Merge pull request #8342 from MicrosoftDocs/main

Publish main to live on 8/29 @ 10:30 am

Author: v-stsavell

.openpublishing.redirection.json

@@ -1,5 +1,15 @@
 {
     "redirections": [
+        {
+            "source_path": "memdocs/intune/developer/app-sdk-android.md",
+            "redirect_url": "/mem/intune/developer/app-sdk-android-phase1",
+            "redirect_document_id": false
+        }, 
+        {
+            "source_path": "memdocs/intune/developer/app-sdk-android-testing-guide.md",
+            "redirect_url": "/mem/intune/developer/app-sdk-android-phase1",
+            "redirect_document_id": false
+        }, 
         {
             "source_path": "memdocs/intune/fundamentals/end-user-company-portal-messages.md",
             "redirect_url": "/mem/intune/user-help/sign-in-to-the-company-portal",

memdocs/configmgr/hotfix/2207/14978429.md

@@ -0,0 +1,68 @@
+---
+title: Connected cache update for Microsoft Endpoint Configuration Manager version 2203
+titleSuffix: Configuration Manager
+description: Console update for 2203
+ms.date: 8/29/2022
+ms.prod: configuration-manager
+ms.technology: configmgr-core
+ms.topic: reference
+ms.assetid: 006f3396-a9d0-44f8-9db1-6408259e405ef
+author: bhuney
+ms.author: brianhun
+manager: dougeby
+---
+
+# Connected cache update for Microsoft Endpoint Configuration Manager versions 2103 - 2207
+
+*Applies to: Configuration Manager (current branch, versions 2103 - 2207)*
+## Summary of KB14978429
+
+An update is available that fixes the following issues with the Microsoft Connected Cache feature in Configuration Manager current branch, versions 2103 - 2207.
+ 
+- Incorrect access control list (ACL) set on the cache folder prevents installations from completing in some environments.
+- Uninstall race condition that prevents a scheduled task from being cleaned up as expected.
+- An incorrect failure state can persist after installation in some cases.
+ 
+In addition, the following enhancements are included in this release.
+
+- Added general supportability enhancements to improve logging, troubleshooting, and discoverability of error conditions.
+- Added support for the latest Office Click-to-Run (C2R) host.
+- Decreased installation time by approximately 30 percent.
+
+## Update information for Microsoft Endpoint Configuration Manager
+The following hotfix to resolve this problem is available for download from the Microsoft Download Center:
+
+[Download this hotfix now](https://download.microsoft.com/download/8/e/d/8ed826e2-0a9d-4160-a1a0-725efa0d0971/1.5.5.14088/DoincInstall.exe).
+
+After you download this hotfix, refer to the following installation instructions.
+
+## Installation instructions
+1. Confirm there is not currently an installation of the MCC component in progress. This is done by checking for status message **9522**, generated by the `SMS_DISTRIBUTION_MANAGER` component. The 9522 message indicates that installation is no longer being retried.
+2. Copy the new version of `DoincInstall.exe`, version **1.5.5.14088**, to the `{SMSInstallDir}\bin\x64` folder on all site servers, including the Central Administration Site (CAS) if present, and any passive sites.
+3. Uncheck the **Enable this distribution point to be used as Microsoft Connected Cache server** option in the affected distribution point’s properties.
+4. Wait for the uninstall of MCC to complete on the distribution point. This can be confirmed by looking for a **9152** success status message, combined with the following entry in `distmgr.log`.
+   ```text
+   Finished waiting for DoincInstall. InvocationState: UninstallCompleted. InvocationExitCode: 0. InvocationMessage: .
+   ```
+5. Recheck the **Enable this distribution point to be used as Microsoft Connected Cache server** option for the affected distribution point.
+
+   > [!TIP]
+   > For sites with a large number of distribution points, replace steps 3 - 5 above with the following.
+   > - Create an empty file named `resetdps.trn` and place it in the `{SMSInstallDir}\inboxes\distmgr.box` folder. This will reinstall all distribution points for that site using the latest version of `DoincInstall.exe` copied in step 2. above. 
+
+## Prerequisites
+To apply this hotfix, you must be using Microsoft Endpoint Configuration Manager, versions 2103 through versions 2203.
+
+## Restart information
+You don't have to restart the computer after you apply this hotfix. 
+
+## Hotfix replacement information
+This hotfix replaces the following previously released hotfix.
+
+[KB12819689 Connected cache update for Microsoft Endpoint Configuration Manager version 2111](../../hotfix/2111/12819689.md)
+
+## File information
+File information is available in the downloadable [KB14978429_FileList.txt](https://aka.ms/KB14978429_FileList) text file.
+
+## Release history
+- August 29, 2022: Initial hotfix release

memdocs/configmgr/hotfix/TOC.yml

@@ -1,6 +1,10 @@
 items:
 - name: Hotfix documentation
   href: index.yml
+- name: Version 2207
+  items:
+  - name: KB 14978429  Connected cache update for Microsoft Endpoint Configuration Manager version 2207
+    href: 2207/14978429.md
 - name: Version 2203
   items:
   - name: KB 13174460 Summary of changes in 2203

memdocs/intune/configuration/vpn-settings-windows-10.md

@@ -7,7 +7,7 @@ keywords:
 author: MandiOhlinger
 ms.author: mandia
 manager: dougeby
-ms.date: 05/12/2022
+ms.date: 08/22/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -108,6 +108,9 @@ The following settings are shown depending on the connection type you select. No
 
   - **Derived credential**: Use a certificate that's derived from a user's smart card. If no derived credential issuer is configured, Intune prompts you to add one. For more information, see [Use derived credentials in Intune](../protect/derived-credentials.md).
 
+    > [!NOTE]
+    > Currently, derived credentials as an authentication method for VPN profiles isn't working as expected on Windows devices. This behavior only impacts VPN profiles on Windows devices and will be fixed in a future release (no ETA).
+
   - **EAP** (IKEv2 only): Select an existing Extensible Authentication Protocol (EAP) client certificate profile to authenticate. Enter the authentication parameters in the **EAP XML** setting.
 
     For more information on EAP authentication, see [Extensible Authentication Protocol (EAP) for network access](/windows-server/networking/technologies/extensible-authentication-protocol/network-access) and [EAP configuration](/windows/client-management/mdm/eap-configuration).
@@ -239,7 +242,7 @@ Example:
 
 - **DNS suffix search list**: In **DNS suffixes**, enter a DNS suffix, and **Add**. You can add many suffixes.
 
-  When using DNS suffixes, you can search for a network resource using its short name, instead of the fully qualified domain name (FQDN). When searching using the short name, the suffix is automatically determined by the DNS server. For example, `utah.contoso.com` is in the DNS suffix list. You ping `DEV-comp`. In this scenario, it resolves to `DEV-comp.utah.contoso.com`.
+  When using DNS suffixes, you can search for a network resource using its short name, instead of the fully qualified domain name (FQDN). When you search using the short name, the suffix is automatically determined by the DNS server. For example, `utah.contoso.com` is in the DNS suffix list. You ping `DEV-comp`. In this scenario, it resolves to `DEV-comp.utah.contoso.com`.
 
   DNS suffixes are resolved in the order listed, and the order can be changed. For example, `colorado.contoso.com` and `utah.contoso.com` are in the DNS suffix list, and both have a resource called `DEV-comp`. Since `colorado.contoso.com` is first in the list, it resolves as `DEV-comp.colorado.contoso.com`.