Merge pull request #6383 from MicrosoftDocs/release-intune-2112

Release intune 2112

Author: Erikre

memdocs/intune/apps/apps-supported-intune-apps.md

@@ -6,7 +6,7 @@ keywords:
 author: Erikre
 ms.author: erikre
 manager: dougeby
-ms.date: 11/04/2021
+ms.date: 12/06/2021
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: apps
@@ -159,6 +159,7 @@ The following apps support the core Intune App Protection Policy settings. Apps
 | **FactSet 3.0**<p><img alt="Partner app - FactSet 3.0 icon" src="./media/apps-supported-intune-apps/icon-p-factset-icon.png" width="100"> | FactSet delivers superior analytics, service, content, and technology to help investment professionals see and seize opportunity sooner. Our Factset 3.0 app is a phone optimized experience that allows our subscribing users to leverage the power and intelligence of the FactSet workstation anytime, anywhere. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.factset.wireless),<br>[App Store link (iOS)](https://apps.apple.com/app/factset-3-0/id1464041112) | 
 | **FleetSafe‪r**<p><img alt="Partner app - FleetSafe‪r icon" src="./media/apps-supported-intune-apps/icon-p-fleet.png" width="100"> | FleetSafer is a risk measurement and mitigation tool that enforces communications policies and monitors safe driving practices. FleetSafer requires a Cogosense enterprise account. FleetSafer uses GPS or a connected cogoB smart device to automatically engage when driving movement is detected, disabling access to the device and silencing all calls and notifications. Calling, text, social, and email functionality is disabled. Driving behavior is monitored. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.aegismobility.guardian),<br>[App Store link (iOS)](https://apps.apple.com/app/id957483278) |
 | **Fuze Mobile for Intune**<p><img alt="Partner app - Fuze Mobile for Intune icon" src="./media/apps-supported-intune-apps/icon-p-fuze.png" width="100"> | Fuze Mobile for Intune allows end users to communicate using voice calling, video meetings, contact center, chat messaging, and content sharing. Admins can deploy Fuze Mobile securely and at scale in a BYOD context. Fuze Mobile for Intune requires both a Fuze account and a Microsoft managed environment. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.fuze.fuzeappmdm),<br>[App Store link (iOS)](https://apps.apple.com/app/fuze-mobile-for-intune/id1530095324) |
+| **Groupdolists**<p><img alt="Partner app - Groupdolists icon" src="./media/apps-supported-intune-apps/icon-p-groupdolists.png" width="100"> | Groupdolists helps to coordinates incident response teams, whether corporate or public sector, in a single organization or across multiple organizations. Groupdolists creates a common operating picture between all responders, wherever they are, and synchronizes their efforts in real time.<p><p>Benefits include the following:<ul><li>Groupdolists brings emergency (and everyday) operating procedures to interactive life.</li><li>Groupdolists pushes task lists to response teams, regardless of their location or device, instantly synchronizing what needs to be done and by whom, as well as confirming completed tasks in chronological order.</li><li>Groupdolists increases transparency, provides greater accountability, and offers a "leadership view" for those who need to see but not touch.</li><li>Groupdolists instantly synchronizes not just tasks, but photos, videos, links, comments, and documents to all team members. Everything you use is available for reference and action.</li><li>Groupdolists provides complete after-action documentation in both PDF and Excel formats.</li></ul> | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.groupdolists.android&hl=en_CA&gl=US),<br>[App Store link (iOS)](https://apps.apple.com/us/app/groupdolists/id1260967873) |
 | **Hearsay Relate for Intune**<p><img alt="Partner app - Hearsay Relate for Intune icon" src="./media/apps-supported-intune-apps/icon-p-hearsay-relate-icon.png" width="100"> | Hearsay Relate for Intune enables advisors to manage and nurture their book of business in a protected BYOD environment with mobile application management (MAM). This version of Hearsay Relate allows IT administrators to protect corporate data while keeping advisors in touch with their book of business.<br><br> Hearsay Relate, a mobile application that enables financial services professionals to move business forward. Leverage compliant texting and seamless voice calling to connect with your entire book of business. Stay productive with calendar integration to set appointments, and schedule reminder messages for upcoming meetings, birthday greetings, and more.<br>Hearsay Relate for Intune gives enterprise users all the features they expect from Hearsay Relate, while providing IT administrators the MAM functionality they need to keep corporate data safe. In the event of a lost or stolen device, IT can remove Hearsay Relate for Intune from the device along with any sensitive data associated with it. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.hearsaysocial.messages.intune),<br>[App Store link (iOS)](https://apps.apple.com/app/hearsay-relate-for-intune/id1501771956) | 
 | **HowNow**<p><img alt="Partner app - HowNow icon" src="./media/apps-supported-intune-apps/icon-p-hownow-icon.png" width="100"> | Use HowNow to get all the knowledge you need, everywhere you work. You can bring together the knowledge, business intelligence, and insights you need from a variety of internal and external sources. HowNow is tailored to you by personalizing learning for you based on your role, business goals, skill requirements, performance, and work you’re doing. You can teach, learn, and share knowledge with your team in any format you like at anytime, from anywhere. | [Google Play link (Android)](https://play.google.com/store/apps/details?id=com.hownow.gethownow),<br>[App Store link (iOS)](https://apps.apple.com/app/hownow/id1464131703) | 
 | **iAnnotate for Intune/O365**<p><img alt="Partner app - iAnnotate for Intune/O365 icon" src="./media/apps-supported-intune-apps/icon-p-iannotate-for-intune.png" width="100">| Designed for Microsoft Intune enterprise users, iAnnotate for Intune/O365 allows you to read, annotate, and share PDFs, Microsoft Office files, images and web pages. Seamlessly integrate with OneDrive and Outlook, while easily converting all MS documents to PDFs for quick markup. IT administrators must visit https://enterprise.iannotate.com/ to activate a 30-day free trial and to view the iAnnotate for Intune deployment guide. | [App Store link (iOS)](https://apps.apple.com/app/iannotate-for-intune-o365/id1567388828) |

memdocs/intune/apps/media/apps-supported-intune-apps/icon-p-groupdolists.png

@@ -4,7 +4,7 @@ description: Add or create settings using ADMX administrative templates to confi
 ms.author: mandia
 author: MandiOhlinger
 manager: dougeby
-ms.date: 11/04/2021
+ms.date: 12/16/2021
 audience: ITPro
 ms.topic: how-to
 ms.service: microsoft-intune
@@ -15,7 +15,7 @@ ms.localizationpriority: high
 
 #ROBOTS:
 
-ms.reviewer:
+ms.reviewer: mikedano
 ms.suite: ems
 ms.custom: intune-azure
 ms.collection: M365-identity-device-management
@@ -35,7 +35,7 @@ This article applies to:
   For Microsoft Edge version 45 and earlier, see [Microsoft Edge Browser device restrictions](device-restrictions-windows-10.md#microsoft-edge-legacy-version-45-and-older).
 
 > [!NOTE]
-> Additional ADMX settings for Edge 95 and Edge updater have been added to Administrative Templates. This includes support for "Target Channel override" which allows customers to opt into the **[Extended Stable](https://blogs.windows.com/msedgedev/2021/07/15/opt-in-extended-stable-release-cycle/)** release cycle option at any point using Group Policy or through Intune.
+> Additional ADMX settings for Edge 96 and Edge updater have been added to Administrative Templates. This includes support for "Target Channel override" which allows customers to opt into the **[Extended Stable](https://blogs.windows.com/msedgedev/2021/07/15/opt-in-extended-stable-release-cycle/)** release cycle option at any point using Group Policy or through Intune.
 
 When you use Intune to manage and enforce policies, it's similar to using Active Directory group policy, or configuring local Group Policy Object (GPO) settings on user devices. But, Intune is 100% cloud.
 

memdocs/intune/configuration/administrative-templates-configure-edge.md

@@ -7,7 +7,7 @@ keywords:
 author: MandiOhlinger
 ms.author: mandia
 manager: dougeby
-ms.date: 02/24/2021
+ms.date: 12/16/2021
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -20,15 +20,15 @@ ms.assetid: 9deaed87-fb4b-4689-ba88-067bc61686d7
 #ROBOTS:
 #audience:
 
-ms.reviewer: karthib
+ms.reviewer: laarrizz
 ms.suite: ems
 search.appverid: MET150
 #ms.tgt_pltfrm:
 ms.custom: intune-azure
 ms.collection: M365-identity-device-management
 ---
 
-# Monitor device profiles in Microsoft Intune
+# Monitor device configuration profiles in Microsoft Intune
 
 Intune includes some features to help monitor and manage your device configuration profiles. For example, you can check the status of a profile, see which devices are assigned, and update the properties of a profile.
 
@@ -44,31 +44,31 @@ All of your profiles are shown. You also see the platform, the type of profile,
 After you create your device profile, Intune provides graphical charts. These charts display the status of a profile, such as it being successfully assigned to devices, or if the profile shows a conflict.
 
 1. Select an existing profile. For example, select a macOS profile.
-2. Select the **Overview** tab. In this view, the policy assignment includes the following statuses:
+2. Select the **Overview** tab. In this view, the **Profile assignment** includes the following statuses:
 
-    - **Succeeded**: Policy is applied
+    - **Completed**: Policy is applied successfully.
     - **Error**: The policy failed to apply. The message typically displays with an error code that links to an explanation.
     - **Conflict**: Two settings are applied to the same device, and Intune can't sort out the conflict. An administrator should review.
     - **Pending**: The device hasn't checked in with Intune to receive the policy yet.
     - **Not applicable**: The device can't receive the policy. For example, the policy updates a setting specific to iOS 11.1, but the device is using iOS 10.
 
 3. The top graphical chart shows the number of devices assigned to the device profile. For example, if the configuration device profile applies to macOS devices, the chart lists the count of the macOS devices.
 
-    It also shows the number of devices for other platforms that are assigned the same device profile. For example, it shows the count of the non-macOS devices.
+    It can also show the number of devices for other platforms that are assigned the same device profile. For example, it shows the count of the non-macOS devices.
 
     :::image type="content" source="./media/device-profile-monitor/device-configuration-profile-graphical-chart.png" alt-text="See or view the number of devices assigned to the device profile in Microsoft Intune and Endpoint Manager admin center.":::
 
     The bottom graphical chart shows the number of users assigned to the device profile. For example, if the configuration device profile applies to macOS users, the chart lists the count of the macOS users.
 
 4. Select the top graphical chart. **Device status** opens.
 
-    The devices assigned to the profile are listed, and it shows if the profile is successfully deployed. Also note that it only lists the devices with the specific platform (for example, macOS).
+    The devices assigned to the profile are listed, and it shows the deployment status. Also note that it only lists the devices with the specific platform (for example, macOS).
 
     Close the **Device status** details.
 
 5. Select the circle in the bottom graphical chart. **User status** opens.
 
-    The users assigned to the profile are listed, and it shows if the profile is successfully deployed. Also note that it only lists the users with the specific platform (for example, macOS).
+    The users assigned to the profile are listed, and it shows the deployment status. Also note that it only lists the users with the specific platform (for example, macOS).
 
     Close the **User status** details.
 
@@ -94,13 +94,10 @@ In **Devices** > **All devices**, you can see any settings that are causing a co
 Now that you know the conflicting setting, and the policies that include that setting, it should be easier to resolve the conflict.
 
 > [!TIP]
-> In **Devices** > **Monitor**, a list of all policies are shown, and how many devices have errors, conflicts, and more. For more information on the available reporting data, see [Intune reports](../fundamentals/reports.md).
+> In **Devices** > **Monitor**, a list of all policies are shown. The **Assignment failures (preview)** report helps troubleshoot errors and conflicts for configuration profiles that are assigned. For more information on the available reporting data, see [Intune reports](../fundamentals/reports.md).
 
 ## Device Firmware Configuration Interface profile reporting
 
-> [!WARNING]
-> Monitoring DFCI profiles is currently being created. While DFCI is in public preview, monitoring data may be missing or incomplete.
-
 DFCI profiles are reported on a per-setting basis, just like other device configuration profiles. Depending on the manufacturer's support of DFCI, some settings may not apply.
 
 With your DFCI profile settings, you may see the following states:

memdocs/intune/configuration/device-profile-monitor.md

@@ -7,7 +7,7 @@ keywords:
 author: MandiOhlinger
 ms.author: mandia
 manager: dougeby
-ms.date: 12/08/2021
+ms.date: 12/16/2021
 ms.topic: conceptual
 ms.service: microsoft-intune
 ms.subservice: configuration
@@ -20,7 +20,7 @@ ms.technology:
 
 params:
   siblings_only: true
-ms.reviewer: mikedano, chmaguir, chrisbal, priyar
+ms.reviewer: shthilla, chmaguir, chrisbal, priyar
 ms.suite: ems
 search.appverid: MET150
 #ms.tgt_pltfrm:
@@ -45,14 +45,12 @@ For Android device administrator, see [Android and Samsung Knox Standard device
 
 ## Before you begin
 
-When configuring device restriction policies, the broad range of settings enable you to tailor protection to your specific needs. To better understand how to implement specific security configuration scenarios, see the security configuration framework guidance for Android Enterprise device restriction policies.
+- Create an [Android device administrator device restrictions configuration profile](device-restrictions-configure.md).
 
-The security configuration framework is organized into distinct configuration levels that provide guidance for personally owned and supervised devices, with each level building off the previous level. The available levels and settings in each level vary by enrollment mode:
+- When creating device restriction policies, there are many settings available. To help determine the settings that are right for your organization, you can use the security configuration framework guidance:
 
-- For Android Enterprise personally-owned work profile devices: [Android personally-owned work profile security settings](../enrollment/android-work-profile-security-settings.md)
-- For Android Enterprise fully managed, dedicated, and corporate-owned work profile devices: [Android fully managed-security settings](../enrollment/android-fully-managed-security-settings.md)
-
-When ready to proceed, create an [Android device administrator device restrictions configuration profile](device-restrictions-configure.md).
+  - [Android Enterprise personally-owned work profile security settings](../enrollment/android-work-profile-security-settings.md)
+  - [Android Enterprise fully managed, dedicated, and corporate-owned work profile security settings](../enrollment/android-fully-managed-security-settings.md)
 
 ## Fully managed, dedicated, and corporate-owned work profile
 
@@ -161,6 +159,31 @@ For corporate-owned devices with a work profile, some settings only apply in the
 
 - **Contact sharing via Bluetooth (work profile-level)**: **Block** prevents users from sharing their work profile contacts with devices over Bluetooth. When set to **Not configured** (default), Intune doesn't change or update this setting. By default, the OS might allow users to share their contacts via Bluetooth.  
 
+- **Search work contacts and display work contact caller-id in personal profile**: In the personal profile, **Block** prevents users from searching work contacts, and showing work caller ID information.
+
+  When set to **Not configured** (default), Intune doesn't change or update this setting. By default, the OS might allow searching work contacts, and show work caller IDs.
+
+  [ShowWorkContactsInPersonalProfile](https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#showworkcontactsinpersonalprofile)
+
+- **Copy and paste between work and personal profiles**: **Allow** lets users copy and paste data between the work and personal profiles.
+
+  When set to **Not configured** (default), Intune doesn't change or update this setting. By default, the OS might:
+
+  - Prevent users from pasting text into the personal profile that's copied from the work profile.
+  - Allow users to copy text from the personal profile, and paste into the work profile.
+  - Allow users to copy text from the work profile, and paste into the work profile.
+
+  [CrossProfileCopyPaste](https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#crossprofilecopypaste)
+
+- **Data sharing between work and personal profiles**: Choose if data can be shared between work and personal profiles. Your options:
+
+  - **Device default**: Intune doesn't change or update this setting. By default, the OS might prevent users from sharing data in the work profile with the personal profile. Data in the personal profile can be shared in the work profile.
+  - **Block all sharing between profiles**: Prevents users from sharing data between the work and personal profiles.
+  - **Block sharing from work to personal profile**: Prevents users from sharing data in the work profile with the personal profile. Data in the personal profile can be shared with the work profile.
+  - **No restrictions on sharing**: Data can be shared between the work and personal profiles.
+
+  [CrossProfileDataSharing](https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#crossprofiledatasharing)
+
 ### System security
 
 - **Threat scan on apps**: **Require** (default) enables Google Play Protect to scan apps before and after they're installed. If it detects a threat, it may warn users to remove the app from the device. When set to **Not configured**, Intune doesn't change or update this setting. By default, the OS might not enable or run Google Play Protect to scan apps.