Merge pull request #8128 from MicrosoftDocs/main

v-stsavell · web-flow · commit 1f9d4a91dfbe · 2022-07-28T12:34:06.000-05:00
Publish main to live on 7/28 @ 10:30 am
diff --git a/memdocs/configmgr/core/plan-design/changes/deprecated/removed-and-deprecated-cmfeatures.md b/memdocs/configmgr/core/plan-design/changes/deprecated/removed-and-deprecated-cmfeatures.md
@@ -63,7 +63,7 @@ The following features are no longer supported. In some cases, they're no longer
 | Third-party add-ons that use Microsoft .NET Framework version 4.6.1 or earlier, and rely on Configuration Manager libraries. Such add-ons need to use .NET 4.6.2 or later. For more information, see [External dependencies require .NET 4.6.2](../../../get-started/2021/technical-preview-2109.md#bkmk_dotnetsdk)<!--10529267-->. | September 2021 | Version 2111 |
 | [Log Analytics connector for Azure Monitor.](/azure/azure-monitor/platform/collect-sccm?context=%2fmem%2fconfigmgr%2fcore%2fcontext%2fcore-context)<!-- 8269855,9649296 --> This feature is called the *OMS Connector* in the Azure Services node. | November 2020 | Version 2107 |
 | Microsoft Edge legacy [browser profiles](../../../../compliance/deploy-use/browser-profiles.md).<!-- 9388900 --> For more information, see [New Microsoft Edge to replace Microsoft Edge Legacy with April’s Windows 10 Update Tuesday release](https://techcommunity.microsoft.com/t5/microsoft-365-blog/new-microsoft-edge-to-replace-microsoft-edge-legacy-with-april-s/ba-p/2114224) | March 2021 | April 2021 |
-| The [collection evaluation viewer](../../../support/ceviewer.md)<!-- 8509484 -->, which was integrated in version 2010. The standalone tool is still available with the [System Center 2012 R2 Configuration Manager Toolkit](https://www.microsoft.com/download/details.aspx?id=50012).| November 2020 | Version 2103 |
+| The [collection evaluation viewer](../../../support/ceviewer.md)<!-- 8509484 -->, which was integrated in version 2010. | November 2020 | Version 2103 |
 | Desktop Analytics tile and page for **Security Updates**<!-- 8099536 --> | December 2020 | March 2021 |
 | Desktop Analytics option to **View recent data** for device enrollment and security updates.<!-- 7080949 --> For more information, see [Data latency](../../../../desktop-analytics/troubleshooting.md#data-latency).|May 2020|July 2020|
 | Windows Analytics and Upgrade Readiness integration. For more information, see [KB 4521815: Windows Analytics retirement on January 31, 2020](https://support.microsoft.com/help/4521815/windows-analytics-retirement). | October 14, 2019 | January 31, 2020 |
@@ -74,7 +74,7 @@ The following features are no longer supported. In some cases, they're no longer
 |System Center Endpoint Protection for Mac and Linux<br>For more information, see [End of support blog post](https://techcommunity.microsoft.com/t5/configuration-manager-blog/end-of-support-for-scep-for-mac-and-scep-for-linux-on-december/ba-p/286257).|October 2018|December 31, 2018|
 |On-premises conditional access<br>For more information, see [What happened to hybrid MDM](../../../../mdm/understand/what-happened-to-hybrid.md).|January 30, 2019|September 1, 2019|
 |Hybrid mobile device management (MDM)<br>For more information, see [What happened to hybrid MDM](../../../../mdm/understand/what-happened-to-hybrid.md).<br><br>Starting with the 1902 Intune service release, expected at the end of February 2019, new customers can't create a new hybrid connection.<!--Intune feature 2683117-->|August 14, 2018|September 1, 2019|
-|Security Content Automation Protocol (SCAP) extensions. <!--3607889--><br>The previous certified version is still available on the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=48741).|September 2018|Version 1810|
+|Security Content Automation Protocol (SCAP) extensions. <!--3607889--><br>|September 2018|Version 1810|
 |The **Silverlight user experience** for the application catalog website point is no longer supported. Users should use the new Software Center. For more information, see [Configure Software Center](../../../../apps/plan-design/plan-for-software-center.md#configure-software-center).<!--1358309-->|August 11, 2017| Version 1806|
 |The previous version of Software Center.<br><br>For more information about the new Software Center, see [Plan for and configure application management](../../../../apps/plan-design/plan-for-software-center.md).|December 13, 2016|Version 1802|
 |Management of Virtual Hard Disks (VHDs) with Configuration Manager. <br><br>This deprecation includes removal of options to create a new VHD or manage a VHD using a task sequence, and the removal of the Virtual Hard Disks node from the Configuration Manager console. <br><br>Existing VHDs are not deleted, but are no longer accessible from within the Configuration Manager console. |January 6, 2017 |Version 1710|
diff --git a/memdocs/configmgr/core/support/tools.md b/memdocs/configmgr/core/support/tools.md
@@ -23,7 +23,7 @@ These tools are included in the `CD.Latest\SMSSETUP\Tools` folder on the site se
 All Windows operating systems listed as supported clients in [Supported operating systems for clients and devices](../plan-design/configs/supported-operating-systems-for-clients-and-devices.md) are supported for use with these tools.
 
 > [!NOTE]
-> The [System Center 2012 R2 Configuration Manager Toolkit](https://www.microsoft.com/download/details.aspx?id=50012) is still available from the Microsoft Download Center. For supported versions of Configuration Manager current branch, use the versions of the tools in the CD.Latest folder on the site server. Some tools were formerly in the toolkit but not included current branch. These legacy tools are no longer supported.
+> For supported versions of Configuration Manager current branch, use the versions of the tools in the CD.Latest folder on the site server. Some tools were formerly in the toolkit but not included current branch. These legacy tools are no longer supported.
 
 ## Client tools
 
diff --git a/memdocs/configmgr/develop/core/understand/getting-started-with-configuration-manager-programming.md b/memdocs/configmgr/develop/core/understand/getting-started-with-configuration-manager-programming.md
@@ -134,9 +134,7 @@ CMTrace can be found on the Configuration Manager site server, under the "\<Conf
 
 **Client Spy:** A tool that helps you troubleshoot issues related to software distribution, inventory, and software metering on System Center 2012 Configuration Manager clients.  
 
-**Policy Spy:** A policy viewer that helps you review and troubleshoot the policy system on System Center 2012 Configuration Manager clients.  
-
-Client Spy and Policy Spy are both tools contained in the [System Center 2012 Configuration Manager Toolkit](https://www.microsoft.com/download/details.aspx?id=50012)  
+**Policy Spy:** A policy viewer that helps you review and troubleshoot the policy system on System Center 2012 Configuration Manager clients.    
 
 ## Basic Configuration Manager program example  
 
diff --git a/memdocs/intune/fundamentals/in-development.md b/memdocs/intune/fundamentals/in-development.md
@@ -8,7 +8,7 @@ keywords:
 author: dougeby 
 ms.author: dougeby
 manager: dougeby
-ms.date: 07/05/2022
+ms.date: 07/28/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: fundamentals
@@ -82,55 +82,12 @@ These new app types work in a similar way to the existing **web link** applicati
 
 ## Device management
 
-Intune moving to support iOS/iPadOS 16 and higher later this year<!-- 14778947 -->
+### Intune moving to support iOS/iPadOS 16 and higher later this year<!-- 14778947 -->
 Later this year, Apple is expected to release iOS/iPadOS 16. Due to this expected release, Microsoft Intune and the Intune Company Portal will require iOS/iPadOS 14 and higher shortly after the release of iOS/iPad 16. For related information, see [Supported operating systems and browsers in Intune](../fundamentals/supported-devices-browsers.md).
 
-Intune moving to support macOS 11.6 and higher later this year<!-- 14766663 -->
+### Intune moving to support macOS 11.6 and higher later this year<!-- 14766663 -->
 With Apple's expected release of macOS 13 Ventura later this year, Microsoft Intune, the Company Portal app, and the Intune MDM agent will be moving to support macOS 11.6 (Big Sur) and later. For related information, see [Supported operating systems and browsers in Intune](../fundamentals/supported-devices-browsers.md).
 
-### Initiate compliance checks for your AOSP devices from the Microsoft Intune app<!--12645739 -->
-You'll be able to initiate a compliance check for your AOSP devices from the Microsoft Intune app. Go to **Device details**. This feature will be available on devices that are enrolled in Microsoft Intune app as user-associated (Android) AOSP devices.
-
-### New event viewers to assist in debugging WMI issues<!-- 14712854 -->
-Intune’s remote action to [collect diagnostics](../remote-actions/collect-diagnostics.md#collect-diagnostics) will be expanded to collect details about Windows Management Instrumentation (WMI) app issues.
-
-The new event viewers will include the following:
-- Microsoft-Windows-WMI-Activity/Operational
-- Microsoft-Windows-WinRM/Operational
-
-For more information about Windows device diagnostics, see [Collect diagnostics from a Windows device](../remote-actions/collect-diagnostics.md).
-
-### Monitor bootstrap escrow status on a Mac<!-- 12404441 -->  
-A new macOS hardware property that you can monitor called **Bootstrap token escrowed** will be added to Microsoft Intune, and will report whether or not a bootstrap token has been escrowed on the device.
-
-### Enable Common Criteria mode in Android Enterprise devices<!-- 13158881 -->
-For Android Enterprise devices, you'll soon be able to create a device restrictions configuration profile that manages device settings (**Devices** > **Configuration profiles** > **Create profile** > **Android Enterprise** > **Fully managed, dedicated, and corporate-owned work profile** for platform > **Device restrictions** for profile type).
-
-In the **System security**, there will be a new **Common Criteria mode** setting. These are an elevated set of security standards on a device which elevates security components on the device, including and not limited to:
-- AES-GCM encryption of Bluetooth Long Term Keys
-- Wi-Fi configuration stores
-- Blocks bootloader download mode, the manual method for software updates
-- Mandates additional key zeroization on key deletion
-- Prevents non-authenticated Bluetooth connections
-- Requires that FOTA updates have 2048-bit RSA-PSS signature
-
-These configurations are typically required by only national security systems and other highly sensitive organizations.
-
-For a list of the settings you can configure, go to [Android Enterprise device settings to allow or restrict features using Intune](../configuration/device-restrictions-android-for-work.md).
-
-Applies to:
-- Android 5.0 and newer
-- Android Enterprise corporate owned fully managed (COBO)
-- Android Enterprise corporate owned dedicated devices (COSU)
-- Android Enterprise corporate owned work profile (COPE)
-
-<!-- ***********************************************-->
-
-## Device enrollment
-
-### New authentication option for iOS/iPadOS automated device enrollment<!-- 12377183 -->
-A new authentication option in Microsoft Intune will allow users going through automated device enrollment (ADE) to authenticate by signing in from another device.  This option will be available for iOS/iPadOS devices enrolling via Setup Assistant with modern authentication. The screen that prompts device users to authenticate will be embedded into Setup Assistant and shown to them during enrollment.
-
 <!-- ***********************************************-->
 
 ## Device configuration
@@ -146,11 +103,6 @@ Applies to:
 - Windows 10
 - Windows 11
 
-### Certificate profiles support for Android (AOSP) devices<!-- 8506319, 8506363 -->
-To expand our support for the Android Open Source Project (AOSP) platform, you’ll soon be able to deploy the following certificate profiles to corporate-owned and userless devices: 
-- Trusted certificate profile
-- PKCS certificate profile
-
 ### Import custom ADMX and ADML administrative templates to create a device configuration profile<!-- 4970862 -->
 You can create a device configuration policy that uses built-in ADMX templates (**Devices** > **Configuration profiles** > **Create profile** > **Windows 10 and later** for platform > **Templates** > **Administrative templates**).
 
diff --git a/memdocs/intune/fundamentals/whats-new.md b/memdocs/intune/fundamentals/whats-new.md
@@ -169,7 +169,7 @@ For more information about Microsoft AutoUpdate settings you can configure, go t
 Applies to:
 - macOS
 
-#### New iOS/iPadOS settings in the Settings Catalog<!-- 14875745 -->
+#### New iOS/iPadOS settings in the Settings Catalog<!-- 14875716 -->
 The [Settings Catalog](../configuration/settings-catalog.md) lists all the settings you can configure in a device policy, and all in one place. There are new iOS/iPadOS settings available in the Settings Catalog (**Devices** > **Configuration profiles** > **Create profile** > **iOS/iPadOS** for platform > **Settings catalog** for profile type).
 
 New settings include:
diff --git a/memdocs/intune/protect/mde-security-integration.md b/memdocs/intune/protect/mde-security-integration.md
@@ -7,7 +7,7 @@ keywords:
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 05/12/2022
+ms.date: 07/28/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -64,6 +64,14 @@ When you select a policy, you'll see information about the device check-in statu
 
 ## Frequently asked questions and considerations
 
+### Device check-in frequency
+
+Devices managed by this capability check in with Microsoft Endpoint Manager every 90 minutes to update policy.
+
+### Devices protected by Tamper Protection
+
+If a device has Tamper Protection turned on, it will not be possible to edit its settings without turning Tamper Protection off. When editing settings for a device with Tamper Protection turned on, Microsoft Endpoint Manager presents a *Failed* setting status with an error code of `-2147024891`.
+
 ### Assignment Filters and Security Management for Microsoft Defender for Endpoint
 
 Assignment filters aren't supported for devices communicating through the Microsoft Defender for Endpoint channel. While assignment filters can be added to a policy that could be targeted at these devices, the device will ignore assignment filters. For assignment filter support, the device must be enrolled in to Microsoft Endpoint Manager.
@@ -92,13 +100,6 @@ The following security settings are pending deprecation. The Security Management
 ### Managing security configurations on domain controllers
 
 Currently, devices are not supported to complete a Hybrid Join to Azure Active Directory. Since an Azure Active Directory trust is required, domain controllers aren't currently supported. We're looking at ways to add this support.
-
-<!-- Removing until GA behavior is known>
-### Non-persistent VDI environments
-
-Due to the potential effect on Azure Active Directory environments with respect to device lifecycle and service quota, we advise against testing the current installation files and builds shared in this public preview in a non-persistent VDI environment.
--->
-
 ### Server Core installation
 
 Due to the platform limitations of Server core installations, these are not supported by Security Management for Microsoft Defender for Endpoint.
diff --git a/memdocs/intune/remote-actions/remote-help.md b/memdocs/intune/remote-actions/remote-help.md
@@ -353,7 +353,7 @@ Updates for Remote help are released periodically. When we update Remote help, y
 
 ### July 26, 2022
 
-Version: 4.1.0.12 - Changes in this release: 
+Version: 4.0.1.12 - Changes in this release: 
 
 Various fixes were introduced to address the 'Try again later' message that appears when not authenticated. The fixes also include an improved auto-update capability.
 
