Merge branch 'main' into release-intune-2207

Author: v-alje

memdocs/intune/apps/apps-configure-chrome-android.md

@@ -47,7 +47,7 @@ You can use an Intune app configuration policy to configure Google Chrome for An
 
     ![Search and approve Google Chrome](./media/apps-configure-chrome-android/search.png)
 
-4. Assign Google Chrome to a user group as a required app type. Google Chrome will be deployed automatically when the device is enrolled into Intune.
+4. Assign Google Chrome to a group as a required app type. Google Chrome will be deployed automatically when the device is enrolled into Intune.
 
 For additional details about adding a Managed Google Play app to Intune, see [Managed Google Play store apps](apps-add-android-for-work.md#managed-google-play-store-apps).
 

memdocs/intune/apps/apps-monitor.md

@@ -89,7 +89,7 @@ A device status list is shown when you select **Device install status** in the *
 | **Last check-in**    | The date of the device's last sync with Intune.                                                                                                                                                                                                                  |
 
 > [!NOTE]
-> Even if the App is targetted to device context and into a device group, the user name will always be reported. You may refer to the corresponded [API Call](/graph/api/intune-apps-mobileappinstallstatus-get?view=graph-rest-beta). Additionally, the system context may appear as "No user".
+> Even if the App is targetted to device context and into a device group, the user name will always be reported. You may refer to the corresponded [API Call](/graph/api/intune-apps-mobileappinstallstatus-get). Additionally, the system context may appear as "No user".
 
 ### User install status
 

memdocs/intune/apps/intune-management-extension.md

@@ -236,7 +236,7 @@ To see if the device is auto-enrolled, you can:
 
 - To isolate scripting problems, you can:
 
-  - Review the PowerShell execution configuration on your devices. See the [PowerShell execution policy](/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1) for guidance.
+  - Review the PowerShell execution configuration on your devices. See the [PowerShell execution policy](/powershell/module/microsoft.powershell.security/set-executionpolicy) for guidance.
   - Run a sample script using the Intune management extension. For example, create the `C:\Scripts` directory, and give everyone full control. Run the following script:
 
     ```powershell

memdocs/intune/apps/vpp-apps-ios.md

@@ -57,6 +57,9 @@ Location tokens are volume purchase licenses that were commonly known as Volume
 ## How are purchased apps licensed?
 Purchased apps can be assigned to groups using two types of licenses that Apple offers for iOS/iPadOS and macOS devices.
 
+> [!NOTE]
+> Device-licensed VPP apps must be installed and updated through the MDM channel only. Users cannot go the store directly to manually install or update a VPP app.
+
 | Action | Device Licensing | User Licensing |
 |------- | -----------------| ---------------|
 | App   Store sign-in | Not required. | Each end user must use a unique Apple ID when prompted   to sign in to App Store. |
@@ -261,6 +264,9 @@ The license should be updated within a few hours after installing or uninstallin
 ### Is it possible to oversubscribe an app and, if so, in what circumstance?
 
 Yes. The Intune admin can oversubscribe an app. For example, if the admin purchases 100 licenses for app XYZ, and then targets the app to a group with 500 members in it. The first 100 members (users or devices) will get the license assigned to them, the rest of the members will fail on license assignment.
+   
+> [!NOTE]
+> When the amount of used licenses is greater than or equal to 50% of total available licenses for a specific app, an alert will appear under the Enrollment alerts tab. The alert will disappear when the amount of used licenses is less than 50% of total available licenses for the app. 
 
 ## Next steps
 

memdocs/intune/enrollment/device-enrollment-manager-enroll.md

@@ -45,7 +45,7 @@ A device enrollment manager can use the following methods to enroll devices in I
 
 - [Windows Autopilot](../../autopilot/enrollment-autopilot.md)
 - [Windows devices bulk enrollment](windows-bulk-enroll.md)
-- DEM-initated via Company Portal enrollment   
+- DEM-initiated via Company Portal enrollment   
 - DEM-initiated via Azure AD-join  
 
 > [!TIP]

memdocs/intune/fundamentals/reports-export-graph-available-reports.md

@@ -7,7 +7,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 12/02/2021
+ms.date: 07/20/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: fundamentals
@@ -683,6 +683,18 @@ You can choose to filter the `DevicesWithInventory` report's output based on the
 - `EnrollmentType` 
 - `PartnerFeaturesBitmask` 
 
+The `ProcessorArchitecture` mappings for Windows 10+ are the following:
+- 9 = x64
+- 5 = ARM
+- 12 = ARM64
+- 0 = x86
+- default = Unknown
+
+The `ProcessorArchitecture` mappings for macOS are the following:
+- 9 = x64
+- 12 = ARM64
+- default = unknown
+
 ## FirewallStatus  
 
 The following table contains the possible output when calling the `FirewallStatus` report:

memdocs/intune/fundamentals/whats-new.md

@@ -60,6 +60,19 @@ You can use RSS to be notified when this page is updated. For more information,
 ### Scripts
 -->
 
+## Week of July 18, 2022
+
+### Device management
+
+#### New event viewers to assist in debugging WMI issues<!-- 14712854  -->
+Intune’s remote action to [collect diagnostics](../remote-actions/collect-diagnostics.md#collect-diagnostics) has been expanded to collect details about Windows Management Instrumentation (WMI) app issues.
+
+The new event viewers include the following:
+- Microsoft-Windows-WMI-Activity/Operational
+- Microsoft-Windows-WinRM/Operational
+
+For more information about Windows device diagnostics, see [Collect diagnostics from a Windows device](../remote-actions/collect-diagnostics.md).
+
 ## Week of July 4, 2022
 
 ### Device management
@@ -546,7 +559,7 @@ For more information, go to
 [Using Azure Virtual Desktop multi-session with Microsoft Intune](../fundamentals/azure-virtual-desktop-multi-session.md)
 
 #### View a managed device's group membership<!-- 4100067 -->
-In the monitor section of the **Devices** workload of Intune, you can view the group membership of all AAD groups for a managed device. You can select **Group Membership** by signing in to [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and selecting **Devices** > **Monitor** > *select a device* > **Group Membership**. For more information, see [Device group membership report](../fundamentals/reports.md#device-group-membership-report-organizational).
+In the monitor section of the **Devices** workload of Intune, you can view the group membership of all Azure AD groups for a managed device. You can select **Group Membership** by signing in to [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and selecting **Devices** > **Monitor** > *select a device* > **Group Membership**. For more information, see [Device group membership report](../fundamentals/reports.md#device-group-membership-report-organizational).
 
 #### Improved certificate reporting details<!-- 13316515 -->
 We’ve changed what Intune displays when you view certificate details for devices and certificate profiles. To view the report, in the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) go to > **Devices** > **Monitor** > **Certificates**.

memdocs/intune/remote-actions/collect-diagnostics.md

@@ -112,6 +112,8 @@ Event Viewers:
 1. Microsoft-Windows-SENSE/Operational
 1. Microsoft-Windows-SenseIR/Operational
 1. Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
+1. Microsoft-Windows-WinRM/Operational
+1. Microsoft-Windows-WMI-Activity/Operational
 1. Setup
 1. System
 

windows-365/business/remotely-manage-business-cloud-pcs.md

@@ -93,7 +93,7 @@ To assign a Windows 365 Administrator role to a user:
 5. Scroll down to the **Devices** section.
 6. Select **Windows 365 Administrator** > **Save changes**.
 
-You can also assign the Windows 365 admin role through the Microsoft 365 Admin Center and Azure Active Directory.
+You can also assign the Windows 365 Administrator role through the Microsoft 365 Admin Center and Azure Active Directory.
 
 ## Next steps
 

windows-365/enterprise/role-based-access.md

@@ -34,9 +34,9 @@ Role-based access control (RBAC) helps you manage who has access to your organiz
 
 For more information, see [Role-based access control (RBAC) with Microsoft Intune](/mem/intune/fundamentals/role-based-access-control).
 
-## Windows 365 Admin role
+## Windows 365 Administrator role
 
-Windows 365 supports the Windows 365 Admin role available for role assignment through the Microsoft Admin Center and Azure Active Directory (Azure AD). With this role, you can manage Windows 365 Cloud PCs for both Enterprise and Business editions. The Windows 365 Admin role can grant more scoped permissions than other Azure AD roles like Global Administrator. For more information, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference).
+Windows 365 supports the Windows 365 Administrator role available for role assignment through the Microsoft Admin Center and Azure Active Directory (Azure AD). With this role, you can manage Windows 365 Cloud PCs for both Enterprise and Business editions. The Windows 365 Administrator role can grant more scoped permissions than other Azure AD roles like Global Administrator. For more information, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference).
 
 ## Cloud PC built-in roles