Merge pull request #8038 from MicrosoftDocs/main

jborsecnik · web-flow · commit 4dc71f536e3c · 2022-07-19T10:43:50.000-07:00
merge main to live Tuesday 10 AM
diff --git a/memdocs/autopilot/profiles.md b/memdocs/autopilot/profiles.md
@@ -1,23 +1,18 @@
 ---
 title: Configure Autopilot profiles
 description: Learn how to configure device profiles for Windows Autopilot deployment.
-keywords: mdm, setup, windows, windows 10, oobe, manage, deploy, autopilot, ztd, zero-touch, partner, msfb, intune
 ms.technology: windows
 ms.prod: w10
-ms.mktglfcycl: deploy
 ms.localizationpriority: medium
-ms.sitesec: library
-ms.pagetype: deploy
-audience: itpro
 author: aczechowski
 ms.author: aaroncz
 ms.reviewer: jubaptis
 manager: dougeby
-ms.date: 11/05/2021
+ms.date: 07/18/2022
 ms.collection:
   - M365-modern-desktop
   - highpri
-ms.topic: article
+ms.topic: how-to
 ---
 
 # Configure Autopilot profiles
@@ -30,6 +25,14 @@ ms.topic: article
 
 After you have [created a device group](enrollment-autopilot.md), you can apply a Windows Autopilot deployment profile to each device in the group.  Deployment profiles determine the deployment mode, and customize the OOBE for your end users.
 
+You can create Autopilot profiles through:
+
+1. [Microsoft Admin Center](https://admin.microsoft.com/)
+2. [Intune console](https://endpoint.microsoft.com/)
+3. [Intune graph](/graph/api/resources/intune-graph-overview)
+
+For Intune managed devices, pre-provisioning, self-deploying, and co-management profiles can only be created and assigned in Intune.
+
 ## Create an Autopilot deployment profile
 
 Autopilot deployment profiles are used to configure the Autopilot devices. You can create up to 350 profiles per tenant.
diff --git a/memdocs/configmgr/develop/core/understand/simple-example-of-list--create--modify--and-delete.md b/memdocs/configmgr/develop/core/understand/simple-example-of-list--create--modify--and-delete.md
@@ -1,5 +1,6 @@
 ---
 title: "Example of List, Create, Modify, and Delete"
+description: Learn how to use the SMS_Package class to list, create, modify and delete operations using the SMS Provider.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/apps/sms_appdeploymenterrorstatus-server-wmi-class.md b/memdocs/configmgr/develop/reference/apps/sms_appdeploymenterrorstatus-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_AppDeploymentErrorStatus Class"
+description: Learn how to use the SMS_AppDeploymentErrorStatus class in Configuration Manager to represent application deployment error status. 
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/apps/sms_g_system_dcmdeploymentnoncompliantassetdetails-server-wmi-class.md b/memdocs/configmgr/develop/reference/apps/sms_g_system_dcmdeploymentnoncompliantassetdetails-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_G_SYSTEM_DCMDeploymentNonCompliantAssetDetails Class"
+description: Learn how to use the SMS_G_SYSTEM_DCMDeploymentNonCompliantAssetDetails class in Configuration Manager to set non-compliant asset details for a deployment.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/apps/sms_g_user_dcmdeploymenterrorassetdetails-server-wmi-class.md b/memdocs/configmgr/develop/reference/apps/sms_g_user_dcmdeploymenterrorassetdetails-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_G_USER_DCMDeploymentErrorAssetDetails Class"
+description: Learn how to use the SMS_G_USER_DCMDeploymentErrorAssetDetails class in Configuration Manager to set the asset details for deployment errors.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/compliance/sms_categoryinstancebase-server-wmi-class.md b/memdocs/configmgr/develop/reference/compliance/sms_categoryinstancebase-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_CategoryInstanceBase Class"
+description: Learn how to use the SMS_CategoryInstanceBase class which is an SMS Provider server class. 
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/compliance/sms_ci_compliancehistory-server-wmi-class.md b/memdocs/configmgr/develop/reference/compliance/sms_ci_compliancehistory-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_CI_ComplianceHistory Class"
+description: Learn how to use the SMS_CI_ComplianceHistory class in Configuration Manager to get the compliance history for both configuration items and configuration baselines.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/compliance/sms_dcmdeploymentcompliantdetailsperasset-server-wmi-class.md b/memdocs/configmgr/develop/reference/compliance/sms_dcmdeploymentcompliantdetailsperasset-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_DCMDeploymentCompliantDetailsPerAsset Class"
+description: Learn how to use the SMS_DCMDeploymentCompliantDetailsPerAsset class in Configuration Manager set compliant asset details for a deployment.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/compliance/sms_dcmdeploymentcompliantstatus-server-wmi-class.md b/memdocs/configmgr/develop/reference/compliance/sms_dcmdeploymentcompliantstatus-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_DCMDeploymentCompliantStatus Class"
+description: Learn how to use the SMS_DCMDeploymentCompliantStatus class in Configuration Manager to set the compliant status of a deployment. 
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/clients/client-classes/ipxeauthclass--createidentity-method.md b/memdocs/configmgr/develop/reference/core/clients/client-classes/ipxeauthclass--createidentity-method.md
@@ -1,5 +1,6 @@
 ---
 title: "IPxeAuthClass::CreateIdentity"
+description: Learn how to use the CreateIdentity method to create a new self-signed certificate.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/clients/collections/sms_fullcollectionmembership-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/clients/collections/sms_fullcollectionmembership-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_FullCollectionMembership Class"
+description: Learn how to use the SMS_FullCollectionMembership class in Configuration Manager to list all member resources for a specific collection.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/clients/deploy/sms_clientdatasourcesdevicecounts-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/clients/deploy/sms_clientdatasourcesdevicecounts-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_ClientDataSourcesDeviceCounts Class"
+description: Learn how to use the SMS_ClientDataSourcesDeviceCounts class in Configuration Manager to represent device counts for client data sources.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/servers/configure/sms_advertisementinfo-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/servers/configure/sms_advertisementinfo-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_AdvertisementInfo Class"
+description: Learn how to use the SMS_AdvertisementInfo class in Configuration Manager to provide information about a specific advertisement.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/servers/configure/sms_dpcontentinfo-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/servers/configure/sms_dpcontentinfo-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_DPContentInfo Class"
+description: Learn how to use the SMS_DPContentInfo class in Configuration Manager to describe package information for a given distribution point.  
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/servers/configure/sms_securedcategorymembership-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/servers/configure/sms_securedcategorymembership-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_SecuredCategoryMembership Class"
+description: Learn how to use the SMS_SecuredCategoryMembership class in Configuration Manager.  
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/servers/console/sms_objectcontentinfo-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/servers/console/sms_objectcontentinfo-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_ObjectContentInfo Class"
+description: Learn how to use the SMS_ObjectContentInfo class in Configuration Manager to set application or package content information.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/servers/manage/raisewarningstatusmsg-method-in-class-sms_statusmessage.md b/memdocs/configmgr/develop/reference/core/servers/manage/raisewarningstatusmsg-method-in-class-sms_statusmessage.md
@@ -1,5 +1,6 @@
 ---
 title: "RaiseWarningStatusMsg Method"
+description: Learn how to use the RaiseWarningStatusMsg method in Configuration Manager to create a warning status message. 
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/core/servers/manage/sms_statmsgwithinsstrings-server-wmi-class.md b/memdocs/configmgr/develop/reference/core/servers/manage/sms_statmsgwithinsstrings-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_StatMsgWithInsStrings Class"
+description: Learn how to use the SMS_StatMsgWithInsStrings class in Configuration Manager to set an individual status message with insertion strings.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/misc/releasealllocks-method-in-class-sms_objectlock.md b/memdocs/configmgr/develop/reference/misc/releasealllocks-method-in-class-sms_objectlock.md
@@ -1,5 +1,6 @@
 ---
 title: "ReleaseAllLocks Method"
+description: Learn how to use the ReleaseAllLocks method in Configuration Manager to release all locks for a session. 
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/misc/requestlock-method-in-class-sms_objectlock.md b/memdocs/configmgr/develop/reference/misc/requestlock-method-in-class-sms_objectlock.md
@@ -1,5 +1,6 @@
 ---
 title: "RequestLock Method"
+description: Learn how to use the RequestLock method in Configuration Manager to synchronously acquire a lock to edit a global object.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/misc/requestlockasync-method-in-class-sms_objectlock.md b/memdocs/configmgr/develop/reference/misc/requestlockasync-method-in-class-sms_objectlock.md
@@ -1,6 +1,7 @@
 ---
 title: "RequestLockAsync Method"
 titleSuffix: "Configuration Manager"
+description: Learn how to use the RequestLockAsync method in Configuration Manager to asynchronously acquire a lock to edit global objects.
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
 ms.technology: configmgr-sdk
diff --git a/memdocs/configmgr/develop/reference/misc/requestlocksasync-method-in-class-sms_objectlock.md b/memdocs/configmgr/develop/reference/misc/requestlocksasync-method-in-class-sms_objectlock.md
@@ -1,6 +1,6 @@
 ---
-description: Learn how to asynchronously acquire locks to edit multiple global objects using RequestLocksAsync class method in Configuration Manager.
 title: "RequestLocksAsync Method"
+description: Learn how to asynchronously acquire locks to edit multiple global objects using RequestLocksAsync class method in Configuration Manager.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/misc/sms-adminuicontent-server-wmi-class.md b/memdocs/configmgr/develop/reference/misc/sms-adminuicontent-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_AdminUIContent Class"
+description: Learn how to use the SMS_AdminUIContent class although it has no defined methods.
 titleSuffix: "Configuration Manager"
 ms.date: "02/15/2017"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/osd/setsourcesite-method-in-class-sms_tasksequencepackage.md b/memdocs/configmgr/develop/reference/osd/setsourcesite-method-in-class-sms_tasksequencepackage.md
@@ -1,5 +1,6 @@
 ---
 title: "SetSourceSite Method in SMS_TaskSequencePackage"
+description: Learn how to use the SetSourceSite method in Configuration Manager to set the code of the source site for the task sequence package.  
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/osd/sms_tasksequence_captureuserstateaction-server-wmi-class.md b/memdocs/configmgr/develop/reference/osd/sms_tasksequence_captureuserstateaction-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_TaskSequence_CaptureUserStateAction Class"
+description: Learn how to use the SMS_TaskSequence_CaptureUserStateAction class in Configuration Manager to set a task sequence action that uses the User State Migration Tool (USMT) to capture user state and settings from the target computer.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/sum/sms_cm_updatepackagefeatures-server-wmi-class.md b/memdocs/configmgr/develop/reference/sum/sms_cm_updatepackagefeatures-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_CM_UpdatePackageFeatures Class"
+description: Learn how to use the SMS_CM_UpdatePackageFeatures class in Configuration Manager to update feature extensions.
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/develop/reference/sum/sms_supsyncstatus-server-wmi-class.md b/memdocs/configmgr/develop/reference/sum/sms_supsyncstatus-server-wmi-class.md
@@ -1,5 +1,6 @@
 ---
 title: "SMS_SUPSyncStatus Class"
+description: Learn how to use the SMS_SUPSyncStatus class in Configuration Manager to list sync and replication status for SUM data for participating site/SUP.  
 titleSuffix: "Configuration Manager"
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
diff --git a/memdocs/configmgr/mdt/known-issues.md b/memdocs/configmgr/mdt/known-issues.md
@@ -22,7 +22,7 @@ This article provides details of any current known issues and limitations with t
 
 After you updated your MDT boot image to [ADK for Windows 11](/windows-hardware/get-started/adk-install) you might see popups in Windows PE (WinPE) multicast enabled environments prompting wdscommonlib.dll and imagelib.dll are missing in WinPE.
 
-The right way to add WDS multicast to WinPE is to install WinPE-WDS-Tools OC ([WinPE optional components](/windows-hardware/manufacture/desktop/winpe-add-packages--optional-components-reference?view=windows-11#winpe-optional-components--)) into WinPE.
+The right way to add WDS multicast to WinPE is to install WinPE-WDS-Tools OC ([WinPE optional components](/windows-hardware/manufacture/desktop/winpe-add-packages--optional-components-reference?#winpe-optional-components--)) into WinPE.
 
 Follow this example to install WinPE-WDS-Tools OC in WinPE (assuming the mount folder E:\mnt exists).
 
diff --git a/memdocs/intune/apps/app-protection-policy-settings-android.md b/memdocs/intune/apps/app-protection-policy-settings-android.md
@@ -36,7 +36,7 @@ This article describes the app protection policy settings for Android devices. T
 There are three categories of policy settings: data protection settings, access requirements, and conditional launch. In this article, the term *policy-managed apps* refers to apps that are configured with app protection policies.
 
 > [!IMPORTANT]
-> The Intune Company Portal is required on the device to receive App Protection Policies for Android devices. 
+> Either the Intune Company Portal or the Microsoft Authenticator is required on the device to receive App Protection Policies for Android devices. 
 >
 > The Intune Managed Browser has been retired. Use [Microsoft Edge](../apps/manage-microsoft-edge.md) for your protected Intune browser experience. 
 
diff --git a/memdocs/intune/apps/intune-management-extension.md b/memdocs/intune/apps/intune-management-extension.md
@@ -187,7 +187,7 @@ In **PowerShell scripts**, select the script to monitor, choose **Monitor**, and
 
 ## Intune management extension logs
 
-Agent logs on the client machine are typically in `\ProgramData\Microsoft\IntuneManagementExtension\Logs`. You can use [CMTrace.exe](/configmgr/core/support/cmtrace) to view these log files.
+Agent logs on the client machine are typically in `C:\ProgramData\Microsoft\IntuneManagementExtension\Logs`. You can use [CMTrace.exe](/configmgr/core/support/cmtrace) to view these log files.
 
 ![Screenshot or sample cmtrace agent logs in Microsoft Intune](./media/apps-win32-app-management/apps-win32-app-10.png)  
 
diff --git a/memdocs/intune/apps/lob-apps-windows.md b/memdocs/intune/apps/lob-apps-windows.md
@@ -69,7 +69,7 @@ A line-of-business (LOB) app is one that you add from an app installation file.
     - **Publisher**: Enter the name of the publisher of the app.
     - **App Install Context**: Select the install context to be associated with this app. For dual mode apps, select the desired context for this app. For all other apps, this is pre-selected based on the package and cannot be modified.
     - **Ignore app version**: Set to **Yes** if the app developer automatically updates the app. This option applies to mobile .msi apps and Windows apps with self-updating installers (such as Google Chrome).
-    - **Command-line arguments**: Optionally, enter any command-line arguments that you want to apply to the .msi file when it runs.  An example is **/q**. Do not include the msiexec command or arguments, such as **/i** or **/x**, as they are automatically used. For more information, see [Command-Line Options](/windows/desktop/Msi/command-line-options). If the .MSI file needs additional command-line options consider using [Win32 app management](app-management.md).
+    - **Command-line arguments**: Optionally, enter any command-line arguments that you want to apply to the .msi file when it runs.  An example is **/q**. Do not include the msiexec command or arguments, such as **/i** or **/x**, as they are automatically used. For more information, see [Command-Line Options](/windows/desktop/Msi/command-line-options). If the .MSI file needs additional command-line options consider using [Win32 app management](apps-win32-app-management.md).
     - **Category**: Select one or more of the built-in app categories, or select a category that you created. Categories make it easier for users to find the app when they browse through the company portal.
     - **Show this as a featured app in the Company Portal**: Display the app prominently on the main page of the company portal when users browse for apps.
     - **Information URL**: Optionally, enter the URL of a website that contains information about this app. The URL appears in the company portal.
diff --git a/memdocs/intune/apps/vpp-apps-ios.md b/memdocs/intune/apps/vpp-apps-ios.md
@@ -209,7 +209,7 @@ You can renew an Apple Business Manager location token (Apple VPP token) by down
 To renew an Apple Business Manager location token (Apple VPP token), use the following steps:
 
 1. Navigate to [Apple Business Manager](https://business.apple.com/) or [Apple School Manager](https://school.apple.com/).
-2. Download the existing token in **Apple Business (or School) Manager**, by selecting **Settings** > **Apps and Books** > **My Server Tokens**.
+2. Download the existing token in **Apple Business (or School) Manager**, by selecting **Preferences** > **Payments and Billing** > **Apps and Books** > **Server Tokens**.
 3. Update the token in [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) by selecting **Tenant administration** > **Connectors and tokens** > **Apple VPP tokens**.
 4. Select the VPP token you are renewing, click **Edit** on the Basics category, upload the new token on this page, and then save your changes.
 
diff --git a/memdocs/intune/protect/endpoint-security-edr-policy.md b/memdocs/intune/protect/endpoint-security-edr-policy.md
@@ -173,7 +173,7 @@ Before you can deploy policy to devices managed by Configuration Manager, set up
 
 5. On the **Basics** page, enter a name and description for the profile, then choose **Next**.
 
-6. On the **Configuration settings** page, configure the settings you want to manage with this profile. The onboarding package is automatically included and isn’t something you can configure.
+6. On the **Configuration settings** page, Choose **Auto from Connector**  for **Microsoft Defender for Endpoint Clinet configuration package type**. Configure the **Sample Sharing** and **Telemetry Reporting Frequency** settings you want to manage with this profile. 
 
    When your done configuring settings, select **Next**.
 
@@ -215,4 +215,4 @@ You can view details about the EDR policies you deploy in the Microsoft Endpoint
 
 View details for the settings in the deprecated Endpoint detection and response profile for the *Windows 10 and later* platform:
 
-- [Endpoint detection and response profile settings](endpoint-security-edr-profile-settings.md) you can configure for both platforms and profiles.
+- [Endpoint detection and response profile settings](endpoint-security-edr-profile-settings.md) you can configure for both platforms and profiles.
diff --git a/memdocs/intune/protect/includes/security-config-mgt-prerequisites.md b/memdocs/intune/protect/includes/security-config-mgt-prerequisites.md
@@ -28,7 +28,7 @@ When a device that is domain joined creates a trust with Azure Active Directory,
 - Azure Active Directory Connect (AAD Connect) must be synchronized to the tenant that is used from Microsoft Defender for Endpoint
 - Hybrid Azure Active Directory Join must be configured in your environment (either through Federation or AAD Connect Sync)
 - AAD Connect Sync must include the device objects *in scope* for synchronization with Azure Active Directory (when needed for join)
-- AAD Connect rules for sync [must be modified for Server 2012 R2](/microsoft-365/security/defender-endpoint/troubleshoot-security-config-mgt?view=o365-worldwide#instructions-for-applying-computer-join-rule-in-aad-connect) (when support for Server 2012 R2 is needed)
+- AAD Connect rules for sync [must be modified for Server 2012 R2](/microsoft-365/security/defender-endpoint/troubleshoot-security-config-mgt#instructions-for-applying-computer-join-rule-in-aad-connect) (when support for Server 2012 R2 is needed)
 - All devices must register in the Azure Active Directory of the tenant that hosts Microsoft Defender for Endpoint. Cross-tenant scenarios are not supported.
 
 
diff --git a/memdocs/intune/protect/windows-hello.md b/memdocs/intune/protect/windows-hello.md
@@ -75,7 +75,7 @@ END OLD -->
 
 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
 
-2. Go to **Devices** >  **Enrollment** > **Enroll devices** > **Windows enrollment** > **Windows Hello for Business**. The Windows Hello for Business pane opens.
+2. Go to **Devices** > **Enroll devices** > **Windows enrollment** > **Windows Hello for Business**. The Windows Hello for Business pane opens.
 
 3. Select from the following options for **Configure Windows Hello for Business**:
 
