Merge pull request #6877 from MicrosoftDocs/main

Publish 02/22/2022 3:30 PM PT

Author: Angela Fleischmann

memdocs/autopilot/known-issues.md

@@ -28,6 +28,18 @@ This article describes known issues that can often be resolved by configuration
 
 ## Known issues
 
+### White screen during HAADJ deployment
+
+There is a UI bug on Autopilot HAADJ deployments where the Enrollment Status page is displayed as a white screen. This issue is limited to the UI and should not impact the deployment process. 
+
+### Virtual machine failing at “Preparing your device for mobile management”
+
+This error can be resolved by configuring your virtual machine with a minimum of 2 processers and 4GB of memory. 
+
+### ODJConnectorSvc.exe leaks memory
+
+When using a proxy server with the ODJConnector service, the memory file can get too large when processing requests resulting in impacts to performance. The current workaround for this issue is to restart the ODJConnectSvc.exe service.
+
 ### Reset button causes pre-provisioning to fail on retry
 
 When ESP fails during the pre-provisioning flow and the user selects the reset button, TPM attestation may fail during the retry. 

memdocs/configmgr/core/clients/deploy/deploy-clients-to-windows-computers.md

@@ -2,7 +2,7 @@
 title: Deploy clients to Windows
 titleSuffix: Configuration Manager
 description: Learn how to deploy the Configuration Manager client to Windows computers.
-ms.date: 10/01/2021
+ms.date: 02/02/2022
 ms.prod: configuration-manager
 ms.technology: configmgr-client
 ms.topic: how-to
@@ -471,10 +471,10 @@ To assign the internet-based management point after you install the client, use
 
 1. Open the **Configuration Manager** control panel on the client.  
 
-2. On the **Internet** tab, enter the fully qualified domain name (FQDN) of the internet-based management point as the **Internet FQDN**.  
+2. On the **Network** tab, enter the fully qualified domain name (FQDN) of the internet-based management point as the **Internet FQDN**.  
 
     > [!NOTE]  
-    > The **Internet** tab is available only if the client has a client PKI certificate.  
+    > The **Network** tab is available only if the client has a client PKI certificate.  
 
 3. If the client accesses the internet by using a proxy server, enter the proxy server settings.  
 

memdocs/configmgr/protect/deploy-use/defender-advanced-threat-protection.md

@@ -130,6 +130,8 @@ If your target collection contains both up-level and down-level devices, or if y
 1. Choose **Microsoft Endpoint Configuration Manager current branch and later** for the deployment method.
 1. Click **Download package**.
 1. Download the compressed archive (.zip) file and extract the contents.
+> [!Note]
+> The steps have you download the onboarding file for Windows 10 and 11 but this file is also used for up-level Server operating systems. 
 
 > [!IMPORTANT]
 > - The Microsoft Defender for Endpoint configuration file contains sensitive information which should be kept secure.

memdocs/intune/apps/manage-microsoft-edge.md

@@ -8,7 +8,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 01/19/2022
+ms.date: 02/17/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: apps
@@ -307,7 +307,7 @@ Organizations have the capability to disable Edge sync on iOS and Android.
 
 |Key  |Value  |
 |---------|---------|
-|com.microsoft.intune.mam.managedbrowser.account.syncDisabled     |**true** (default) disables Edge sync<br>**false** allows Edge sync          |
+|com.microsoft.intune.mam.managedbrowser.account.syncDisabled     |**true** disables Edge sync<br>**false** (default) allows Edge sync          |
 
 ### Manage restricted web sites
 

memdocs/intune/enrollment/android-fully-managed-security-settings.md

@@ -8,7 +8,7 @@ keywords:
 author: Lenewsad
 ms.author: lanewsad
 manager: dougeby
-ms.date: 10/01/2021
+ms.date: 02/18/2022
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: enrollment
@@ -74,9 +74,9 @@ To simplify the table below, only configured settings are listed. Undocumented d
 | ----- | ----- | ----- | ----- |
 | General | Default permission policy | Device Default ||
 | General | Factory reset | Block ||
-| General | Safe boot | Block ||
 | General | USB file transfer | Block ||
 | General | External media | Block ||
+| General | Data sharing between work and personal profiles | Device Default ||
 | System security | Threat scan on apps |Require ||
 | Device experience | Enrollment profile type | Fully managed ||
 | Device experience | Make Microsoft Launcher the default launcher | Not configured | Organizations may choose to implement Microsoft Launcher to ensure a consistent home screen experience on Fully managed devices. For more information, see [How to Setup Microsoft Launcher on Android Enterprise Fully Managed Devices with Intune](https://techcommunity.microsoft.com/t5/intune-customer-success/how-to-setup-microsoft-launcher-on-android-enterprise-fully/ba-p/1482134) |
@@ -150,6 +150,7 @@ The policy settings enforced in level 3 include all the policy settings recommen
 | General | Date and Time changes | Block ||
 | General | Tethering and access to hotspots | Block ||
 | General | Beam data using NFC | Block ||
+| General | Search work contacts and display work contact caller-id in personal profile | Block ||
 | Device password | Disabled lock screen features | Trust Agents, Unredacted Notifications ||
 | Applications | App auto-updates | Always | Organizations should adjust this setting as necessary as data plan charges may occur if app updates occur over the cellular network. |
 | Work profile password | Number of sign-in failures before wiping device | 5 | Organizations may need to update this setting to match their password policy. |