You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/autopilot/windows-autopilot-whats-new.md
+4Lines changed: 4 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,6 +17,10 @@ ms.topic: article
17
17
18
18
# Windows Autopilot: What's new
19
19
20
+
## Updates to Autopilot device targeting infrastructure
21
+
22
+
With Intune 2208 we are updating the Autopilot infrastructure to ensure that the profiles and applications assigned are consistently ready when the devices are deployed. This change reduces the amount of data that needs to be synchronized per-Autopilot device and leverages device lifecycle change events to reduce the amount of time that it takes to recover from device resets for Azure AD and Hybrid Azure AD joined devices. No action is needed to enable this change, it will be rolling out to all clients starting August 2022.
23
+
20
24
## Update Intune Connector for Active Directory for Hybrid Azure AD joined devices
Copy file name to clipboardExpand all lines: memdocs/configmgr/core/clients/manage/collections/collection-evaluation.md
+6-5Lines changed: 6 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,9 +6,9 @@ ms.date: 06/05/2020
6
6
ms.prod: configuration-manager
7
7
ms.technology: configmgr-client
8
8
ms.topic: conceptual
9
-
author: aczechowski
10
-
ms.author: aaroncz
11
-
manager: dougeby
9
+
author: gowdhamankarthikeyan
10
+
ms.author: gokarthi
11
+
manager: apoorvseth
12
12
ms.localizationpriority: medium
13
13
---
14
14
@@ -30,12 +30,13 @@ At a high level, each individual collection evaluation and update follows these
30
30
31
31
1. Execute the collection query.
32
32
1. Add any systems that are direct members.
33
+
1. Add members specified in the *Include* collections.
33
34
1. Perform a logical `AND` between the returned results and the limiting collection.
34
-
1.Evaluate the *exclude* collections.
35
+
1.Remove members specified in the *exclude* collections.
35
36
36
37
If the exclude collections also have query rules, or have include or exclude collections, evaluate them also. If these collections themselves are limiting collections, evaluate any collections below them. After fully evaluating the tree, return the results to the calling collection.
37
38
38
-
1. Compare the result set from evaluating the direct members and include collections with the results of evaluating the exclude collections.
39
+
1. Compare the result set from evaluating the direct members and include collections with the results of the exclude collections.
39
40
1. Write the changes to the database and perform updates.
40
41
1. Trigger any dependent collections to update as well. Dependent collections are collections that the current collection limits, or that refer to the current collection using include or exclude rules.
Copy file name to clipboardExpand all lines: memdocs/intune/configuration/android-oem-configuration-overview.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -140,7 +140,7 @@ Be sure the device supports OEMConfig, the correct OEMConfig app is added to Int
140
140
141
141
Select **Next**.
142
142
143
-
11. In **Assignments**, select the users or groups that will receive your profile. Assign one profile to each device. The OEMConfig model only supports one policy per device.
143
+
11. In **Assignments**, select the users or groups that will receive your profile. Assign one profile to each device. The OEMConfig model only supports one policy per device. An OEMConfig profile that exceeds 350kb will not be assigned, and will show a "pending" status.
144
144
145
145
For more information on assigning profiles, see [Assign user and device profiles](device-profile-assign.md).
Copy file name to clipboardExpand all lines: memdocs/intune/enrollment/android-dedicated-devices-fully-managed-enroll.md
+19-10Lines changed: 19 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -89,16 +89,23 @@ Scan the QR code from the enrollment profile to enroll devices running Android 8
89
89
90
90
## Enroll by using Google Zero Touch
91
91
92
-
To use this method, zero-touch enrollment must be supported on devices and affiliated with a supplier that is part of the Android zero-touch enrollment service. For more information, such as prerequisites, where to purchase devices, and how to associate a Google Account with your corporate email, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005)(opens Android Enterprise Help).
92
+
To use this method, zero-touch enrollment must be supported on devices and affiliated with a supplier that is part of the Android zero-touch enrollment service. For more information, such as prerequisites, where to purchase devices, and how to associate a Google Account with your corporate email, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005)(opens Android Enterprise Help docs).
93
93
94
94
This section describes how to:
95
95
* Create a zero-touch configuration in the admin center
96
96
* Create a zero-touch configuration in the zero-touch enrollment portal
97
97
98
98
### Create zero-touch configuration in admin center
99
-
The zero-touch iframe lets you access the zero-touch enrollment portal in the Microsoft Endpoint Manager admin center. To enable the iframe, you must first add the *update app sync* permission and enable enrollment for corporate-owned, fully managed devices. After those steps are complete, the zero-touch enrollment option becomes visible in the admin center and you can link your account and create zero-touch configurations.
99
+
The zero-touch iframe gives you access to the zero-touch enrollment portal and zero-touch configurations in the Microsoft Endpoint Manager admin center.
100
+
101
+
To enable the iframe, you must first add the *update app sync* permission and enable enrollment for corporate-owned, fully managed devices. Once you enable the iframe, you can:
100
102
101
-
Complete the following steps to enable the iframe and create a new zero-touch configuration. To create configurations in the zero-touch enrollment portal instead, skip to [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal).
103
+
* Link your zero-touch account to Intune
104
+
* Add support information
105
+
* Configure zero-touch enabled devices
106
+
* Customize provisioning extras
107
+
108
+
Complete the steps in this section to enable the iframe. To create configurations in the zero-touch enrollment portal instead, skip to [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal).
102
109
103
110
#### Step 1: Add required permission
104
111
Add the *update app sync* permission.
@@ -131,18 +138,20 @@ Link a zero-touch account with your Microsoft Intune account. Upon linking the a
131
138
3. The iframe opens. Select **Next** to begin setup.
132
139
4. Sign in with the Google account you provided to your reseller.
133
140
5. Select the zero-touch account you want to link, and then select **Link**.
134
-
6. A default configuration is created. A screen appears with basic information about the new configuration. Intune will automatically apply the default to any zero-touch enabled device that's without an existing configuration. Select **Next** to continue.
141
+
6. A default configuration is created. A screen appears with basic information about the configuration. Intune will automatically apply the default configuration to any zero-touch enabled device that's without an existing configuration.
135
142
136
143
> [!TIP]
137
-
> The token used for the default configuration is for a fully managed device. If you want to create a zero-touch configuration for a corporate-owned work profile device or a dedicated device, see [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal) (in this article).
138
-
6. Add support information to assist device users during setup.
139
-
7. Select **Save**.
144
+
> The token used for the default configuration is meant for a fully managed device. If you want to create a zero-touch configuration for a corporate-owned work profile device or a dedicated device, select **View devices in the zero-touch portal**. For next steps, see [Create configuration in zero-touch enrollment portal](android-dedicated-devices-fully-managed-enroll.md#create-configuration-in-zero-touch-enrollment-portal) in this article.
145
+
146
+
7. Select **Next** to continue.
147
+
8. Add support information to assist device users during setup.
148
+
9. Select **Save**.
140
149
141
-
Once your account is linked with Intune, zero-touch enabled devices are ready to receive the default configuration. You can view existing zero-touch configurations, edit support information, unlink the account, and link other accounts in the admin center.
150
+
Once your account is linked with Intune, the default configuration is applied to zero-touch enabled devices that do not already have a configuration. You can view existing zero-touch configurations, edit support information, unlink the account, and link other accounts in the admin center.
142
151
143
152
### Create configuration in zero-touch enrollment portal
144
153
145
-
Add a zero-touch configuration in the Google zero-touch enrollment portal. You can use the zero-touch enrollment portal by itself to manage configurations, or you can use it in combination with the zero-touch iframe. The portal supports configurations for fully managed and dedicated devices, and corporate-owned devices with a work profile.
154
+
Add a zero-touch configuration in the [zero-touch enrollment portal](https://partner.android.com/zerotouch). You can use the portal by itself to manage configurations, or you can use it in combination with the zero-touch iframe. The portal supports configurations for fully managed and dedicated devices, and corporate-owned devices with a work profile.
146
155
147
156
1. Sign in to the zero-touch enrollment portal with your Google account.
148
157
2. Select the option to add a new configuration.
@@ -162,7 +171,7 @@ Add a zero-touch configuration in the Google zero-touch enrollment portal. You c
6. Enter your organization's name and support information, which is shown on screen while users set up their devices.
164
173
165
-
For more information about how to assign a default configuration or apply a configuration in the zero-touch portal, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005)(opens Android Enterprise Help).
174
+
For more information about how to assign a default configuration or apply a configuration in the zero-touch portal, see [Zero-touch enrollment for IT admins](https://support.google.com/work/android/answer/7514005)(opens Android Enterprise Help docs).
166
175
167
176
## Enroll by using Knox Mobile Enrollment
168
177
To use Samsung's Knox Mobile Enrollment, the device must be running Android OS version 8.0 or later and Samsung Knox 2.8 or higher. For more information, learn [how to automatically enroll your devices with Knox Mobile Enrollment](./android-samsung-knox-mobile-enroll.md).
0 commit comments