Merge pull request #7455 from MicrosoftDocs/main

Publish 04/26/2022, 10:30 AM

Author: v-dihans

memdocs/configmgr/core/plan-design/changes/whats-new-in-version-2203.md

@@ -2,7 +2,7 @@
 title: What's new in version 2203
 titleSuffix: Configuration Manager
 description: Get details about changes and new capabilities introduced in version 2203 of Configuration Manager current branch.
-ms.date: 04/08/2022
+ms.date: 04/25/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-core
 ms.topic: conceptual
@@ -201,6 +201,12 @@ Based on your feedback, we've made a few improvements to the console and user ex
 - Copy/paste is available for more objects from details panes.
 - The **Name** property is added to the details pane for configuration items, configuration item related policies, and applications.
 - Software update search results and the search criteria are now cached when you navigate to another node. When you navigate back to the **All Software Updates** node, your search criteria and results are preserved from your last query.
+- Added a search filter to the **Products** and **Classifications** tabs in the **Software Update Point Component Properties** <!--10998089, 9575773-->
+- You can now exclude subcontainers when doing **Active Directory System Discovery** and **Active Directory User Discovery** in untrusted domains <!--4655840, 9575773-->
+- Added a **Cloud Sync** column to collections to indicate if the collection is synchronizing with Azure Active Directory <!--12433024, 9575773-->
+- Added the **Collection ID** to the collection summary details tab <!--12630582, 9575773-->
+- Increased the size of the **Membership Rules** pane in the **Properties** page for collections <!--12947295, 9575773 -->
+- Added a **View Script** option for **Run PowerShell Script** steps when using the **View** action for a task sequence <!--12498818, 9575773 -->
 
 For more information, see [Console changes and tips](../../servers/manage/admin-console-tips.md#bkmk_2203).
 

memdocs/configmgr/core/servers/deploy/configure/configure-discovery-methods.md

@@ -2,7 +2,7 @@
 title: Configure discovery
 titleSuffix: Configuration Manager
 description: Configure discovery methods to find resources to manage from your network, Active Directory, and Azure Active Directory.
-ms.date: 12/01/2021
+ms.date: 04/25/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-core
 ms.topic: how-to
@@ -155,7 +155,9 @@ Although each of these discovery methods is independent of the others, they shar
           Select subcontainers to exclude from this recursive search. This option helps to reduce the number of discovered objects. Select **Add** to choose the containers under the above path. In the Select New Container dialog box, select a child container to exclude. Select **OK** to close the Select New Container dialog box.<!--1358143-->
 
           > [!Tip]  
-          > The list of Active Directory containers in the Active Directory System Discovery Properties window includes a column **Has Exclusions**. When you select containers to exclude, this value is **Yes**.  
+          > - The list of Active Directory containers in the Active Directory System Discovery Properties window includes a column **Has Exclusions**. When you select containers to exclude, this value is **Yes**.
+          > - Starting in version 2203, you can exclude subcontainers in untrusted domains for **Active Directory System Discovery** and **Active Directory User Discovery**. 
+  
 
     3. For each location, specify the account to use as the **Active Directory Discovery Account**. For more information, see [Accounts](../../../plan-design/hierarchy/accounts.md#active-directory-system-discovery-account).  
 
@@ -212,6 +214,9 @@ Starting in version 2103, you can exclude OUs from Active Directory User Discove
 
 1. Select **OK** to save the Active Directory container configuration.
 
+> [!TIP]
+> Starting in version 2203, you can exclude subcontainers in untrusted domains for **Active Directory System Discovery** and **Active Directory User Discovery**.
+
 ## <a name="azureaadisc"></a> Azure AD User Discovery
 
 Azure AD User Discovery isn't enabled or configured the same as other discovery methods. Configure it when you onboard the Configuration Manager site to Azure AD.

memdocs/configmgr/core/servers/manage/admin-console-tips.md

@@ -29,8 +29,14 @@ The following improvements were made to the console and user experience:
 - When using temporary device nodes, device actions like **Run Scripts** are now available to make the experience in the console consistent.
 - Additional Management Insights rules now have click-through actions
 - Copy/paste is available for more objects from details panes.
-   - Added the **Name** property in the details pane for configuration items, configuration item related policies, and applications
+   - Added the **Name** property in the details pane for configuration items, configuration item related policies, and applications.
 - Software update search results and the search criteria are now cached when you navigate to another node. When you navigate back to the **All Software Updates** node, your search criteria and results are preserved from your last query. Closing the console will clear the cached query.
+- Added a search filter to the **Products** and **Classifications** tabs in the **Software Update Point Component Properties**. <!--10998089, 9575773-->
+- You can now exclude subcontainers when doing **Active Directory System Discovery** and **Active Directory User Discovery** in untrusted domains. <!--4655840, 9575773-->
+- Added a **Cloud Sync** column to collections to indicate if the collection is synchronizing with Azure Active Directory. <!--12433024, 9575773-->
+- Added the **Collection ID** to the collection summary details tab <!--12630582, 9575773-->
+- Increased the size of the **Membership Rules** pane in the **Properties** page for collections. <!--12947295, 9575773 -->
+- Added a **View Script** option for **Run PowerShell Script** steps when using the **View** action for a task sequence. <!--12498818, 9575773 -->
 - The console now offers a dark theme. For more information, see [How to use the console](admin-console.md#bkmk_dark).
 
 ### <a name="bkmk_csv"></a> Export to CSV

memdocs/configmgr/core/servers/manage/create-queries.md

@@ -88,7 +88,7 @@ This section contains example WQL queries that you can use in your hierarchy or
 
 ### Computers that run Windows 10
 
-Use the following query to return the NetBIOS name and operating system version of all computers that run Windows 7.  
+Use the following query to return the NetBIOS name and operating system version of all computers that run Windows 10.  
 
 ``` WQL
 select SMS_R_System.NetbiosName,  
@@ -188,4 +188,4 @@ where SMS_Client_ComanagementState.ComgmtPolicyPresent = 1 AND SMS_Client_Comana
 
 ## Next steps
 
-[How to manage queries](manage-queries.md)
+[How to manage queries](manage-queries.md)

memdocs/configmgr/core/servers/manage/reference-for-maintenance-tasks.md

@@ -68,7 +68,7 @@ Use this task to delete aged application requests from the database. For more in
 |**Primary site**|Enabled|
 |Secondary site|Not available|
 
-### Delete Aged Application Revisions
+### Delete Unused Application Revisions
 
 Use this task to delete application revisions that are no longer referenced. For more information, see [How to revise and supersede applications](../../../apps/deploy-use/revise-and-supersede-applications.md).
 

memdocs/intune/apps/app-configuration-managed-home-screen-app.md

@@ -91,7 +91,9 @@ The following table lists the Managed Home Screen available configuration keys,
 | Show Bluetooth setting | bool | FALSE | Turning this setting to True allows the   end user to turn on or off Bluetooth and to connect to different   Bluetooth-capable devices. | ✔️ |
 | Show volume setting | bool | FALSE | Turning this setting to True allows the   end user to access a volume slider to adjust media volume. | ✔️ |
 | Show flashlight setting | bool | FALSE | Turning this setting to True allows the   end user to on or off the device's flashlight. If the device doesn't support   a flashlight, then this setting won't appear, even if configured   to True. | ✔️ |
-| Show device info setting | bool | FALSE | True allows end users to access quick info about the device from the Managed Setting app   or swipe-down. Accessible information includes device's make, model, and   serial number. | ✔️ |
+| Show device info setting | bool | FALSE | True allows end users to access quick info about the device from the Managed Setting app   or swipe-down. Accessible information includes device's make, model, and serial number for OS 8. | ✔️ |
+| Show device's name on MHS | bool | FALSE | Turn this setting to True to easily view the device's Intune portal "device name" property from the Managed Settings app or from swipe-down when **Show device info setting** is set to True. Make sure to also include the string property "Device's name," which is auto-populated by Intune with the correct value. | ❌ |
+| Show serial number for all supported OS version on MHS | choice | {{serialnumber}} | Ensure that in-app config device_serial_number is configured to display {{SerialNumber}} **Show device info setting** is set to True. This value is auto-populated by Intune with the correct value. | ❌ |
 | Enable virtual home button | bool | FALSE | True allows end users to have access to a Managed Home Screen home button that will return   the user to the Managed Home Screen from the current task they are in. | ✔️ |
 | Type of virtual home button | string | swipe_up | Use swipe_up to access home button with   a swipe up gesture. Use float to access a sticky, persistent home   button that can be moved around the screen by the end user. | ✔️ |
 | Enable notifications badge | bool | FALSE | Enables the notification badge for app icons that   shows the number of new notifications on the app. If you enable this setting,   end users will see notification badges on apps that have unread   notifications. If you keep this configuration key disabled, the end user won't see any notification badged to apps that might have unread notifications. | ✔️ |
@@ -127,8 +129,6 @@ The following table lists the Managed Home Screen available configuration keys,
 |-|-|-|-|-|
 | Exit lock task mode password | string |   | Enter a 4-6-digit code to use to temporarily drop   out of lock-task mode for troubleshooting. | ✔️ |
 | Enable easy access debug menu | bool | FALSE | Turn this setting to True to access the   debug menu from the Managed Settings app or from swipe-down while in Managed   Home Screen. The debug menu is currently where the capability to exit kiosk   mode lives, and is accessed by clicking the back button about 15 times. Keep   this setting set to False to keep the entry point to debug menu   only accessible via the back button. | ✔️ |
-| Show device's name on MHS | bool | FALSE | Turn this setting to True to easily view the device's Intune portal "device name" property from the Managed Settings app or from swipe-down while in Managed Home Screen. When using app config, make sure to also include the string property "Device's name," which is auto-populated by Intune with the correct value. | ❌ |
-| Device's serial number | choice | `{{SerialNumber}}` | Set this setting to easily view the device's serial number from the Managed Home Screen app on all Android OS versions 8 and later. This property is auto-populated by Intune with the correct value. | ❌ |
 | Enable MAX inactive time outside   of MHS | bool | FALSE | Turn this setting to True to automatically   re-launch Managed Home Screen after a set period of inactivity. The timer   will only count inactive time and, when configured, will reset each time the   user interacts with the device while outside of Managed Home Screen. Use   **MAX inactive time outside MHS** to set the inactivity timer. By default,   this setting is off. This setting can only be used if **Exit lock task mode   password** has been configured.  | ❌ |
 | MAX inactive time outside MHS | integer | 180 | Set the maximum amount of inactive time, in   seconds, that a user can spend outside of Managed Home Screen before it is   automatically re-launched. By default, this configuration is set to 180   seconds. **Enable MAX inactive time outside of MHS** must be set to true to   use this setting. | ❌ |
 | Enable MAX time outside MHS | bool | FALSE | Turn this setting to True to automatically   re-launch Managed Home Screen after a set period of time has passed. The   timer will factor in both inactive and active time spent outside of Managed   Home Screen. Use **MAX time outside MHS** to set the inactivity timer. By   default, this setting is off. This setting can only be used if **Exit lock   task mode password** has been configured. | ❌ |
@@ -287,6 +287,18 @@ The following syntax is an example JSON script with all the available configurat
             "key": "show_device_info_setting",
             "valueBool": false
         },
+	{
+            "key": "show_device_name",
+            "valueBool": false
+        },
+        {
+            "key": "device_name",
+            "valueString": "{{DeviceName}}"
+        },
+        {
+            "key": "device_serial_number",
+            "valueString": "{{SerialNumber}}"
+        },
         {
             "key": "show_managed_setting",
             "valueBool": false
@@ -488,11 +500,11 @@ The following syntax is an example JSON script with all the available configurat
                 }
             ]
         },
-		{
+	{
             "key": "show_notification_badge",
             "valueBool": true
         },
-		{
+	{
             "key": "show_screen_saver",
             "valueBool": true
         },
@@ -504,15 +516,15 @@ The following syntax is an example JSON script with all the available configurat
             "key": "screen_saver_show_time",
             "valueInteger": 0
         },
-	    {
+	{
             "key": "inactive_time_to_show_screen_saver",
             "valueInteger": 30
         },
         {
             "key": "media_detect_before_screen_saver",
             "valueBool": true
         }, 
-		{
+	{
             "key": "enable_max_inactive_time_outside_MHS",
             "valueBool": false
         },
@@ -528,7 +540,7 @@ The following syntax is an example JSON script with all the available configurat
             "key": "max_absolute_time_outside_MHS",
             "valueInteger": 600
         },
-		{
+	{
             "key": "theme_color",
             "valueString": "light"
         },
@@ -560,6 +572,22 @@ The following syntax is an example JSON script with all the available configurat
             "key": "session_PIN_complexity",
             "valueString": "simple"
         },
+	{
+            "key": "max_number_of_attempts_for_session_PIN",
+            "valueInteger": 0
+        },
+        {
+            "key": "minimum_length_for_session_PIN",
+            "valueInteger": 1
+        },
+        {
+            "key": "max_number_of_attempts_for_exit_PIN",
+            "valueInteger": 0
+        },
+        {
+            "key": "amount_of_time_before_try_exit_PIN_again",
+            "valueInteger": 0
+        }
         {
             "key": "enable_auto_signout",
             "valueBool": true
@@ -583,7 +611,9 @@ The following syntax is an example JSON script with all the available configurat
         {
             "key": "custom_privacy_statement_url",
             "valueString": "link to custom privacy statement here"
-        }
+        },
+
+
     ]
 }
 ```