Merge pull request #7790 from MicrosoftDocs/main

Angela Fleischmann · web-flow · commit 572c76534b7e · 2022-06-09T16:44:41.000-06:00
Publish 06/09/2022 3:30 PM PT
diff --git a/memdocs/intune/fundamentals/licenses-assign.md b/memdocs/intune/fundamentals/licenses-assign.md
@@ -7,7 +7,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 12/16/2021
+ms.date: 06/09/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: fundamentals
diff --git a/memdocs/intune/fundamentals/migration-guide-app-protection-policies.md b/memdocs/intune/fundamentals/migration-guide-app-protection-policies.md
@@ -8,7 +8,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 12/16/2021
+ms.date: 06/09/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: fundamentals
@@ -29,22 +29,19 @@ search.appverid: MET150
 ms.collection: M365-identity-device-management
 ---
 
-# Configure app protection policies (optional)
+# Configure app protection policies for migration (optional)
 
+App protection policies (APP) are rules that ensure an organization's data remains safe or contained in a managed app. A policy can be a rule that is enforced when the user attempts to access or move "corporate" data, or a set of actions that are prohibited or monitored when the user is inside the app. A managed app is an app that has app protection policies applied to it, and can be managed by Intune.
 
-App protection policies allow you to:
+App protection policies are often used to do the following tasks:
 * Encrypt apps
 * Define a PIN when the app is accessed
 * Block apps from running on jail-broken or rooted devices, and many other protections.
 
-If the user's phone is lost or stolen, you can selectively wipe the corporate data remotely while leaving the personal data intact.
+For instance, if the user's phone is lost or stolen, you can selectively wipe the corporate data remotely while leaving the personal data intact.
 
 App protection policies apply security at the app level and do not require device enrollment. You can use them with devices enrolled into Intune or not. Additionally, you can apply them to devices enrolled into a third-party MDM provider.
 
-## App protection policies with LOB apps
-
-You can also extend the mobile app protection policies to your line-of-business (LOB) apps by using the [Microsoft Intune App SDK](../developer/app-sdk-get-started.md) or the Microsoft Intune App Wrapping Tool for both iOS/iPadOS and Android platforms. For more information, see [App Wrapping Tool for iOS](../developer/app-wrapper-prepare-ios.md) and [App Wrapping Tool for Android](./../developer/app-wrapper-prepare-android.md). In addition, see [Prepare LOB apps for app protection](../developer/apps-prepare-mobile-application-management.md).
-
 ## How do app protection policies help during migration?
 
 In a migration, you must remove devices from the old MDM provider and enroll them into Intune. You should plan for this and encourage your end-users to leave the old MDM provider and immediately enroll into Intune. However, during the migration there may be users who delay completing the enrollment process and whose devices are not managed by either MDM provider.
@@ -55,6 +52,10 @@ Intune can offer corporate data protections during the migration so you can stil
 
 As you disable Conditional Access in the old MDM provider, users can still be productive while you on-board them into Intune.
 
+## App protection policies with LOB apps
+
+You can also extend the mobile app protection policies to your line-of-business (LOB) apps by using the [Microsoft Intune App SDK](../developer/app-sdk-get-started.md) or the Microsoft Intune App Wrapping Tool for both iOS/iPadOS and Android platforms. For more information, see [App Wrapping Tool for iOS](../developer/app-wrapper-prepare-ios.md) and [App Wrapping Tool for Android](./../developer/app-wrapper-prepare-android.md). In addition, see [Prepare LOB apps for app protection](../developer/apps-prepare-mobile-application-management.md).
+
 ## Task list for app protection policies
 
 - [How to create and assign app protection policies](../apps/app-protection-policies.md)
diff --git a/windows-365/enterprise/known-issues-enterprise.md b/windows-365/enterprise/known-issues-enterprise.md
@@ -55,7 +55,7 @@ Windows 365 provisioning failures may occur because both:
 
 1. Did the Azure network connection (ANC) fail with the following error: `"An internal error occurred. The virtual machine deployment timed out."`?
 2. If yes, review the related GPO. Is PowerShell Execution set to AllSigned?
-3. If it is, either remove the GPO or reset the PowerShell Execution to RemoteSigned/ByPass.
+3. If it is, either remove the GPO or reset the PowerShell Execution to Unrestricted.
 4. Retry the ANC health check. If this succeeds, retry provisioning.
 
 ## Default and custom Enrollment Status Page profiles for Windows 365 Cloud PCs
diff --git a/windows-365/enterprise/troubleshooting.md b/windows-365/enterprise/troubleshooting.md
@@ -46,7 +46,7 @@ After the installation, the optimizations to redirect audio and video to your lo
 
 ## Conditional access
 
-Make sure that you apply conditional access policies to the dedicated Windows 365 cloud app. You can apply these policies in the conditional access UI of Microsoft EndpointM Manager admin center or Azure Active Directory. The Windows 365 cloud app includes the Azure Virtual Desktop cloud app.
+Make sure that you apply conditional access policies to the both dedicated Windows 365 cloud app and the Azure Virtual Desktop cloud app. You can apply these policies in the conditional access UI of Microsoft Endpoint Manager admin center or Azure Active Directory.
 
 Any conditional access policy that you apply will affect:
 
