Merge pull request #8522 from MicrosoftDocs/main

Publish main to live on 9/23 @ 10:30 am

Author: v-stsavell

memdocs/configmgr/core/plan-design/changes/deprecated/removed-and-deprecated-cmfeatures.md

@@ -84,6 +84,7 @@ The following features are no longer supported. In some cases, they're no longer
 |Task sequences: <br /> - OSDPreserveDriveLetter <br /><br /> During an operating system deployment, by default, Windows Setup now determines the best drive letter to use (typically C:). If you want to specify a different drive to use, you can change the location in the Apply Operating System task sequence step. Go to the **Select the location where you want to apply this operating system** setting. Select **Specific logical drive letter** and choose the drive that you want to use. |June 20, 2016 |Version 1606 |
 |[Network Access Protection](#network-access-protection) (NAP) - as found in System Center 2012 Configuration Manager|July 10, 2015|Version 1511|
 |[Out of Band Management](#out-of-band-management) - as found in System Center 2012 Configuration Manager|October 16, 2015|Version 1511|
+|[System Center Configuration Manager Management Pack  - for System Center Operations Manager is not available for download |October 16, 2015|Version 1511|
 
 ### WINS
 

memdocs/intune/configuration/settings-catalog-printer-provisioning.md

@@ -7,7 +7,7 @@ keywords:
 author: MandiOhlinger
 ms.author: mandia
 manager: dougeby
-ms.date: 07/21/2022
+ms.date: 09/22/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -38,7 +38,7 @@ Using the settings catalog in Intune, you can create a printer policy, and deplo
 This feature applies to:
 
 - Windows 11
-- Windows 10 and later
+- Windows 10 21H2 with [July 2022 update](https://support.microsoft.com/topic/july-12-2022-kb5015807-os-builds-19042-1826-19043-1826-and-19044-1826-8c8ea8fe-ec83-467d-86fb-a2f48a85eb41) and later
 
 This article shows you how to create a Universal Print policy in Microsoft Intune. To learn more about Universal Print and onboarding, go to [What is Universal Print](/universal-print/fundamentals/universal-print-whatis) and [Set up Universal Print](/universal-print/fundamentals/universal-print-getting-started).
 

memdocs/intune/fundamentals/deployment-guide-enrollment-android.md

@@ -294,7 +294,7 @@ There are some situations when you must use Device Administrator enrollment:
 - Android Enterprise requires access to Google services. Google services may not be available because of geography, or because of the device manufacturer. For example:
 
   - There are places where Google services aren’t available, like China. In this situation, use Android device administrator enrollment.  
-  - Some devices are based on Android, but don't have access to Google Services, such as Amazon Fire tablets. In this situation, use Android device administrator enrollment.
+  - Some devices are based on Android, but don't have access to Google Services, such as Microsoft Teams Android devices and Amazon Fire tablets. In this situation, use Android device administrator enrollment.
 
 - Android OS versions older than 5.0 must use Android device administrator enrollment. Android Enterprise enrollment isn't an option.
 

memdocs/intune/protect/app-based-conditional-access-intune.md

@@ -67,7 +67,7 @@ In this example, the admin has applied app protection policies to the Outlook ap
 
 1. The user tries to authenticate to Azure AD from the Outlook app.
 
-2. The user gets redirected to the app store to install a broker app when trying to authenticate for the first time. The broker app can be the Microsoft Authenticator for iOS, or either the Microsoft Authenticator or Microsoft Company portal for Android devices.
+2. The user gets redirected to the app store to install a broker app when trying to authenticate for the first time. The broker app can be the Microsoft Authenticator for iOS, or Microsoft Company portal for Android devices.
 
    If users try to use a native e-mail app, they'll be redirected to the app store to then install the Outlook app.
 

memdocs/intune/protect/includes/security-config-mgt-prerequisites.md

@@ -118,7 +118,8 @@ To support Microsoft Defender for Endpoint security configuration management thr
 
 1. Sign in to [Microsoft 365 Defender portal](https://security.microsoft.com/) and go to **Settings** > **Endpoints** > **Configuration Management** > **Enforcement Scope** and enable the platforms for security settings management:
    :::image type="content" source="../media/mde-security-integration/enable-mde-settings-management-defender.png" alt-text="Enable Microsoft Defender for Endpoint settings management in the Microsoft 365 Defender portal.":::
-1. Configure Pilot Mode and Configuration Manager authority settings to fit your organization needs:
+1. Configure Pilot Mode and Configuration Manager authority settings to fit your organization's needs.
+1. Uncheck both **Windows Client devices** and **Windows Server devices** to be able to use Pilot Mode using tagging:  
    :::image type="content" source="../media/mde-security-integration/pilot-CMAuthority-mde-settings-management-defender.png" alt-text="Configure Pilot mode for Endpoint settings management in the Microsoft 365 Defender portal.":::
    > [!TIP]
    > Use pilot mode and the proper device tags to test and validate your rollout on a small number of devices. Without using pilot mode, any device that falls into the scope configured will automatically be enrolled.

memdocs/intune/protect/media/mde-security-integration/pilot-CMAuthority-mde-settings-management-defender.png

@@ -405,15 +405,15 @@ To use the readiness tool:
 
    You can run the script from any Linux server that is on the same network as the server you plan to install, allowing network admins to run it and troubleshoot network issues independently.
 
-2. To validate your network configuration, run the script with the following commands to first set the execute permissions on the script and then to validate the Tunnel can connect to the correct endpoints:
+2. To validate your network and Linux configuration, run the script with the following commands to set the execute permissions on the script, to validate the Tunnel can connect to the correct endpoints, and then to check for the presence of utilities that Tunnel uses:
 
    - `sudo chmod +x ./mst-readiness`
-   - `sudo ./mst-readiness network`
 
-   The second command runs the following actions and reports on success or error for both:
+   - `sudo ./mst-readiness network` - This command runs the following actions and reports on success or error for both:
+     - Tries to connect to each Microsoft endpoint the tunnel will use.
+     - Checks that the required ports are open in your firewall.
 
-   - Tries to connect to each Microsoft endpoint the tunnel will use.
-   - Checks that the required ports are open in your firewall.
+   - `sudo ./mst-readiness utils` - This command validates that utilities that are used by Tunnel like Docker or Podman and ip_tables are available.
 
 3. To validate that the account you’ll use to install Microsoft Tunnel has the required roles and permissions to complete enrollment, run the script with the following command line: `./mst-readiness account`
 

memdocs/intune/protect/microsoft-tunnel-prerequisites.md

@@ -237,6 +237,11 @@ items:
         items:
         - name: Symantec and Intune integration
           href: skycure-mtd-connector-integration.md
+      - name: Set up Trend Micro Mobile Security as a Service
+        href: trend-micro-mobile-threat-defense-connector.md
+        items:
+        - name: Trend Micro Mobile Security as a Service and Intune integration
+          href: trend-micro-mtd-connector-integration.md 
       - name: Set up Wandera
         href: wandera-mtd-connector.md
         items:

memdocs/intune/protect/toc.yml

@@ -87,7 +87,7 @@ You'll be able to set up system alerts and automated emails to be notified when
 ### Cloud PC utilization report<!--40636545-->
 A new report will be available for Cloud PCs. The **Cloud PC utilization** report will show how many hours users have been connected to their Cloud PCs. Information for individual Cloud PCs and aggregated data will be shown.
 
-### Cloud PC wit connection quality issues report<!--40636545-->
+### Cloud PC with connection quality issues report<!--40636545-->
 A new report will be available for Cloud PCs. The **Cloud PCs with connection quality issues** report will show information for round-trip time, available bandwidth, and remoting sign-in time. Information for individual Cloud PCs and aggregated data will be shown.
 
 ### Review Cloud PC connectivity health checks and errors in Microsoft Endpoint Manager admin center<!--38469622 -->