile by checking the [Windows feature update report](../protect/windows-update-compliance-reports.md#use-the-windows-10-and-later-feature-updates-organizational-report) under the Reporting node in the Microsoft Endpoint Management admin console.
+  To prevent this initial delay from impacting your co-managed devices:
+  
+  1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
+  2. Go to **Devices** > **Windows** > **Feature updates for Windows 10 and later** > **Create profile**.
+  3. For **Deployment settings**, enter a meaningful name and a description for the policy.  Then, Specify the feature update you want devices to be running.  
+  4. Complete the policy configuration, including assigning the policy to devices. The policy deploys to devices, though any device that already has the version you’ve selected, or a newer version, won’t be offered the update.
+
+     Monitor the report for the policy. To do so, go to **Reports** > **Windows Updates** > **Reports** Tab > **Feature Updates report**. Select the policy you created and then generate the report.
+
+  5. Devices that have a state of *OfferReady* or later, are enrolled for feature updates and protected from updating to anything newer than the update you specified in step 3. See, [Use the Windows 10 and later feature updates (Organizational) report](../protect/windows-update-compliance-reports.md#use-the-windows-10-and-later-feature-updates-organizational-report).
+  6. With devices enrolled for updates and protected, you can safely change the *Windows Update policies* workload from Configuration Manager to Intune. See, [Switch workloads to Intune](/configmgr/comanage/how-to-switch-workloads) in the co-management documentation.
 
 - When the device checks in to the Windows Update service, the device's group membership is validated against the security groups assigned to the feature updates policy settings for any feature update holds.
 

memdocs/intune/remote-actions/collect-diagnostics.md

@@ -8,7 +8,7 @@ keywords:
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 09/27/2021
+ms.date: 12/07/2021
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: remote-actions
@@ -67,13 +67,13 @@ Registry Keys:
 
 1. HKLM\Software\Microsoft\IntuneManagementExtension
 2. HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot
-3. HKLM\SOFTWARE\Microsoft\Windows Endpoint
+3. HKLM\SOFTWARE\Microsoft\Windows Advanced Threat Protection
 4. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI
 5. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
 6. HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall
 7. HKLM\Software\Policies
 8. HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL
-9. HKLM\SOFTWARE\Policies\Microsoft\Windows Endpoint
+9. HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection
 10. HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall
 11. HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL
 
@@ -107,24 +107,25 @@ Event Viewers:
 34. Microsoft-Windows-HelloForBusiness/Operational
 35. Microsoft-Windows-SENSE/Operational
 36. Microsoft-Windows-SenseIR/Operational
-37. Setup
-38. System
+37. Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
+38. Setup
+39. System
 
 Files:
 
-39. %ProgramData%\Microsoft\DiagnosticLogCSP\Collectors\*.etl
-40. %ProgramData%\Microsoft\IntuneManagementExtension\Logs\*.*
-41. %ProgramData%\Microsoft\Windows Defender\Support\MpSupportFiles.cab
-42. %ProgramData%\Microsoft\Windows\WlanReport\wlan-report-latest.html
-43. %temp%\MDMDiagnostics\battery-report.html
-44. %temp%\MDMDiagnostics\energy-report.html
-45. %temp%\MDMDiagnostics\mdmlogs-<Date/Time>.cab
-46. %temp%\MDMDiagnostics\msinfo32.log
-47. %windir%\ccm\logs\*.log
-48. %windir%\ccmsetup\logs\*.log
-49. %windir%\logs\CBS\cbs.log
-50. %windir%\logs\measuredboot\*.*
-51. %windir%\Logs\WindowsUpdate\*.etl
+40. %ProgramData%\Microsoft\DiagnosticLogCSP\Collectors\*.etl
+41. %ProgramData%\Microsoft\IntuneManagementExtension\Logs\*.*
+42. %ProgramData%\Microsoft\Windows Defender\Support\MpSupportFiles.cab
+43. %ProgramData%\Microsoft\Windows\WlanReport\wlan-report-latest.html
+44. %temp%\MDMDiagnostics\battery-report.html
+45. %temp%\MDMDiagnostics\energy-report.html
+46. %temp%\MDMDiagnostics\mdmlogs-<Date/Time>.cab
+47. %temp%\MDMDiagnostics\msinfo32.log
+48. %windir%\ccm\logs\*.log
+49. %windir%\ccmsetup\logs\*.log
+50. %windir%\logs\CBS\cbs.log
+51. %windir%\logs\measuredboot\*.*
+52. %windir%\Logs\WindowsUpdate\*.etl
 
 ## Disable device diagnostics
 

memdocs/intune/remote-actions/remote-help.md

@@ -7,7 +7,7 @@ keywords:
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 12/03/2021
+ms.date: 12/07/2021
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: remote-actions
@@ -181,7 +181,7 @@ To configure your tenant to support remote help, review and complete the followi
 
 2. On the **Settings** tab:
    1. Set **Enable remote help** to **Enabled** to allow use of remote help.  By default, this setting is *Enabled*.
-   2. Set **Allow remote help to unenrolled devices** to **Enabled** if you want to allow this option. By default, this setting *Not allowed*.
+   2. Set **Allow remote help to unenrolled devices** to **Enabled** if you want to allow this option. By default, this setting *Disabled*.
 
 3. Select **Save**.
 
@@ -232,7 +232,7 @@ To request help, you must reach out to your support staff to request assistance.
 
 As a sharer, when you’ve requested help and both you and the helper are ready to start:
 
-1. Start the remote help app on the device and sign-in to authenticate to your organization. The device might not need to be enrolled to Intune if your administrator allows you to get help on unenrolled devices.
+1. Start the remote help app on the device and sign in to authenticate to your organization. The device might not need to be enrolled to Intune if your administrator allows you to get help on unenrolled devices.
 
 2. After signing into the app, get the security code from the individual assisting you and enter that code below *Get Help*, and then select **Submit**.