Merge branch 'release-intune-2209' of https://github.com/microsoftdocs/memdocs-pr into erikre-wn2209-15468520

Erikre · Erikre · commit 95402b9e9f63 · 2022-09-19T12:16:14.000-07:00
diff --git a/memdocs/autopilot/dfci-management.md b/memdocs/autopilot/dfci-management.md
@@ -73,7 +73,7 @@ You can also [change existing DFCI settings](/intune/configuration/device-firmwa
 ## OEMs that support DFCI
 
 - [Microsoft Surface](/surface/surface-manage-dfci-guide)
-- Acer: To find out which devices support DFCI, contact your device vendor or device manufacturer.
+- Acer
 
 Other OEMs are pending.
 
diff --git a/memdocs/intune/protect/certificate-authority-add-scep-overview.md b/memdocs/intune/protect/certificate-authority-add-scep-overview.md
@@ -101,7 +101,7 @@ Be sure you have the required permissions to register an Azure AD app. See [Requ
 
 6. Record your **Tenant ID**. The Tenant ID is the domain text after the @ sign in your account. For example, if your account is *admin@name.onmicrosoft.com*, then your tenant ID is **name.onmicrosoft.com**.  
 
-7. In the navigation pane for the app, go to **API permissions**, which are under **Manage**. You're going to add three separate application permissions:
+7. In the navigation pane for the app, go to **API permissions**, which are under **Manage**. You're going to add two separate application permissions:
 
    1. Select **Add a permission**:
       1. On the *Request API permissions* page, select **Intune** and then select **Application permissions**.
@@ -113,15 +113,6 @@ Be sure you have the required permissions to register an Azure AD app. See [Requ
       2. Expand **Application** and select the checkbox for **Application.Read.All** (Read all applications).
       3. Select **Add permissions** to save this configuration.
 
-   1. Use *Microsoft Graph* to add the following permissions to the app:
-
-      - **Application.Read.All** (Read all applications).
-
-      For information on how to complete this step, see [Use Microsoft Graph to configure required Azure AD Graph permissions for an app registration](/graph/migrate-azure-ad-graph-configure-permissions).
-
-      > [!NOTE]  
-      > Previously, these permissions were configured by using Azure AD Graph, and available through the App registration UI. Azure AD Graph is now deprecated and will be retired on June 30, 2022. As part of this deprecation path, the capability to add Azure AD Graph permissions to the required permissions for an app registration through the Azure portal is now disabled.
-
 8. Remain on the **API permissions** page, and select **Grant admin consent for** ***\<your tenant>***, and then select **Yes**.  
 
    The app registration process in Azure AD is complete.
diff --git a/memdocs/intune/protect/compliance-policy-monitor.md b/memdocs/intune/protect/compliance-policy-monitor.md
@@ -29,7 +29,7 @@ ms.collection:
 ---
 # Monitor results of your Intune Device compliance policies
 
-Compliance reports help you understand when devices fail to meet your [compliance configurations](../protect/device-compliance-get-started.md) and can help you identify compliance-related issues in your organization. Using these reports, you can view information on:
+Compliance reports help you understand when devices fail to meet your [compliance policies](../protect/device-compliance-get-started.md) and can help you identify compliance-related issues in your organization. Using these reports, you can view information on:
 
 - The overall compliance states of devices
 - The compliance status for an individual setting
diff --git a/memdocs/intune/remote-actions/device-locate.md b/memdocs/intune/remote-actions/device-locate.md
@@ -7,7 +7,7 @@ keywords:
 author: Smritib17
 ms.author: smbhardwaj
 manager: dougeby
-ms.date: 09/09/2022 
+ms.date: 4/12/2022 
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: remote-actions
@@ -43,11 +43,7 @@ You need to enable Windows location services in Windows Out of Box Experience (O
 
 **Locate device** - The following platforms support this capability:
 
-- **Android Enterprise** – Requires the device run *Google Play Services* version **20.06.16** or later and have Location services turned on.
-    - Android Enterprise corporate owned fully managed
-    - Android Enterprise corporate owned dedicated devices
-    - Android Enterprise corporate owned work profile
-  
+- **Android Enterprise dedicated devices** – Requires the device run *Google Play Services* version **20.06.16** or later and have Location services turned on.  
 - **iOS/iPadOS 9.3 and later** - Requires the device to be in supervised mode, and be in [lost mode](device-lost-mode.md).
 - **Windows 10**:
   - Version 20H2 (10.0.19042.789) or later
@@ -60,14 +56,16 @@ You need to enable Windows location services in Windows Out of Box Experience (O
 
 - **iOS/iPadOS 9.3 and later** - Requires the device to be in supervised mode, and be in [lost mode](device-lost-mode.md)
 - **Android Enterprise dedicated devices** - Requires the Intune app running 2202.01 or later 
-- **Android Enterprise corporate-owned work profile devices** - Requires the Intune app running 2202.01 or later
-- **Android Enterprise corporate-owned fully managed devices** - Requires the Intune app running 2202.01 or later
+- **Android Enterprise corporate-owned work profile (COPE) devices** - Requires the Intune app running 2202.01 or later
+- **Android Enterprise corporate-owned fully managed (COBO) devices** - Requires the Intune app running 2202.01 or later
 
 **Unsupported** - Device location capabilities aren't supported for the following platforms:
 
 - Android device administrator
 - Android Enterprise:
+  - Corporate-owned work profile
   - Personally-owned work profile
+  - Fully managed
 - macOS
 - Windows Holographic for Business
 - Windows Phone
@@ -118,30 +116,24 @@ To start a lost device sound alert:
 4. On the devices *Overview* pane:
    - For **iOS/iPadOS**: select **Play Lost mode sound (supervise only)**. The sound plays on an iOS/iPadOS device until the device is removed from lost mode.
 
-   - For **Android Enterprise dedicated devices**, **Android Enterprise corporate-owned work profile devices**, and **Android Enterprise corporate-owned fully managed devices** : select **Play Lost device sound**. The sound plays on an Android Enterprise dedicated device for the set duration or if notifications are enabled, until a user on the device turns it off. 
+   - For **Android Enterprise dedicated devices**, **Android Enterprise corporate-owned work profile (COPE) devices**, and **Android Enterprise corporate-owned fully managed (COBO) devices** : select **Play Lost device sound**. The sound plays on an Android Enterprise dedicated device for the set duration or if notifications are enabled, until a user on the device turns it off. 
    
    -  For **Android Enterprise dedicated devices**:
       - devices running on operating systems below version 10, a full screen activity with a **Stop Sound** button pops up. 
       - devices running on operating systems version 10 or higher, if notifications are enabled, a notification with a **Stop Sound** button shows up.
       - To configure system notifications for devices in kiosk mode, see [Android Enterprise device settings to allow or restrict features using Intune](../configuration/device-restrictions-android-for-work.md).
      
-   - For **Android Enterprise corporate-owned work profile devices**, and **Android Enterprise corporate-owned fully managed devices** :
+   - For **Android Enterprise corporate-owned work profile (COPE) devices**, and **Android Enterprise corporate-owned fully managed (COBO) devices** :
      - To configure system notifications for devices, see [Android Enterprise device settings to allow or restrict features using Intune](../configuration/device-restrictions-android-for-work.md).
 
 ## Security and privacy information for lost mode and locate device actions
 
+- No device location information is sent to Intune until you turn on this action.
 - When you use the locate device action, the latitude and longitude coordinates of the device can be retrieved by using the Graph API.
 - The data is stored for 24 hours, then removed. You can't manually remove the location data.
-
+- The data for last known locations is stored for up to seven days, and then removed.
 - Location data is encrypted, both while stored and while being transmitted.
-- For **iOS/iPadOS** devices, when you configure lost mode, you can customize a message that appears on the lock screen. In this message, to help the person that finds the device, be sure to include specific details to return the lost device.
-- For **Android Enterprise corporate owned dedicated devices**
-    - The data for last known locations is stored for up to seven days, and then removed.
-- For **iOS and Android Enterprise corporate owned fully managed**, and **Android Enterprise corporate owned work profile**. 
-    - No device location information is sent to Intune until you turn on this action.
-- For **Android Enterprise corporate owned fully managed**, **Android Enterprise corporate owned dedicated devices**, and **Android Enterprise corporate owned work profile**. 
-    - A one-time notification is received when Intune is granted location permissions. Location permissions cannot be modified in the Intune app but if desired, Google's Location Services can be turned off in the device settings.
-    - If notifications have been enabled for **Android Enterprise corporate owned fully-managed** and **Android Enterprise corporate-owned work profile** scenarios, then end-users will receive a notification when the admin uses this feature.
+- For iOS/iPadOS devices, when you configure lost mode, you can customize a message that appears on the lock screen. In this message, to help the person that finds the device, be sure to include specific details to return the lost device.
 
 ## Next steps
 
diff --git a/memdocs/intune/user-help/install-apps-cpapp-windows.md b/memdocs/intune/user-help/install-apps-cpapp-windows.md
@@ -7,7 +7,7 @@ keywords:
 author: lenewsad
 ms.author: lanewsad
 manager: dougeby
-ms.date: 10/04/2021
+ms.date: 09/16/2022
 ms.topic: end-user-help
 ms.prod:
 ms.service: microsoft-intune
@@ -41,42 +41,30 @@ Install apps on your device from the Company Portal app for Windows.
 ## Install apps
 
 1. Open the Company Portal app and sign in with your work or school account.  
-
-    ![The Company Portal app for Windows home page.](./media/RS1_AppDetailsPage_Installed_03.png)
 2. Find and install apps from any of the following sections of the Company Portal app:  
 
     * **Home**: Select from a list of your organization's featured apps.  
     * **Show all**: From the **Home page** > **Apps** section, click **Show all** to view all available apps.  
-    * **All apps**: Select this page in the navigation pane to see all available apps, including installed and featured. View, sort, and filter the apps. Search results are sorted automatically by relevancy.  
+    * **Apps**: Select this page in the navigation pane to see all available apps, including installed and featured. View, sort, and filter the apps. Search results are sorted automatically by relevancy.  
     * **App categories**: Select this page in the navigation pane to choose apps based on type or function. Apps are sorted under categories such as **Featured**, **Education**, and **Productivity**.  
     * **Search for apps**: A static search bar sits in the app's navigation pane. To find your available apps, search by app name or publisher.  
 
    >[!NOTE]
    >You can select and install multiple apps in bulk. From the **Apps** tab of the Company Portal for Windows, select the multi-select view button on the top right corner of the page. Then, select the checkbox next to each app and select the **Install Selected** button to start installation. All selected apps will install at the same time without requiring you to right-click each app or navigate to each app's page.
 
 3. Select an app.   
-4. On the apps details page, click **Install**. After installation is done, you'll see an **Installed** status.  
-
-    ![The Company Portal app for Windows, select app, App details page.](./media/RS1_AppDetailsPage_Installed_02.png)  
-    
-    ![The Company Portal app for Windows, app details page, "Installed" status showing after app is installed. Install button changes to read Reinstall.](./media/RS1_AppDetailsPage_Installed_01.png)    
-
+4. On the apps details page, click **Install**. After installation is done, the app status changes to **Installed**.  
 > [!IMPORTANT]
 > If a required app fails to install and your organization makes it available for you to manually install, select **Retry**. It could take up to ten minutes to see the updated status. If you select **Retry** again during this time and get an error, that's okay. Continue to wait the ten minutes for an updated status.   
 
 ## Share apps  
 Share and recommend apps to your work or school contacts. The following steps describe how to share a link directly from Company Portal.
 
-1. In Company Portal, right-click or press and hold on any app to open its [context menu](/windows/uwp/design/controls-and-patterns/menus).  
-
-    ![The Company Portal app for Windows, front page, showing a list of Apps and devices. The clickable "Share" context menu is visible on top of the example app's icon. ](./media/1808_ShareContext_CP_Windows.png)  
-
-2. Select **Share**.
-3. Choose from individual contacts or select another program, such as OneNote, to send to a group. If you don't see an app you want to use, select **Get apps in Store** to see other available apps.  
-
-    ![Image of the Company Portal app for Windows, Share apps pop-up page. highlighting contacts and apps. ](./media/1808_ShareApps_CP_Windows.png) 
+1. In Company Portal, right-click or press and hold the app to open the [context menu](/windows/uwp/design/controls-and-patterns/menus).  
+2. Select **Share**.  
+3. Select a single contact or select another program, such as OneNote, to share the app link with a group of people. The recipient receives a link and a message to view the app's details. The link opens the Company Portal app details page. 
 
-After you share, the recipient will receive a link and a message to view the app's details. The link opens the Company Portal **App details** page. 
+If you don't see an app you want to use, select **Get apps in Store** to see other available apps.  
 
 ## Optional and required apps
 Apps are assigned to you by your organization. Your organization will require you to have some apps and will make other apps optional. To find out which apps are required versus optional, go to **Installed apps** and look under the column **Required by your organization**.  
