Skip to content

Commit 8a2ee6f

Browse files
Merge branch 'main' into patch-3
2 parents 5b001e9 + 7aaab84 commit 8a2ee6f

1,826 files changed

Lines changed: 19328 additions & 10334 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,3 +16,4 @@ _themes/
1616
.openpublishing.build.mdproj
1717
.openpublishing.buildcore.ps1
1818
packages.config
19+
.DS_Store

.openpublishing.redirection.json

Lines changed: 80 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,40 @@
11
{
22
"redirections": [
3+
{
4+
"source_path": "memdocs/intune/fundamentals/end-user-mam-apps-android.md",
5+
"redirect_url": "/mem/intune/user-help/use-managed-apps-on-your-device-android",
6+
"redirect_document_id": true
7+
},
8+
{
9+
"source_path": "memdocs/intune/configuration/vpn-settings-windows-phone-8-1.md",
10+
"redirect_url": "https://support.microsoft.com/windows/windows-phone-8-1-end-of-support-faq-7f1ef0aa-0aaf-0747-3724-5c44456778a3",
11+
"redirect_document_id": false
12+
},
13+
{
14+
"source_path": "memdocs/intune/configuration/email-settings-windows-phone-8-1.md",
15+
"redirect_url": "https://support.microsoft.com/windows/windows-phone-8-1-end-of-support-faq-7f1ef0aa-0aaf-0747-3724-5c44456778a3",
16+
"redirect_document_id": false
17+
},
18+
{
19+
"source_path": "memdocs/intune/configuration/device-restrictions-windows-phone-8-1.md",
20+
"redirect_url": "https://support.microsoft.com/windows/windows-phone-8-1-end-of-support-faq-7f1ef0aa-0aaf-0747-3724-5c44456778a3",
21+
"redirect_document_id": false
22+
},
23+
{
24+
"source_path": "memdocs/intune/configuration/custom-settings-windows-phone-8-1.md",
25+
"redirect_url": "https://support.microsoft.com/windows/windows-phone-8-1-end-of-support-faq-7f1ef0aa-0aaf-0747-3724-5c44456778a3",
26+
"redirect_document_id": false
27+
},
28+
{
29+
"source_path": "memdocs/intune/apps/store-apps-windows-phone-8-1.md",
30+
"redirect_url": "/mem/intune/apps/apps-add",
31+
"redirect_document_id": false
32+
},
33+
{
34+
"source_path": "memdocs/intune/apps/lob-apps-windows-phone.md",
35+
"redirect_url": "/mem/intune/apps/apps-add",
36+
"redirect_document_id": false
37+
},
338
{
439
"source_path": "memdocs/intune/user-help/set-or-change-your-password-windows.md",
540
"redirect_url": "https://support.microsoft.com/windows/windows-sign-in-options-and-account-protection-7b34d4cf-794f-f6bd-ddcc-e73cdf1a6fbf",
@@ -924,15 +959,20 @@
924959
"redirect_document_id": false
925960
},
926961
{
927-
"source_path": "windows-365/end-user-access-cloud-pc.md",
928-
"redirect_url":"/windows-365/enterprise/end-user-access-cloud-pc",
962+
"source_path": "windows-365/enterprise/end-user-access-cloud-pc.md",
963+
"redirect_url":"windows-365/end-user-access-cloud-pc",
929964
"redirect_document_id": false
930965
},
931966
{
932-
"source_path": "windows-365/end-user-hardware-requirements.md",
933-
"redirect_url":"/windows-365/enterprise/end-user-hardware-requirements",
967+
"source_path": "windows-365/enterprise/end-user-hardware-requirements.md",
968+
"redirect_url":"windows-365/end-user-hardware-requirements",
934969
"redirect_document_id": false
935-
},
970+
},
971+
{
972+
"source_path": "windows-365/business/get-users-started.md",
973+
"redirect_url":"/windows-365/get-users-started",
974+
"redirect_document_id": false
975+
},
936976
{
937977
"source_path": "windows-365/get-cloud-pc-audit-logs-using-powershell.md",
938978
"redirect_url":"/windows-365/enterprise/get-cloud-pc-audit-logs-using-powershell",
@@ -1092,6 +1132,40 @@
10921132
"source_path": "memdocs/configmgr/sum/deploy-use/uup-preview.md",
10931133
"redirect_url": "/mem/configmgr/sum/index",
10941134
"redirect_document_id": true
1135+
},
1136+
{
1137+
"source_path": "windows-365/enterprise/on-premises-network-connections.md",
1138+
"redirect_url": "/windows-365/enterprise/azure-network-connections",
1139+
"redirect_document_id": false
1140+
},
1141+
{
1142+
"source_path": "windows-365/enterprise/create-on-premises-network-connection.md",
1143+
"redirect_url": "/windows-365/enterprise/create-azure-network-connection",
1144+
"redirect_document_id": false
1145+
},
1146+
{
1147+
"source_path": "windows-365/enterprise/edit-on-premises-network-connection.md",
1148+
"redirect_url": "/windows-365/enterprise/edit-azure-network-connection",
1149+
"redirect_document_id": false
1150+
},
1151+
{
1152+
"source_path": "windows-365/enterprise/delete-on-premises-network-connection.md",
1153+
"redirect_url": "/windows-365/enterprise/delete-azure-network-connection",
1154+
"redirect_document_id": false
1155+
},
1156+
{
1157+
"source_path": "windows-365/enterprise/troubleshoot-on-premises-network-connection.md",
1158+
"redirect_url": "/windows-365/enterprise/troubleshoot-azure-network-connection",
1159+
"redirect_document_id": false
1160+
},
1161+
{
1162+
"source_path": "windows-365/get-users-started.md",
1163+
"redirect_url":"/windows-365/end-user-access-cloud-pc",
1164+
"redirect_document_id": false
1165+
}, {
1166+
"source_path": "memdocs/intune/remote-actions/remote-assist-mobile-devices.md",
1167+
"redirect_url": "/mem/intune/remote-actions/remote-help",
1168+
"redirect_document_id": false
10951169
}
10961170
]
1097-
}
1171+
}

memdocs/analytics/app-reliability.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Application reliability in endpoint analytics
33
description: Get details about application reliability in endpoint analytics
44
titleSuffix: Microsoft Endpoint Manager
5-
ms.date: 03/01/2021
5+
ms.date: 03/31/2022
66
ms.prod: configuration-manager
77
ms.technology: configmgr-analytics
88
ms.topic: conceptual
@@ -89,6 +89,8 @@ Selecting a device name opens the **Application reliability** tab for that devic
8989

9090
## Known issues
9191

92+
[!INCLUDE [Endpoint analytics export to csv value mapping known issue](includes/known-issue-csv-mapping.md)]
93+
9294
### Some eligible, enrolled devices aren't appearing in the report due to a client certificate issue
9395

9496
**Scenario**: In certain uncommon situations, devices may be missing from the **Application reliability** report. You can determine how many devices are reporting application reliability data by looking at the number of records in the table on the **Device performance** tab of the **Application reliability** report.

memdocs/analytics/data-collection.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,11 +30,11 @@ Endpoint analytics is available in all Intune locations in global Azure. Endpoin
3030

3131
1. Devices send required functional data.
3232

33-
- For Intune and co-managed devices with the assigned policy, devices send require functional data directly to the Microsoft Endpoint Management Service in the Microsoft public cloud where is processed in near real time. For more information, see [Endpoints required for Intune-managed devices](troubleshoot.md#endpoints-required-for-intune-managed-devices).
33+
- For Intune and co-managed devices with the assigned policy, devices send required functional data in near real time directly to the Microsoft Endpoint Management Service in the Microsoft public cloud where is processed every 24 hours. For more information, see [Endpoints required for Intune-managed devices](troubleshoot.md#endpoints-required-for-intune-managed-devices).
3434

3535
- For Configuration Manager-managed devices, data flows to the Microsoft Endpoint Management Service through the ConfigMgr [tenant attach](../configmgr/tenant-attach/device-sync-actions.md) connector. Devices don't need direct access to the Microsoft public cloud, but the ConfigMgr connector is cloud attached and requires connection to an Intune tenant. Devices send data to the Configuration Manager Server role every 24 hours, and the connector sends data to the Gateway Service every hour. For more information, see [Tenant attach data collection](../configmgr/tenant-attach/data-collection.md)
3636

37-
1. The Microsoft Endpoint Management service processes data for each device and publishes the results for both individual devices and organizational aggregates in the admin console using [MS Graph APIs](/graph/api/resources/intune-device-mgt-conceptual?view=graph-rest-beta&preserve-view=true). The maximum latency end to end is 25 hours and is gated by the time it takes to do the daily processing of insights and recommendations.
37+
1. The Microsoft Endpoint Management service processes data for each device and publishes the results for both individual devices and organizational aggregates in the admin console using [MS Graph APIs](/graph/api/resources/intune-device-mgt-conceptual?view=graph-rest-beta&preserve-view=true). The maximum latency end to end is 96 hours.
3838

3939
> [!Note]
4040
> When you first setup Endpoint analytics, add new clients to the [Intune data collection policy](settings.md#bkmk_profile), or [enable device upload](../configmgr/tenant-attach/device-sync-actions.md#bkmk_edit) for a new collection, the reports in endpoint analytics portal may not show complete data right away. The data required to compute the startup score for a device is generated during boot time. Depending on power settings and user behavior, it may take weeks after a device has been enrolled to show the startup score on the admin console.

memdocs/analytics/enroll-configmgr.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Quickstart - Enroll Configuration Manager devices
33
titleSuffix: Microsoft Endpoint Manager
44
description: In this quickstart, you enroll Configuration Manager devices into Endpoint analytics.
5-
ms.date: 11/15/2021
5+
ms.date: 05/03/2022
66
ms.prod: configuration-manager
77
ms.technology: configmgr-analytics
88
ms.topic: quickstart
@@ -33,7 +33,7 @@ Before you start this tutorial, make sure you have the following prerequisites:
3333
3434
### Licensing Prerequisites
3535

36-
Devices enrolled in Endpoint analytics need a valid license for the use of Microsoft Endpoint Manager. For more information, see [Microsoft Intune licensing](../intune/fundamentals/licenses.md) or [Microsoft Endpoint Configuration Manager licensing](../configmgr/core/understand/learn-more-editions.md).
36+
Devices enrolled in Endpoint analytics need a valid license for the use of Microsoft Endpoint Manager. For more information, see [Microsoft Intune licensing](../intune/fundamentals/licenses.md) or [Microsoft Endpoint Configuration Manager licensing](../configmgr/core/understand/learn-more-editions.md). Proactive remediations has an additional licensing requirement, for more information see, the [Endpoint analytics licensing requirements overview](overview.md#licensing-prerequisites).
3737

3838
## Endpoint analytics permissions
3939

memdocs/analytics/enroll-intune.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Quickstart - Enroll Intune devices
33
titleSuffix: Microsoft Endpoint Manager
44
description: In this quickstart, you enroll Intune devices into Endpoint analytics.
5-
ms.date: 10/05/2021
5+
ms.date: 05/03/2022
66
ms.prod: configuration-manager
77
ms.technology: configmgr-analytics
88
ms.topic: quickstart
@@ -43,7 +43,7 @@ To enroll devices to Endpoint analytics, they need to send required functional d
4343

4444
### Licensing Prerequisites
4545

46-
Devices enrolled in Endpoint analytics need a valid license for the use of Microsoft Endpoint Manager. For more information, see [Microsoft Intune licensing](../intune/fundamentals/licenses.md) or [Microsoft Endpoint Configuration Manager licensing](../configmgr/core/understand/learn-more-editions.md).
46+
Devices enrolled in Endpoint analytics need a valid license for the use of Microsoft Endpoint Manager. For more information, see [Microsoft Intune licensing](../intune/fundamentals/licenses.md) or [Microsoft Endpoint Configuration Manager licensing](../configmgr/core/understand/learn-more-editions.md). Proactive remediations has an additional licensing requirement, for more information see, the [Endpoint analytics licensing requirements overview](overview.md#licensing-prerequisites).
4747

4848
### Endpoint analytics permissions
4949

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
---
2+
author: mestew
3+
ms.author: mstewart
4+
ms.prod: configuration-manager
5+
ms.technology: configmgr-comanage
6+
ms.topic: include
7+
ms.date: 03/31/2022
8+
ms.localizationpriority: high
9+
---
10+
<!--Don't apply H2 in this include file since they are context driven by article. Used in startup-performance.md, work-from-anywhere.md, app-reliability.md, and scores.md files -->
11+
### Exported csv files display numerical values
12+
13+
When reporting data is exported to a `.csv` file, the exported data doesn't use the friendly names you're used to seeing in the online reports. Use the information below to map the data in the exported file into the meaning of the value:
14+
15+
**Application reliability report** </br>
16+
17+
- The `TotalAppUsageDuration` and `MeanTimeToFailure` columns in the `.csv` file are integer values with a unit of **minutes**
18+
- A `MeanTimeToFailure` value of 2147483647 means `No crash events`
19+
20+
**Per device score report** </br>
21+
22+
- A value of `-1` or `-2` in the `EndpointAnalyticsScore`, `StartupPerformanceScore`, and `AppReliabilityScore` columns means the associated score is unavailable
23+
- Health status: </br>
24+
25+
|HealthStatus `.csv` value| Report value|
26+
|---|---|
27+
|0|Unknown|
28+
|1|Insufficient data|
29+
|2|Needs attention|
30+
|3|Meeting goals|
31+
32+
**Startup performance report** </br>
33+
34+
The `CoreBootTime`, `GPBootTime`, `CoreLogonTime`, `GPLogonTime`, `DesktopUsableTime`, `Median`, and `TimePerProcess` columns are integer values with a unit of **seconds**.
35+
36+
**Work from anywhere report** </br>
37+
- Column name in `.csv` file: UpgradeEligibility </br>
38+
Report column name: Windows 11 readiness status </br>
39+
40+
|`.csv` value| Report value|
41+
|---|---|
42+
|0|Upgraded|
43+
|1|Unknown|
44+
|2|Not capable|
45+
|3|Capable|
46+
47+
- Column name in `.csv` file: GraphDeviceIsManaged </br> Report column name: Azure AD registered

memdocs/analytics/proactive-remediations.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,11 +62,14 @@ Proactive remediations requires the [licensing for Endpoint analytics](enroll-in
6262
- You can have up to 200 script packages.
6363
- A script package can contain a detection script only or both a detection script and a remediation script.
6464
- Ensure the scripts are encoded in UTF-8.
65+
- If the option **Enforce script signature check** is enabled in the [Settings](#bkmk_prs_deploy) page of creating a script package, then make sure that the scripts are encoded in UTF-8 not UTF-8 BOM.
6566
- The maximum allowed output size limit is 2048 characters.
6667
- If the option **Enforce script signature check** is enabled in the [Settings](#bkmk_prs_deploy) page of creating a script package, the script runs using the device's PowerShell execution policy. The default execution policy for Windows client computers is **Restricted**. The default execution for Windows Server devices is **RemoteSigned**. For more information, see [PowerShell execution policies](/powershell/module/microsoft.powershell.core/about/about_execution_policies#powershell-execution-policies).
6768
- Scripts built into Proactive remediations are signed and the certificate is added to the **Trusted Publishers** certificate store of the device.
6869
- When using third-party scripts that are signed, make sure the certificate is in the **Trusted Publishers** certificate store. As with any certificate, the certificate authority must be trusted by the device.
6970
- Scripts without **Enforce script signature check** use the **Bypass** execution policy.
71+
- Don't put secrets in scripts. Consider using parameters to handle secrets instead. <!--13957089-->
72+
- Don't put reboot commands in detection or remediations scripts. <!--13957089-->
7073

7174
## <a name="bkmk_prs_deploy"></a> Deploy built-in script packages
7275

memdocs/analytics/scores.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Scores, baselines, and insights in Endpoint Analytics
33
titleSuffix: Microsoft Endpoint Manager
44
description: Learn about scores, baselines, and insights in Endpoint Analytics
5-
ms.date: 03/22/2022
5+
ms.date: 03/31/2022
66
ms.prod: configuration-manager
77
ms.technology: configmgr-analytics
88
ms.topic: conceptual
@@ -80,6 +80,10 @@ Use the **Add filter** option on tables to display items that match your criteri
8080
> - The **Disk type** filter doesn't support the value **Unknown**<!--12829141-->.
8181
> - Filtering on **Startup performance score** from **Overview** > **Device Scores** returns devices with a score of "--". <!--12829158-->
8282
83+
## Known issues
84+
85+
[!INCLUDE [Endpoint analytics export to csv value mapping known issue](includes/known-issue-csv-mapping.md)]
86+
8387
## Next steps
8488

8589
- Use [Proactive remediations](proactive-remediations.md) to gather more data and take action on devices

memdocs/analytics/startup-performance.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Startup performance in Endpoint Analytics
33
titleSuffix: Microsoft Endpoint Manager
44
description: Get details about device startup performance in Endpoint Analytics
5-
ms.date: 11/15/2021
5+
ms.date: 03/31/2022
66
ms.prod: configuration-manager
77
ms.technology: configmgr-analytics
88
ms.topic: conceptual
@@ -47,7 +47,7 @@ The **Startup performance** page also provides a prioritized list of **Insights
4747

4848
Startup performance provides an insight on the number of devices on which the boot drive is a hard disk. Hard disk drives typically result in boot times three to four times longer than solid-state drives. We also report the expected improvement to start up performance you would gain by moving to solid-state drives.
4949

50-
Click though to see the list of devices that have hard disk drives. The recommended action is to upgrade these devices to solid-state drives.
50+
Click through to see the list of devices that have hard disk drives. The recommended action is to upgrade these devices to solid-state drives.
5151

5252
### <a name="bkmk_gp"></a> Group Policy
5353

@@ -74,6 +74,10 @@ The **Startup performance** page has reporting tabs that provide support for the
7474
- **Median delay**: The median delay time of the process for the counted devices.
7575
- **Total delay**: The sum of the delays for all of the counted devices.
7676

77+
## Known issues
78+
79+
[!INCLUDE [Endpoint analytics export to csv value mapping known issue](includes/known-issue-csv-mapping.md)]
80+
7781
## Next steps
7882

7983
- Use the [Work from anywhere report](work-from-anywhere.md).

0 commit comments

Comments
 (0)