Skip to content

Commit 2f268cd

Browse files
committed
fix merge conflict
2 parents 9a8bf2f + ca5e1c1 commit 2f268cd

27 files changed

Lines changed: 381 additions & 269 deletions

memdocs/autopilot/windows-autopilot-whats-new.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,10 @@ ms.topic: article
1717

1818
# Windows Autopilot: What's new
1919

20+
## Updates to Autopilot device targeting infrastructure
21+
22+
With Intune 2208 we are updating the Autopilot infrastructure to ensure that the profiles and applications assigned are consistently ready when the devices are deployed. This change reduces the amount of data that needs to be synchronized per-Autopilot device and leverages device lifecycle change events to reduce the amount of time that it takes to recover from device resets for Azure AD and Hybrid Azure AD joined devices. No action is needed to enable this change, it will be rolling out to all clients starting August 2022.
23+
2024
## Update Intune Connector for Active Directory for Hybrid Azure AD joined devices
2125
<!-- 2209 -->
2226

memdocs/configmgr/core/clients/manage/collections/collection-evaluation.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@ ms.date: 06/05/2020
66
ms.prod: configuration-manager
77
ms.technology: configmgr-client
88
ms.topic: conceptual
9-
author: aczechowski
10-
ms.author: aaroncz
11-
manager: dougeby
9+
author: gowdhamankarthikeyan
10+
ms.author: gokarthi
11+
manager: apoorvseth
1212
ms.localizationpriority: medium
1313
---
1414

@@ -30,12 +30,13 @@ At a high level, each individual collection evaluation and update follows these
3030

3131
1. Execute the collection query.
3232
1. Add any systems that are direct members.
33+
1. Add members specified in the *Include* collections.
3334
1. Perform a logical `AND` between the returned results and the limiting collection.
34-
1. Evaluate the *exclude* collections.
35+
1. Remove members specified in the *exclude* collections.
3536

3637
If the exclude collections also have query rules, or have include or exclude collections, evaluate them also. If these collections themselves are limiting collections, evaluate any collections below them. After fully evaluating the tree, return the results to the calling collection.
3738

38-
1. Compare the result set from evaluating the direct members and include collections with the results of evaluating the exclude collections.
39+
1. Compare the result set from evaluating the direct members and include collections with the results of the exclude collections.
3940
1. Write the changes to the database and perform updates.
4041
1. Trigger any dependent collections to update as well. Dependent collections are collections that the current collection limits, or that refer to the current collection using include or exclude rules.
4142

-90.6 KB
Loading

memdocs/get-support.md

Lines changed: 31 additions & 37 deletions
Large diffs are not rendered by default.

memdocs/intune/configuration/android-oem-configuration-overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -140,7 +140,7 @@ Be sure the device supports OEMConfig, the correct OEMConfig app is added to Int
140140

141141
Select **Next**.
142142

143-
11. In **Assignments**, select the users or groups that will receive your profile. Assign one profile to each device. The OEMConfig model only supports one policy per device.
143+
11. In **Assignments**, select the users or groups that will receive your profile. Assign one profile to each device. The OEMConfig model only supports one policy per device. An OEMConfig profile that exceeds 350kb will not be assigned, and will show a "pending" status.
144144

145145
For more information on assigning profiles, see [Assign user and device profiles](device-profile-assign.md).
146146

memdocs/intune/enrollment/android-dedicated-devices-fully-managed-enroll.md

Lines changed: 19 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -89,16 +89,23 @@ Scan the QR code from the enrollment profile to enroll devices running Android 8
8989

9090
## Enroll by using Google Zero Touch
9191

92-
To use this method, zero-touch enrollment must be supported on devices and affiliated with a supplier that is part of the Android zero-touch enrollment service. For more information, such as prerequisites, where to purchase devices, and how to associate a Google Account with your corporate email, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005)(opens Android Enterprise Help).
92+
To use this method, zero-touch enrollment must be supported on devices and affiliated with a supplier that is part of the Android zero-touch enrollment service. For more information, such as prerequisites, where to purchase devices, and how to associate a Google Account with your corporate email, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005) (opens Android Enterprise Help docs).
9393

9494
This section describes how to:
9595
* Create a zero-touch configuration in the admin center
9696
* Create a zero-touch configuration in the zero-touch enrollment portal
9797

9898
### Create zero-touch configuration in admin center
99-
The zero-touch iframe lets you access the zero-touch enrollment portal in the Microsoft Endpoint Manager admin center. To enable the iframe, you must first add the *update app sync* permission and enable enrollment for corporate-owned, fully managed devices. After those steps are complete, the zero-touch enrollment option becomes visible in the admin center and you can link your account and create zero-touch configurations.
99+
The zero-touch iframe gives you access to the zero-touch enrollment portal and zero-touch configurations in the Microsoft Endpoint Manager admin center.
100+
101+
To enable the iframe, you must first add the *update app sync* permission and enable enrollment for corporate-owned, fully managed devices. Once you enable the iframe, you can:
100102

101-
Complete the following steps to enable the iframe and create a new zero-touch configuration. To create configurations in the zero-touch enrollment portal instead, skip to [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal).
103+
* Link your zero-touch account to Intune
104+
* Add support information
105+
* Configure zero-touch enabled devices
106+
* Customize provisioning extras
107+
108+
Complete the steps in this section to enable the iframe. To create configurations in the zero-touch enrollment portal instead, skip to [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal).
102109

103110
#### Step 1: Add required permission
104111
Add the *update app sync* permission.
@@ -131,18 +138,20 @@ Link a zero-touch account with your Microsoft Intune account. Upon linking the a
131138
3. The iframe opens. Select **Next** to begin setup.
132139
4. Sign in with the Google account you provided to your reseller.
133140
5. Select the zero-touch account you want to link, and then select **Link**.
134-
6. A default configuration is created. A screen appears with basic information about the new configuration. Intune will automatically apply the default to any zero-touch enabled device that's without an existing configuration. Select **Next** to continue.
141+
6. A default configuration is created. A screen appears with basic information about the configuration. Intune will automatically apply the default configuration to any zero-touch enabled device that's without an existing configuration.
135142

136143
> [!TIP]
137-
> The token used for the default configuration is for a fully managed device. If you want to create a zero-touch configuration for a corporate-owned work profile device or a dedicated device, see [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal) (in this article).
138-
6. Add support information to assist device users during setup.
139-
7. Select **Save**.
144+
> The token used for the default configuration is meant for a fully managed device. If you want to create a zero-touch configuration for a corporate-owned work profile device or a dedicated device, select **View devices in the zero-touch portal**. For next steps, see [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal) in this article.
145+
146+
7. Select **Next** to continue.
147+
8. Add support information to assist device users during setup.
148+
9. Select **Save**.
140149

141-
Once your account is linked with Intune, zero-touch enabled devices are ready to receive the default configuration. You can view existing zero-touch configurations, edit support information, unlink the account, and link other accounts in the admin center.
150+
Once your account is linked with Intune, the default configuration is applied to zero-touch enabled devices that do not already have a configuration. You can view existing zero-touch configurations, edit support information, unlink the account, and link other accounts in the admin center.
142151

143152
### Create configuration in zero-touch enrollment portal
144153

145-
Add a zero-touch configuration in the Google zero-touch enrollment portal. You can use the zero-touch enrollment portal by itself to manage configurations, or you can use it in combination with the zero-touch iframe. The portal supports configurations for fully managed and dedicated devices, and corporate-owned devices with a work profile.
154+
Add a zero-touch configuration in the [zero-touch enrollment portal](https://partner.android.com/zerotouch). You can use the portal by itself to manage configurations, or you can use it in combination with the zero-touch iframe. The portal supports configurations for fully managed and dedicated devices, and corporate-owned devices with a work profile.
146155

147156
1. Sign in to the zero-touch enrollment portal with your Google account.
148157
2. Select the option to add a new configuration.
@@ -162,7 +171,7 @@ Add a zero-touch configuration in the Google zero-touch enrollment portal. You c
162171
"com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "YourEnrollmentToken"
163172
6. Enter your organization's name and support information, which is shown on screen while users set up their devices.
164173

165-
For more information about how to assign a default configuration or apply a configuration in the zero-touch portal, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005)(opens Android Enterprise Help).
174+
For more information about how to assign a default configuration or apply a configuration in the zero-touch portal, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005) (opens Android Enterprise Help docs).
166175

167176
## Enroll by using Knox Mobile Enrollment
168177
To use Samsung's Knox Mobile Enrollment, the device must be running Android OS version 8.0 or later and Samsung Knox 2.8 or higher. For more information, learn [how to automatically enroll your devices with Knox Mobile Enrollment](./android-samsung-knox-mobile-enroll.md).

0 commit comments

Comments
 (0)