Merge pull request #6885 from MicrosoftDocs/main

Publish Intune 2202 release

Author: dougeby

memdocs/analytics/work-from-anywhere.md

@@ -2,7 +2,7 @@
 title: Work from anywhere report in Endpoint analytics
 titleSuffix: Microsoft Endpoint Manager
 description: The Work from anywhere report in Endpoint analytics provides insights to help your end users be productive from anywhere.
-ms.date: 11/15/2021
+ms.date: 02/23/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-analytics
 ms.topic: conceptual
@@ -72,6 +72,8 @@ Cloud identity provides users with many productivity benefits including device-w
 
 Cloud provisioning provides a simpler initial provisioning experience for Windows PCs than the native experience. It reduces the number of screens in the Out Of Box Experience (OOBE) and provides defaults, to ensure the device is correctly provisioning from the factory or on reset. The **Cloud provisioning** metric measures the percentage of machines that are either Windows 365 Cloud PCs or Windows Intune devices that are both registered and have a deployment profile created for Autopilot. The recommended remediation actions are to register and create deployment profiles for existing devices in Windows Autopilot using Microsoft [Intune](../autopilot/enrollment-autopilot.md).
 
+> [!NOTE]
+> Cloud provisioned devices that aren't enrolled into Endpoint analytics won't be populated.
 
 :::image type="content" source="media/8668496-cloud-provisioning.png" alt-text="Screenshot of the cloud provisioning tab showing the device list" lightbox="media/8668496-cloud-provisioning.png":::
 

memdocs/configmgr/core/servers/deploy/configure/configure-discovery-methods.md

@@ -280,7 +280,7 @@ To enable discovery on an existing **Cloud Management** Azure service:
 1. In the **Discovery** tab, check the box to **Enable Azure Active Directory Group Discovery**, then select **Settings**.
 1. Select **Add** under the **Discovery Scopes** tab.
     - You can modify the **Polling Schedule** in the other tab.
-1. Select one or more user groups. You can **Search** by name and choose if you want to see **Security groups only**.
+1. Select one or more user groups. You can **Search** by name.
     - You'll be prompted to sign in to Azure when you select **Search** the first time.
 1. Select **OK** when you finish selecting groups.
 1. Once discovery finishes running, you can browse your Azure AD user groups in the **Users** node.

memdocs/configmgr/core/servers/deploy/install/command-line-options-for-setup.md

@@ -43,6 +43,16 @@ Disable user input during setup, but display the setup wizard. Only use this opt
 
 Run a site reset. This action resets the database and service accounts for the site. For more information, see [Run a site reset](../../manage/modify-your-infrastructure.md#bkmk_reset).
 
+## `/SQLMOVE`
+
+Move the site database. This action moves the site database to a new instance of SQL Server on the same computer, or to a different computer that runs a supported version of SQL Server. For more information, see [Modify the site database configuration](../../manage/modify-your-infrastructure.md#bkmk_dbconfig).
+
+Provide the SQL server name, database name and instance name in the following format:
+
+`/SQLMOVE <SQL Server FQDN>:<Database Name>:<SSB Port>`
+
+`/SQLMOVE <SQL Server FQDN>:<InstanceName>\<Database Name>:<SSB Port>`
+
 ## `/TESTDBUPGRADE`
 
 Run a test on a backup of the site database to make sure that the database can upgrade.

memdocs/configmgr/core/servers/deploy/install/command-line-script-file.md

@@ -105,6 +105,7 @@ Include the following keys in the `SQLConfigOptions` section to install a site:
 | `SQLSSBPort` | No | Port number | The SQL Server Service Broker (SSB) port. By default, SSB uses TCP port 4022. |
 | `SQLDataFilePath` | No | Local directory path | An alternate location to create the database .mdb file. |
 | `SQLLogFilePath` | No | Local directory path | An alternate location to create the database .ldf log file. |
+| `AGBackupShare` | No | Network share path | The network location for sharing database backups when creating the site database in an Availability Group. The backup share is only needed if automatic seeding is not set. |
 
 ### `CloudConnectorOptions` section for site install
 

memdocs/intune/configuration/group-policy-analytics.md

@@ -8,7 +8,7 @@ author: MandiOhlinger
 
 ms.author: mandia
 manager: dougeby
-ms.date: 02/03/2022
+ms.date: 02/23/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -140,11 +140,14 @@ Currently, the Group Policy analytics (preview) tool only supports non-ADMX sett
 
     - **Ready for migration**: The policy has a matching setting in Intune, and is ready to be migrated to Intune.
     - **Not supported**: The policy doesn't have a matching setting. Typically, policy settings that show this status aren't exposed to MDM providers, including Intune.
-    - **Deprecated**: The policy may apply to older Windows versions, and no longer used in Windows 10/11.
+    - **Deprecated**: The policy may apply to older Windows versions, older Microsoft Edge versions, and more policies that aren't used anymore.
+
+      > [!NOTE]
+      > When the Microsoft Intune product team updates the mapping logic, your imported GPOs are automatically updated. You don't need to reimport your GPOs.
 
 3. Select the **Reports** tab > **Group policy migration readiness**. In this report, you can:
 
-    - See the number of settings in your GPO that can be configure in a device configuration profile. It also shows if the settings can be in a custom profile, aren't supported, or are deprecated.
+    - See the number of settings in your GPO that can be configured in a device configuration profile. It also shows if the settings can be in a custom profile, aren't supported, or are deprecated.
     - Filter the report output using the **Migration Readiness**, **Profile type**, and **CSP Name** filters.
     - Select **Generate report** or **Generate again** to get current data.
     - See the list of settings in your GPO.

memdocs/intune/configuration/settings-catalog.md

@@ -7,7 +7,7 @@ keywords:
 author: MandiOhlinger
 ms.author: mandia
 manager: dougeby
-ms.date: 02/03/2022
+ms.date: 02/23/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -39,6 +39,7 @@ This feature applies to:
 
 - **macOS**
 
+  - **Configure device settings**. Device settings that are directly generated from Apple Profile-Specific Payload Keys are continually being added. To learn more about these keys, see, [Profile-Specific Payload Keys](https://developer.apple.com/documentation/devicemanagement/profile-specific_payload_keys) (opens Apple's website).
   - **Configure Microsoft Edge version 77 and newer**. Previously, you had to [use a property list (plist) file](/deployedge/configure-microsoft-edge-on-mac) (opens another Microsoft website). For a list of the settings you can configure, see [Microsoft Edge - Policies](/DeployEdge/microsoft-edge-policies) (opens another Microsoft website). Be sure macOS is listed as a supported platform. If some settings aren't available in the settings catalog, then it's recommended to continue using the [preference file](preference-file-settings-macos.md).
   - **Configure Microsoft Defender for Endpoint**. Previously, you had to [use a property list (plist) file](/microsoft-365/security/defender-endpoint/mac-install-with-intune) (opens another Microsoft website). For a list of the settings you can configure, see [Set preferences for Microsoft Defender for Endpoint on macOS](/microsoft-365/security/defender-endpoint/mac-preferences) (opens another Microsoft website). Be sure macOS is listed as a supported platform. If some settings aren't available in the settings catalog, then it's recommended to continue using the [preference file](preference-file-settings-macos.md).
 
@@ -188,7 +189,7 @@ When you create the policy, you have two policy types: **Settings catalog** and
 
 The **Templates** include a logical group of settings, such as device restrictions, kiosk, and more. Use this option if you want to use these groupings to configure your settings.
 
-For Windows, the **Settings catalog** lists all the available settings. If you want to see all the available Firewall settings, or all the available BitLocker settings, then use this option. Also, use this option if you're looking for specific settings.
+The **Settings catalog** lists all the available settings. If you want to see all the available Firewall settings, or all the available BitLocker settings, then use this option. Also, use this option if you're looking for specific settings.
 
 ## Next steps