Merge pull request #7514 from Brenduns/kpi-improvements-may

KPI driven updates (similar) for four baseline articles.

Author: PRMerger15

memdocs/intune/protect/security-baseline-settings-defender-atp.md

@@ -1,13 +1,13 @@
 ---
 # required metadata
 
-title: Intune security baselines settings for Microsoft Defender for Endpoint 
+title: Settings list for the Microsoft Defender for Endpoint security baseline in Microsoft Intune  
 titleSuffix: Microsoft Intune
-description: Security baseline settings supported by Intune for managing Microsoft Defender for Endpoint
+description: View a list of the settings in the Microsoft Intune security baseline for Microsoft Defender for Endpoint. This list includes the default values for settings as found in the default configuration of the baseline.
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 09/10/2021
+ms.date: 05/03/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -50,9 +50,9 @@ March 2020 v3
 
 -->
 
-# Microsoft Defender for Endpoint baseline settings for Intune
+# Settings in the Microsoft Defender for Endpoint security baseline in Intune
 
-View the Microsoft Defender for Endpoint baseline settings that are supported by Microsoft Intune. The Microsoft Defender for Endpoint baseline defaults represent the recommended configuration for Defender for Endpoint, and might not match baseline defaults for other security baselines.
+View the settings that are part of the Microsoft Defender for Endpoint baseline that ou can deploy with Microsoft Intune. This article details the settings in the available versions of the baseline and the default values for each setting. The default baseline configuration represents the recommended configuration for applicable devices. Defaults for one baseline might not match defaults from other security baselines, or from other versions of this baseline.
 
 ::: zone pivot="atp-december-2020"
 
@@ -75,7 +75,7 @@ This version of the security baseline replaces previous versions. Profiles that
 - Are now read-only. You can continue to use those profiles, but can't edit them to change their configuration.
 - Can be updated to the latest version. After you update to the current baseline version, you can edit the profile to modify settings.
 
-To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action that's available when viewing the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
+To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action. This action is available when you view the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
 
 To update a security baseline profile to the latest version of that baseline, see [Change the baseline version for a profile](../protect/security-baselines-configure.md#change-the-baseline-version-for-a-profile).
 
@@ -85,11 +85,10 @@ To update a security baseline profile to the latest version of that baseline, se
 **Microsoft Defender for Endpoint baseline for March 2020 - version 3**  
 This version of the security baseline replaces previous versions. Profiles that were created prior to the availability of this baseline version:
 
-
 - Are now read-only. You can continue to use those profiles, but can't edit them to change their configuration.
-- Can be updated to the latest version. After update the current baseline version, you can edit the profile to modify settings.
+- Can be updated to the latest version. After you update the current baseline version, you can edit the profile to modify settings.
 
-To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action that's available when viewing the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
+To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action. This action is available when you view the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
 
 To update a security baseline profile to the latest version of that baseline, see [Change the baseline version for a profile](../protect/security-baselines-configure.md#change-the-baseline-version-for-a-profile).
 
@@ -218,7 +217,7 @@ To learn more, see [Attack surface reduction rules](/windows/security/threat-pro
 
 For more information, see [WindowsDefenderApplicationGuard CSP](/windows/client-management/mdm/windowsdefenderapplicationguard-csp) in the Windows documentation.  
 
-While using Microsoft Edge, Microsoft Defender Application Guard protects your environment from sites that aren't trusted by your organization. When users visit sites that aren't listed in your isolated network boundary, the sites open in a Hyper-V virtual browsing session. Trusted sites are defined by a network boundary.  
+When you use Microsoft Edge, Microsoft Defender Application Guard protects your environment from sites that aren't trusted by your organization. When users visit sites that aren't listed in your isolated network boundary, the sites open in a Hyper-V virtual browsing session. Trusted sites are defined by a network boundary.  
 
 - **Turn on Application Guard for Edge (Options)**  
   CSP: [Settings/AllowWindowsDefenderApplicationGuard](/windows/client-management/mdm/windowsdefenderapplicationguard-csp#allowwindowsdefenderapplicationguard)

memdocs/intune/protect/security-baseline-settings-edge.md

@@ -1,13 +1,13 @@
 ---
 # required metadata
 
-title: Intune security baselines settings for Microsoft Edge 
+title: Settings list for the Microsoft Edge security baseline in Intune
 titleSuffix: Microsoft Intune
-description: Security baseline settings supported by Intune for managing Microsoft Edge browser
+description: View a list of the settings in the Microsoft Intune security baseline for Microsoft Edge browser. This list includes the default values for settings as found in the default configuration of the baseline.
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 10/23/2020
+ms.date: 05/03/2022
 ms.topic: reference
 ms.service: microsoft-intune
 ms.localizationpriority: medium
@@ -48,7 +48,7 @@ ms.collection: M365-identity-device-management
 
 # Microsoft Edge baseline settings for Intune
 
-View the Microsoft Edge web browser baseline settings that are supported by Microsoft Intune. The Microsoft Edge baseline defaults represent the recommended configuration for Microsoft Edge browsers, and might not match baseline defaults for other security baselines.
+View the settings that are part of the Microsoft Edge web browser security baseline that you can deploy with Microsoft Intune. This article details the settings in the available versions of the baseline and the default values for each setting. The default baseline configuration represents the recommended configuration for applicable devices. Defaults for one baseline might not match defaults from other security baselines, or from other versions of this baseline.
 
 ::: zone pivot="edge-october-2019"
 
@@ -73,13 +73,12 @@ To update a security baseline profile to the latest version of that baseline, se
 This version of the security baseline replaces previous versions. Profiles that were created prior to the availability of this baseline version:
 
 - Are now read-only. You can continue to use those profiles, but can't edit them to change their configuration.
-- Can be updated to the latest version. After update the current baseline version, you can edit the profile to modify settings.
+- Can be updated to the latest version. After you update to the current baseline version, you can edit the profile to modify settings.
 
-To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action that's available when viewing the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
+To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action. This action is available when you view the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
 
 To update a security baseline profile to the latest version of that baseline, see [Change the baseline version for a profile](../protect/security-baselines-configure.md#change-the-baseline-version-for-a-profile).
 
-
 ::: zone-end
 ::: zone pivot="edge-october-2019,edge-april-2020,edge-sept-2020"
 
@@ -317,7 +316,7 @@ To update a security baseline profile to the latest version of that baseline, se
 
   List the specific extensions that users can't install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed are disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.
 
-  Use **\*** to block all extensions that aren't explicitly listed in the allow list. If this policy is set to *Not Configured*, users can install any extension in Microsoft Edge.
+  Use **\*** to block all extensions that aren't explicitly listed in the allowlist. If this policy is set to *Not Configured*, users can install any extension in Microsoft Edge.
 
   Example value: extension_id1 extension_id2.  
   <br>

memdocs/intune/protect/security-baseline-settings-mdm-all.md

@@ -1,13 +1,13 @@
 ---
 # required metadata
 
-title: Intune security baselines settings for Windows 10/11 MDM
+title: Settings list for the Windows 10/11 MDM security baseline in Microsoft Intune
 titleSuffix: Microsoft Intune
-description: Review the defaults and available settings for the different versions of the Windows MDM security baseline that you can manage with Microsoft Intune.
+description: View a list of the settings in the Microsoft Intune security baseline for Windows 10/11 MDM security. This list includes the default values for settings as found in the default configuration of the baseline.
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 04/06/2022
+ms.date: 05/03/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -31,9 +31,9 @@ ms.collection:
 ---
 
 
-# Security baseline settings Windows 10 and later with Intune
+# Settings in the Windows 10/11 MDM security baseline in Intune 
 
-View the security baseline settings that Microsoft Intune supports for devices that run Windows 10 and Windows 11. The default values for settings in this baseline represent the recommended configuration for applicable devices. Defaults for one baseline might not match defaults from other security baselines, or from other versions of this baseline.
+View the settings that are part of the Windows 10/11 MDM security baseline that you can deploy with Microsoft Intune. This article details the settings in the available versions of the baseline and the default values for each setting. The default baseline configuration represents the recommended configuration for applicable devices. Defaults for one baseline might not match defaults from other security baselines, or from other versions of this baseline.
 
 - To learn about using security baselines with Intune and how to upgrade the baseline version in your security baseline profiles, see [Use security baselines](security-baselines.md).
 - The most recent baseline version is **Security Baseline for Windows 10 and later for November 2021**
@@ -60,7 +60,7 @@ This version of the security baseline replaces previous versions. Profiles that
 - Are now read-only. You can continue to use those profiles, but can't edit them to change their configuration.
 - Can be updated to the latest version. After you update to the current baseline version, you can edit the profile to modify settings.
 
-To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action that's available when viewing the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
+To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action. THis action is available when you view the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
 
 To update a security baseline profile to the latest version of that baseline, see [Change the baseline version for a profile](../protect/security-baselines-configure.md#change-the-baseline-version-for-a-profile).
 
@@ -1708,7 +1708,7 @@ This rule prevents attacks by blocking Adobe Reader from creating additional pro
 - **Turn on cloud-delivered protection**:  
   CSP: [Defender/AllowCloudProtection](/windows/client-management/mdm/policy-csp-defender#defender-allowcloudprotection)
 
-  When set to Yes, Defender will send information to Microsoft about any problems it finds. If set to Not configured, the client will return to default which enables the feature but allows the user to disable it.
+  When set to Yes, Defender will send information to Microsoft about any problems it finds. If set to Not configured, the client will return to default, which enables the feature but allows the user to disable it.
 
   **Default**: Yes
 

memdocs/intune/protect/security-baseline-settings-windows-365.md

@@ -1,13 +1,13 @@
 ---
 # required metadata
 
-title: Intune security baselines settings for Windows 365 Cloud PC
+title: Settings list for the Windows 365 Cloud PC security baseline in Intune
 titleSuffix: Microsoft Intune
-description: Review settings for the Windows 365 Cloud PC security baseline for Microsoft Intune. 
+description: View a list of the settings in the Microsoft Intune security baseline for Windows 365 Cloud PC. This list includes the default values for settings as found in the default configuration of the baseline.
 author: brenduns
 ms.author: brenduns
 manager: dougeby
-ms.date: 11/19/2021
+ms.date: 05/03/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -33,7 +33,9 @@ ms.collection: M365-identity-device-management
 > [!NOTE]
 > This security baseline is in public preview.
 
-View the settings in the Windows 365 Cloud PC security baseline for deployment by Microsoft Intune. Use this baseline to configure [Windows 365 devices](/windows-365/overview) with a recommended security configuration.
+View the settings that are part of the Windows 365 Cloud PC security baseline that you can deploy with Microsoft Intune. This article details the settings in the available versions of the baseline and the default values for each setting. The default baseline configuration represents the recommended configuration for applicable devices. Defaults for one baseline might not match defaults from other security baselines, or from other versions of this baseline.
+
+Use this baseline to configure [Windows 365 devices](/windows-365/overview) with a recommended security configuration.
 
 ::: zone pivot="win365-2101"
 
@@ -52,14 +54,14 @@ This version of the security baseline replaces previous versions. Profiles that
 - Are now read-only. You can continue to use those profiles, but can't edit them to change their configuration.
 - Can be updated to the latest version. After you update to the current baseline version, you can edit the profile to modify settings.
 
-To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action that's available when viewing the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
+To understand what's changed with this version of the baseline from previous versions, use the [Compare baselines](../protect/security-baselines.md#compare-baseline-versions) action. This action is available when you view the *Versions* pane for this baseline. Be sure to select the version of the baseline that you want to view.
 
 To update a security baseline profile to the latest version of that baseline, see [Change the baseline version for a profile](../protect/security-baselines-configure.md#change-the-baseline-version-for-a-profile).
 
 ::: zone-end
 ::: zone pivot="win365-2110,win365-2101"
 
-This article is a reference for the settings contained in this baseline. For each setting in this article, the default value identifies the Windows 365 Cloud PC team's recommended configuration for that setting as the setting is represented in the baseline. These defaults are not meant to identify the default configuration of the underlying CSP. To learn more about a setting, use the provided links to view that setting's *policy configuration service provider* (CSP) documentation or underlying rules like *attack surface reduction rule* documentation. The links in this document are the same as those you'll find when viewing information about the setting from within the Microsoft Endpoint Manager admin center.
+This article is a reference for the settings contained in this baseline. For each setting in this article, the default value identifies the Windows 365 Cloud PC team's recommended configuration for that setting as the setting is represented in the baseline. These defaults aren't meant to identify the default configuration of the underlying CSP. Use the provided links to view content for the setting's *policy configuration service provider* (CSP) or underlying rules like *attack surface reduction rule*. The links in this document are the same as the links available from within the baseline configuration UI in the Microsoft Endpoint Manager admin center.
 
 You can choose to deploy this baseline in its default configuration to apply that recommended security configuration to devices. You  can also create custom instances of the baseline to meet your own security needs.