Merge pull request #6238 from MicrosoftDocs/release-win365-2111

Merge Win365 2111 release branch to master

Author: laurabren

windows-365/enterprise/TOC.yml

@@ -21,6 +21,8 @@ items:
     href: on-premises-network-connections.md
   - name: Device images
     href: device-images.md
+  - name: Lifecycle and operating system end of support
+    href: end-of-support.md
   - name: Device configuration with MEM
     href: device-configuration.md
   - name: Privacy and personal data

windows-365/enterprise/end-of-support.md

@@ -0,0 +1,60 @@
+---
+# required metadata
+title: End of support for Windows operating system on Cloud PCs
+titleSuffix:
+description: Learn about lifecycle policies and end of support for operating systems on Cloud PCs and device images.
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 11/30/2021
+ms.topic: how-to
+ms.service: cloudpc
+ms.subservice:
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: naramkri
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure; get-started
+ms.collection: M365-identity-device-management
+---
+
+# Lifecycle policies and end of support for Cloud PC operating systems
+
+Lifecycle policies govern operating system (OS) servicing and support (including end of support). The lifecycle is the time period during which Microsoft supports the OS and releases monthly security updates for it. For more information about lifecycles, see [Lifecycle FAQ - General](/lifecycle/faq/general-lifecycle) and [Lifecycle FAQ - Windows](/lifecycle/faq/windows).
+
+A Windows 365 Cloud PC runs on the Windows OS and follows the [Microsoft Lifecycle Policy](/lifecycle). After the OS on a Cloud PC reaches the end of support, it stops receiving:
+
+- Security updates
+- Non-security updates
+- Assisted support
+
+## Image status
+
+Windows 365 tracks end of support information in Microsoft Endpoint Manager on the **Provisioning policies** page under **Image status**. This column lets you know if the OS on the image used by each provisioning policy is supported or not.
+
+| Image status | Gallery image | Custom image |
+| --- |--- | --- |
+| Supported | Cloud PCs created using this policy have a Windows OS that is supported by Microsoft and can receive updates. | Same as gallery image. |
+| Warning | OS Support expired less than six months ago. Cloud PCs created using this policy have an OS that isn’t supported. Such Cloud PCs are vulnerable and not receiving security updates. | Cloud PCs created using this policy have an OS that isn’t supported. Such Cloud PCs are vulnerable and not receiving security updates.  |
+| Unsupported | Cloud PCs created using this policy have a Windows OS that hasn’t been supported for over six months. This policy can no longer be assigned to users. To resolve this issue, update the OS image in the provisioning policy to an image with a supported OS. Existing Cloud PCs previously created with this policy:<br>- Are vulnerable and not receiving security updates.<br>- Can’t be provisioned or reprovisioned. Attempts to provision a Cloud PC from this policy will fail with a **Windows Image out of Support** message. | Not applicable |
+
+These status values for custom images also appear under the **OS support status** column on the **Device images** page.
+
+## Provisioning policies
+
+Starting on the end of support date, gallery images that use the expired OS won’t be selectable for newly created provisioning policies. The images also won’t be available for use when editing existing provisioning policies.
+
+<!-- ########################## -->
+## Next steps
+
+To change the device image for a provisioning policy, see [Edit provisioning policies](edit-provisioning-policy.md).

windows-365/enterprise/whats-new.md

@@ -7,7 +7,7 @@ keywords:
 author: ErikjeMS  
 ms.author: erikje
 manager: dougeby
-ms.date: 11/03/2021
+ms.date: 11/30/2021
 ms.topic: reference
 ms.service: cloudpc
 ms.subservice:
@@ -47,6 +47,29 @@ Learn what new features are available in Windows 365 Enterprise.
 ### Scripts
 -->
 
+<!-- ########################## -->
+## Week of November 29, 2021 (Service release 2111)
+
+<!-- vvvvvvvvvvvvvvvvvvvvvv -->
+### Device management
+
+#### Operating system end of support status for Cloud PCs<!--36852572 -->
+
+The **Provisioning policies** page has a new column: **Image status**. It tells you if the device image for each provisioning policy uses an operating system (OS) that is supported by Microsoft Windows security and other updates. For more information, see [Lifecycle policies and end of support for Cloud PC OS](end-of-support.md).
+
+<!-- vvvvvvvvvvvvvvvvvvvvvv -->
+### Device security
+
+#### Two new security baseline settings for Windows 11 Cloud PCs<!--36989243 -->
+
+Windows 365 Enterprise now supports the following Windows 11 security baseline settings:
+
+- **Tamper Protection**: Helps protect Cloud PCs from bad actors bypassing security features like anti-virus protection.
+
+- **Script Scanning**: Helps identify possible threats by intercepting scripts and scanning them before they’re run.
+
+For more information about the security baseline updates for Windows 11, see [Windows 11 Security baseline](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-security-baseline/ba-p/2810772). For more information about setting security baselines for Cloud PCs, see [Deploy security baselines](deploy-security-baselines.md).
+
 <!-- ########################## -->
 ## Week of November 1, 2021 (Service release 2110)