Merge pull request #7065 from MicrosoftDocs/main

Publish 03/18/2022 3:30 PM PT

Author: Angela Fleischmann

memdocs/configmgr/core/clients/manage/remote-control/prerequisites-for-remote-control.md

@@ -2,7 +2,7 @@
 title: Remote control prerequisites
 titleSuffix: Configuration Manager
 description: Get the prerequisites for remote control in Configuration Manager.
-ms.date: 12/07/2021
+ms.date: 03/18/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: conceptual
@@ -55,6 +55,8 @@ Before you can run reports for remote control, install the reporting services po
 
 - Permitted viewers must be given permission to use remote control by adding these users to the **Permitted viewers of Remote Control and Remote Assistance** list in the **Remote Tools** client settings.
 
+- If the user account that you use for remote control is joined to Azure Active Directory (Azure AD), you may need to set a group policy setting on the client to be remote-controlled. In the policy path **Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options**, enable the following policy: **Network security: Allow PKU2U authentication requests to this computer to use online identities**. Also add the Azure AD user account to the local **Remote Desktop Users** group on the client.
+
 For more information, see [Configure role-based administration](../../../servers/deploy/configure/configure-role-based-administration.md).
 
 ### Remote clients

memdocs/intune/apps/apps-add-office365.md

@@ -83,7 +83,6 @@ In this step, you provide information about the app suite. This information help
     - **Developer**: Microsoft appears as the developer.
     - **Owner**: Microsoft appears as the owner.
     - **Notes**: Enter any notes that you want to associate with this app.
-    - **Logo**: The Microsoft 365 Apps logo is displayed with the app when users browse the company portal.
 2. Click **Next** to display the **Configure app suite** page.
 
 ## Step 2 - (**Option 1**) Configure app suite using the configuration designer 

memdocs/intune/protect/certificate-connector-prerequisites.md

@@ -152,6 +152,10 @@ To use SCEP with a Microsoft CA, you’ll need to add NDES to the server that ho
 
 For guidance on configuring the NDES server role for the Certificate Connector for Microsoft Intune, see [Set up NDES](../protect/certificates-scep-configure.md#set-up-ndes) in **Configure infrastructure to support SCEP with Intune**.
 
+### Azure Active Directory User
+
+When configuring the connector, you'll need to use a user account that: is either a Global Admin or Intune Admin, has an Intune license assigned, and must be a synchronized account from your local Active Directory.
+
 ## Next steps
 
 [Install the Certificate Connector for Microsoft Intune](../protect/certificate-connector-install.md)

windows-365/enterprise/add-device-images.md

@@ -68,4 +68,6 @@ Device images being used in a provisioning policy can't be deleted. Delete the p
 <!-- ########################## -->
 ## Next steps
 
-[Create a provisioning policy](create-provisioning-policy.md)
+[Create a provisioning policy](create-provisioning-policy.md).
+
+For more information on virtual machines and creating custom images in Azure, see [Virtual machines in Azure](/azure/virtual-machines/).