Merge pull request #6311 from ErikjeMS/Win365dec8

OOB - new biz admin - 36859306

Author: Court72

windows-365/business/TOC.yml

@@ -11,6 +11,20 @@ items:
   href: windows-365-business-sizing.md
 - name: Cloud PC location 
   href: cloud-pc-location.md
+- name: How-to guides
+  items:
+  - name: Device and user management
+    items:
+    - name: Add a user and assign licenses
+      href: add-user-assign-licenses.md
+    - name: Assign or unassign a license
+      href: assign-unassign-license.md
+    - name: Change organization defaults
+      href: change-organization-default-settings.md
+    - name: Remotely manage Cloud PCs
+      href: remotely-manage-business-cloud-pcs.md
+    - name: Reset a user's password
+      href: reset-user-password.md
 - name: Troubleshoot
   items:
   - name: Troubleshooting

windows-365/business/add-user-assign-licenses.md

@@ -0,0 +1,43 @@
+---
+# required metadata
+title: Add a user and assign licenses in Windows 365 Business
+titleSuffix:
+description: Learn how to add a user and assign licenses in Windows 365 Business
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 12/08/2021
+ms.topic: how-to
+ms.service: cloudpc
+ms.subservice: 
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: 
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure
+ms.collection: M365-identity-device-management
+---
+
+# Add a user and assign a license
+
+You can add a user and assign them licenses by following these steps:
+
+1. Sign in to [windows365.microsoft.com](https://windows365.microsoft.com) with an Azure Active Directory (Azure AD) Global Administrator account.
+2. Select **Your organization’s Cloud PCs** > **Add a user**.
+3. Choose **Select products** to see all available licenses that can be assigned to the user.
+4. Select the licenses that you want to assign to the user > **Update**.
+5. Under **User information**, enter a first and last name, username, and select a domain name.
+6. If you want to specify a password, de-select the **Automatically create a password** box. Then, enter a password.
+7. If you don’t want to require the user to change their password when they first sign into the new Cloud PC, de-select the **This user must change their password when they first sign in** box.
+8. If you don't want to automatically email the sign-in info to the user, de-select **Email the sign-in info** box.
+9. Select **Add user**. A new Cloud PC will be created and the user can use the sign in information to access it.

windows-365/business/assign-unassign-license.md

@@ -0,0 +1,42 @@
+---
+# required metadata
+title: Assign or unassign a license in Windows 365 Business
+titleSuffix:
+description: Learn how to assign or unassign a license in Windows 365 Business
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 12/08/2021
+ms.topic: how-to
+ms.service: cloudpc
+ms.subservice: 
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: 
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure
+ms.collection: M365-identity-device-management
+---
+
+# Assign or unassign a license
+
+You can assign some licenses on [windows365.microsoft.com](https://windows365.microsoft.com).  For full license management, use the [Microsoft 365 admin center](https://admin.microsoft.com).
+
+1. Sign in to [windows365.microsoft.com](https://windows365.microsoft.com) with an Azure Active Directory (Azure AD) Global Administrator account.
+2. Select **Your organization’s Cloud PCs**.
+3. Select the user whose licenses you want to manage.
+4. Select **Licenses and apps**.
+5. Select licenses that you want to assign to the user, or deselect licenses that you want to unassign from the user.
+6. Select **Save changes**.
+    - When you assign a Windows 365 license, Windows 365 will immediately begin creating a new Cloud PC for the user.
+    - When you unassign a Windows 365 license from a user, that user can still access their Cloud PC for 24 hours. After that time, the Cloud PC will be deleted.

windows-365/business/change-organization-default-settings.md

@@ -0,0 +1,42 @@
+---
+# required metadata
+title: Change organizational default settings in Windows 365 Business
+titleSuffix:
+description: Learn how to change organizational default settings in Windows 365 Business
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 12/08/2021
+ms.topic: how-to
+ms.service: cloudpc
+ms.subservice: 
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: 
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure
+ms.collection: M365-identity-device-management
+---
+
+# Change organizational default settings
+
+By default, new Cloud PCs are created with the Windows 11 operating system and the Standard User account type. You can change these defaults by following these steps:
+
+1. Sign in to [windows365.microsoft.com](https://windows365.microsoft.com) with an Azure Active Directory (Azure AD) Global Administrator account.
+2. Select **Your organization’s Cloud PCs** > **Update organization settings**.
+3. Select your preferred operating system and account type > **Save**.
+
+Organization settings only apply to newly created Cloud PCs. When these settings are changed, they won’t change the OS or account type of existing Cloud PCs.
+
+> [!NOTE]  
+> The 1 vCPU/2 GB RAM/64 GB storage license doesn’t support the Windows 11 minimum hardware requirements. When this license is assigned to a user, they will always receive a Windows 10 Cloud PC.

windows-365/business/get-started-windows-365-business.md

@@ -61,7 +61,7 @@ If you don't already have a Microsoft 365 subscription, you can buy your Windows
 1. On the [Windows 365 Business](https://www.microsoft.com/windows-365/business) page, select **See plans and pricing**.
 2. On the next page, select the subscription you want to purchase, and then select **Buy now**.
 3. On the **Thank you for choosing Windows 365 Business** page, follow the steps to set up your account.
-4. In **step 5 - Confirmation details**, if you are ready to assign licenses to users, select **Get started** to go to your Windows 365 home page at https://windows365.microsoft.com.
+4. In **step 5 - Confirmation details**, if you are ready to assign licenses to users, select **Get started** to go to your [Windows 365 home page](https://windows365.microsoft.com).
 5. On the Windows 365 home page, in the **Quick actions** section, select **Manage your organization**. This takes you to the Microsoft 365 admin center where you can assign licenses to users.
 
 Users without the Global or Billing admin roles can use self-service purchase to buy a subscription for Windows 365 Business directly from the [Windows 365 Business products site](https://www.microsoft.com/windows-365/business?rtc=1). A user who buys a subscription this way is granted a limited view of the [Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=2024339), where they can assign licenses for that subscription to other users in their organization. Assigning a license to another user automatically creates a Windows 365 Business Cloud PC for them, which can be accessed from the [Windows 365 home page](https://windows365.microsoft.com/).
@@ -83,7 +83,10 @@ If you already have a Microsoft 365 tenant and are a Global or Billing admin, yo
 
 ## Assign licenses to users
 
-Whether you purchased your subscriptions through the Windows 365 products site, or through the Microsoft 365 admin center, you can [assign licenses to users](/microsoft-365/admin/manage/assign-licenses-to-users) through the **Billing** page in the Microsoft 365 admin center.
+Whether you purchased your subscriptions through the Windows 365 products site, or through the Microsoft 365 admin center, you can assign licenses to users through either:
+
+- The **Billing** page in the Microsoft 365 admin center. For more information, see [assign licenses to users](/microsoft-365/admin/manage/assign-licenses-to-users).
+- [windows365.microsoft.com](https://windows365.microsoft.com). For more information, see [Assign or unassign a license](assign-unassign-license.md).
 
 You can assign different Windows 365 Business license types to a user, based on the users business need. See [Windows 365 Business sizing options](windows-365-business-sizing.md)  for guidance on which license type might be suitable for your users.
 
@@ -94,7 +97,7 @@ You can assign different Windows 365 Business license types to a user, based on
 
 After licenses are assigned, let your users know that there are two different ways in which they can access their Cloud PCs:
 
-- Windows 365 home page (https://windows365.microsoft.com)
+- Windows 365 home page [(https://windows365.microsoft.com)](https://windows365.microsoft.com)
 - Microsoft Remote Desktop client
 
 ### Windows 365 home page
@@ -164,10 +167,32 @@ All Windows 365 Business users have local administrator privileges on their Clou
 > [!IMPORTANT]
 > If a user tries to use a Microsoft 365 Business Standard license on their Cloud PC, they might see the following error: "Account Issue: The products we found in your account cannot be used to activate Office in shared computer scenarios." In this scenario, the user must uninstall the version of Office installed on their Cloud PC and install a new copy from Office.com.
 
-## Management through Intune
+## Managing Cloud PCs
+
+As an admin, you can manage Cloud PCs in your organization in various ways:
+
+### windows365.microsoft.com
+
+You can sign in to [windows365.microsoft.com](https://windows365.microsoft.com) to:
+
+- [Add a user and assign a license](add-user-assign-licenses.md).
+- [Assign or unassign licenses](assign-unassign-license.md).
+- [Change organization default settings](change-organization-default-settings.md).
+- [Use remote actions on Cloud PCs](remotely-manage-business-cloud-pcs.md).
+- [Reset a user's password](reset-user-password.md).
+
+### Microsoft 365 admin center
+
+You can sign in to the [Microsoft 365 admin center](https://admin.microsoft.com) to [use remote actions on Cloud PCs](remotely-manage-business-cloud-pcs.md).
+
+### Intune
 
 If the organization and users are properly licensed, Cloud PCs can be enrolled to Intune using the same procedure for [enrolling Windows 10 machines to Intune](/mem/intune/user-help/enroll-windows-10-device).
 
+### Microsoft Graph
+
+You can also use the Microsoft Graph APIs to manage Cloud PCs. For more information, see [Overview for Windows 365 Cloud PC on Microsoft Graph](/graph/cloudpc-concept-overview).
+
 ## Sending outbound email messages using port 25 is not supported
 
 Sending outbound email messages directly on port 25 from a Windows 365 Business Cloud PC is not supported. Communication over port TCP/25 is blocked at the Windows 365 Business network layer for security reasons. If your email service uses Simple Mail Transfer Protocol (SMTP) for your email client application, you can use their web interface, if available. Or you can ask your email service provider for help to configure their email client app to use secure SMTP over Transport Layer Security (TLS), which uses a different port.

windows-365/business/media/add-user-assign-licenses/add-user.png

@@ -0,0 +1,98 @@
+---
+# required metadata
+title: Remotely manage Windows 365 Business Cloud PCs
+titleSuffix:
+description: Learn how to remotely manage Windows 365 Business Cloud PCs
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 12/08/2021
+ms.topic: how-to
+ms.service: cloudpc
+ms.subservice: 
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: 
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure; get-started
+ms.collection: M365-identity-device-management
+---
+
+# Remotely manage Windows 365 Business Cloud PCs
+
+You can remotely manage Windows 365 Business Cloud PCs by using the Microsoft 365 admin center or windows365.microsoft.com. Each supports several remote management [actions](#remote-management-actions).
+To use these remote actions, you must have either of the following Azure Active Directory (Azure AD) role-based access roles:
+
+- [Global Administrator]( /azure/active-directory/roles/permissions-reference#global-administrator)
+- [Windows 365 Administrator]( /azure/active-directory/roles/permissions-reference#windows-365-administrator)
+
+## Remotely manage Cloud PCs on windows.365.microsoft.com
+
+1. Sign in to [windows365.microsoft.com](https://windows365.microsoft.com).
+2. Select **Your organization’s Cloud PCs**.
+3. Select the user whose Cloud PC you want to manage.
+4. Select **Devices**.
+5. Select the Cloud PC you want to manage.
+6. Select the action that you want to perform.
+
+## Remotely manage Cloud PCs by using the Microsoft 365 admin center simplified view
+
+1. Sign in to [Microsoft 365 admin center](https://admin.microsoft.com).
+2. Select the user whose Cloud PC you want to manage.
+3. Select **Devices**.
+4. Select the Cloud PC you want to manage.
+5. Select the action that you want to perform.
+
+## Remotely manage Cloud PCs by using the Microsoft 365 admin center
+
+1. Sign in to [Microsoft 365 admin center](https://admin.microsoft.com).
+2. In the left navigation select **Users** -> **Active users**.
+3. Select the user whose Cloud PC you want to manage.
+4. Select **Devices**.
+5. Select the Cloud PC you want to manage.
+6. Select the action that you want to perform .
+
+## Remote management actions
+
+The following remote actions are supported on winodws365.microsoft.com and the Microsoft 365 admin center:
+
+**Change account type**: Change the role of a user on their Cloud PC. Options include Standard User and Local Administrator. For the role change to take effect, the user must sign out of Windows on their Cloud PC and sign back in. Alternatively, the admin can remotely restart the Cloud PC, but the user may lose any unsaved data.
+
+**Rename**: Change the Cloud PC name that users see on windows365.microsoft.com.
+
+**Reset**: If a user is having trouble with their Cloud PC, admins can reset the Cloud PC for them. This action:
+
+- Reinstalls Windows (with the option to choose between Windows 11 and Windows 10).
+- Removes all apps and locally stored files.
+- Removes changes made to settings.
+
+**Restart**: Restart a user’s Cloud PC on their behalf.
+
+## Grant remote action permissions to another user
+
+If you want to grant remote action permissions to another user, you can assign the Windows 365 Administrator role to them. This role is scoped to performing actions that can alter the state of a Cloud PC. This role cannot manage users, licenses, or billing.
+
+To assign a Windows 365 Administrator role to a user:
+
+1. Sign in to [windows365.microsoft.com](https://windows365.microsoft.com).
+2. Select **Your organization’s Cloud PCs**.
+3. Select the user whose Cloud PC you want to manage.
+4. Select **Manage roles** > **Admin center access** > **Show all by category**.
+5. Scroll down to the **Devices** section.
+6. Select **Windows 365 Administrator** > **Save changes**.
+
+You can also assign the Windows 365 admin role through the Microsoft 365 Admin Center and Azure Active Directory.
+
+## Next steps
+
+You can manage users and Cloud PCs in other ways. For more information, see [Managing Cloud PCs](get-started-windows-365-business.md#).