Merge pull request #7566 from MicrosoftDocs/main

Publish 05/09/2022 3:30 PM PT

Author: Angela Fleischmann

memdocs/configmgr/develop/core/servers/configure/how-to-configure-network-discovery.md

@@ -1,6 +1,7 @@
 ---
 title: "Configure Network Discovery"
 titleSuffix: "Configuration Manager"
+description: "Learn how to configure the Network Discovery settings in Configuration Manager."
 ms.date: "09/20/2016"
 ms.prod: "configuration-manager"
 ms.technology: configmgr-sdk

memdocs/intune/fundamentals/whats-new.md

@@ -60,6 +60,19 @@ You can use RSS to be notified when this page is updated. For more information,
 ### Scripts
 -->
 
+## Week of May 9, 2022
+
+### Device management
+
+#### Elevation enhancements to Remote help<!-- 12453415 -->
+
+Elevation permissions will no longer be assigned when a session is started. Elevation permissions will now apply only when JIT (just in time) access is requested.  The access is requested with the click of a button on the toolbar. 
+When elevation permissions are assigned, the log off behavior for the sharer has been modified as follows:
+ - If the admin (helper) ends the remote help session, the user (sharer) will not be logged off.
+ - If the sharer tries to end the session, they will be prompted that they will be logged off if they continue.
+ - If the sharer is a local admin on their device, the access UAC prompt option will not be available to the helper as they can guide the sharer to perform elevated actions under their own profile.
+For more information about remote help, see [Use Remote help](../remote-actions/remote-help.md)
+
 ## Week of May 2, 2022
 
 ### App management

memdocs/intune/remote-actions/remote-help.md

@@ -127,15 +127,16 @@ For users that opted out of automatic updates, when an update to remote help is
 - Intune admins can download and deploy the app to enrolled devices. For more information about app deployments, see [Install apps on Windows devices](../apps/apps-windows-10-app-deploy.md#install-apps-on-windows-10-devices).
 - Individual users who have permissions to install apps on their devices can also download and install remote help.
 
-> [!NOTE]
-> - On April 5, 2022, existing users of remote help will see a recommended upgrade screen when they open the remote help app. Users will be able to continue using remote help without upgrading. 
-> - On April 12, 2022, existing users of remote help will see a mandatory upgrade screen when they open the remote help app. They will not be able to proceed until they upgrade to the latest version of remote help.
+[!NOTE]
+- In May 2022, existing users of remote help will see a recommended upgrade screen when they open the remote help app. Users will be able to continue using remote help without upgrading. 
+- On May 23, 2022, existing users of remote help will see a mandatory upgrade screen when they open the remote help app. They will not be able to proceed until they upgrade to the latest version of remote help.
+- Remote help will now require Microsoft Edge WebView2 Runtime. During the remote help installation process, if Microsoft Edge WebView2 Runtime is not installed on the device, then remote help installation will install it. When uninstalling remote help, Microsoft Edge WebView2 Runtime will not be uninstalled.
 
 ### Download remote help
 
 Download the latest version of remote help direct from Microsoft at [aka.ms/downloadremotehelp](https://aka.ms/downloadremotehelp).
 
-The most recent version of remote help is **4.0.0.0**
+The most recent version of remote help is **4.0.1.7**
 
 ### Deploy remote help as a Win32 app
 
@@ -205,7 +206,9 @@ The following Intune RBAC permissions manage the use of the remote help app. Set
 By default, the built-in **Help Desk Operator** role sets all of these permissions to **Yes**. You can use the built-in role or create custom roles to grant only the remote tasks and remote help app permissions that you want different groups of users to have. For more information on using Intune RBAC, see [Role-based access control](../fundamentals/role-based-access-control.md).
 
 > [!IMPORTANT]  
-> When a remote help session ends where a helper that has the *Elevation* permission set to Yes also uses *Full control*, the sharer is automatically signed out of their device. Therefore, it is important for helpers who are granted these permissions to understand the impact this action can have. The sharer should plan to save any active work to prevent a loss of unsaved work.
+> During a remote help session, when a helper has the *Elevation* permission, the helper will not automatically be able to view the sharer's UAC prompt. Instead, for a non-admin sharer, a button will appear on the helper's remote help toolbar that will allow them to request access to the UAC prompt on the sharer's device. Once requested and accepted, the helper will be able to perform elevated actions on the sharer's device. 
+> When the sharer ends the remote help session, they will be shown a dialog box that will warn them that if they continue, they will be logged off.
+> If the helper ends the session, the sharer will not be logged off.
 
 ### Task 3 – Assign user to roles
 
@@ -235,7 +238,7 @@ The use of remote help depends on whether you're requesting help or providing he
 To request help, you must reach out to your support staff to request assistance. You can reach out through a call, chat, email, and so on, and you'll be the sharer during the session. Be prepared to enter a security code that you'll get from the individual who is assisting you. You'll enter the code in your remote help instance to establish a connection to the helper's instance of remote help.
 
 > [!TIP]  
-> To avoid an unexpected loss of work, plan to save your active work before a remote help session ends. This is because when a remote help session ends where a helper that has the *Elevation* permission set to Yes also uses *Full control*, you are signed out of your device.
+> To avoid an unexpected loss of work, plan to save your active work before a remote help session ends. This is because when a remote help session ends where a helper that has the *Elevation* permission set to **Yes** also uses *Full control*, you are signed out of your device.
 
 As a sharer, when you’ve requested help and both you and the helper are ready to start:
 
@@ -284,7 +287,7 @@ As a helper, after receiving a request from a user who wants assistance by using
 
 You can monitor the use of remote help from within Microsoft Endpoint Manager.
 
-1. Sign into the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and go to **Tenant admin** > **Remote help (preview)**.
+1. Sign into the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and go to **Tenant admin** > **Remote help**.
 
 2. On the Monitor tab, you’ll see a count of active sessions and historical data about past sessions.
 

windows-365/business/change-organization-default-settings.md

@@ -7,7 +7,7 @@ keywords:
 author: ErikjeMS  
 ms.author: erikje
 manager: dougeby
-ms.date: 02/08/2022
+ms.date: 05/09/2022
 ms.topic: how-to
 ms.service: cloudpc
 ms.subservice: 
@@ -30,15 +30,27 @@ ms.collection: M365-identity-device-management
 
 # Change organizational default settings
 
-By default, new Cloud PCs are created with the Windows 11 operating system and the Standard User account type. You can change these defaults by following these steps:
+By default, new Cloud PCs are created with the following settings:
+
+- **Account type**: Standard User
+- **Operating system**: Windows 11
+- **Language and region (preview)**: English (United States)
+
+You can change these defaults by following these steps:
 
 1. Sign in to [windows365.microsoft.com](https://windows365.microsoft.com) with an Azure Active Directory (Azure AD) Global Administrator account.
 2. Select **Your organization’s Cloud PCs** > **Update organization settings**.
-3. Select your preferred operating system and account type > **Save**.
+3. Select your preferred option for the following settings:
+    - **Account type**: Standard User or Local Administrator.
+    - **Operating system**: Windows 11 (recommended) or Windows 10.
+    - **Language and region ([preview](../public-preview.md))**: Sets the display language, time/date formats, and automatically installs any [Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-language-fod) like text-to-speech and speech recognition. This setting only localizes the Windows experience. For changing the language in Microsoft 365 apps, see [Language Accessory Pack for Office](https://support.microsoft.com/office/language-accessory-pack-for-office-82ee1236-0f9a-45ee-9c72-05b026ee809f). If the user signs in and doesn't see the correct language, [reset](remotely-manage-business-cloud-pcs.md) the Cloud PC.
+4. Select **Save**.
+
+All new Cloud PCs will be created with the chosen settings. When these settings are changed, they won’t change the operating system, account type, or language/region of existing Cloud PCs.
 
 You can also change your organization's default settings in the Microsoft 365 admin center. For more information, see [Change your organization's address, technical contact, and more](/microsoft-365/admin/manage/change-address-contact-and-more).
 
-Organization settings only apply to newly created Cloud PCs. When these settings are changed, they won’t change the OS or account type of existing Cloud PCs.
+To change the language settings on an already-created Cloud PC, see [Language packs for Windows 10](https://support.microsoft.com/windows/language-packs-for-windows-a5094319-a92d-18de-5b53-1cfc697cfca8#WindowsVersion=Windows_10) and [Language packs for Windows 11](https://support.microsoft.com/windows/language-packs-for-windows-a5094319-a92d-18de-5b53-1cfc697cfca8#WindowsVersion=Windows_11).
 
 > [!NOTE]  
 > The 1 vCPU/2 GB RAM/64 GB storage license doesn’t support the Windows 11 minimum hardware requirements. When this license is assigned to a user, they will always receive a Windows 10 Cloud PC.

windows-365/business/in-development.md

@@ -53,11 +53,9 @@ To help in your readiness and planning, this page lists Windows 365 Business upd
 -->
 
 <!-- ***********************************************-->
+<!--
 ## Device management
-
-### Set default languages/regions for Cloud PCs (preview)<!--38649676 -->
-
-You’ll be able to set the default languages for your newly created Cloud PCs. Thirty-eight languages/regions will be available.
+-->
 
 <!-- ***********************************************-->
 ## Monitor and troubleshoot

windows-365/business/whats-new.md

@@ -7,7 +7,7 @@ keywords:
 author: ErikjeMS  
 ms.author: erikje
 manager: dougeby
-ms.date: 03/03/2022
+ms.date: 05/09/2022
 ms.topic: reference
 ms.service: cloudpc
 ms.subservice:
@@ -48,7 +48,17 @@ Learn what new features are available in Windows 365 Business.
 -->
 
 <!-- ########################## -->
-## Week of April 11, 2022)
+## Week of May 9, 2022 (Service release 2204)
+
+<!-- vvvvvvvvvvvvvvvvvvvvvv -->
+### Device configuration
+
+#### Set default languages/regions for Cloud PCs (preview)<!--38649676 -->
+
+You can now set the default languages for your newly created Cloud PCs. Thirty-eight languages/regions will be available. For more information, see [Change organizational default settings](change-organization-default-settings.md).
+
+<!-- ########################## -->
+## Week of April 11, 2022
 
 <!-- vvvvvvvvvvvvvvvvvvvvvv -->
 ### Device management

windows-365/enterprise/known-issues-enterprise.md

@@ -71,10 +71,10 @@ The following device compliance settings report as **Not applicable** when being
 - **Trusted Platform Module (TPM)**
 - **Require encryption of data storage on device.**
 
-The following device compliance settings report as **Not Compliant** when being evaluated for a Cloud PC:
+The following device compliance settings may report as **Not Compliant** when being evaluated for a Cloud PC:
 
 - **Require BitLocker**
-- **Require Secure Boot to be enabled on the device.**
+- **Require Secure Boot to be enabled on the device.** Cloud PC support for [Secure boot](/windows-hardware/design/device-experiences/oem-secure-boot) functionality is now rolling out in Asia Pacific (APAC) regions. This feature will roll out to all customers over the next few months.
 
 **Troubleshooting steps**: 
 

windows-365/enterprise/whats-new.md

@@ -7,7 +7,7 @@ keywords:
 author: ErikjeMS  
 ms.author: erikje
 manager: dougeby
-ms.date: 05/03/2022
+ms.date: 05/09/2022
 ms.topic: reference
 ms.service: cloudpc
 ms.subservice:
@@ -48,6 +48,22 @@ Learn what new features are available in Windows 365 Enterprise.
 ### End user experience
 -->
 
+<!-- ########################## -->
+## Week of May 9, 2022 (Service release 2204)
+
+<!-- vvvvvvvvvvvvvvvvvvvvvv -->
+### Device management
+
+#### Support for Azure AD joined Cloud PCs now general available<!--38765480 -->
+Support for Azure AD joined Cloud PCs has moved out of preview and into general availability.
+
+<!-- vvvvvvvvvvvvvvvvvvvvvv -->
+### Provisioning
+
+#### Provision Cloud PCs with Secure Boot<!--38012584 -->
+
+Cloud PC support for [Secure boot](/windows-hardware/design/device-experiences/oem-secure-boot) functionality is now rolling out in Asia Pacific (APAC) regions. This feature will roll out to all customers over the next few months.
+
 <!-- ########################## -->
 ## Week of May 2, 2022
 
@@ -60,7 +76,7 @@ We’ve published a new help documentation article. For more information, see [M
 <!-- ########################## -->
 ## Week of April 18, 2022
 
-### On-premises network connection has been renamed to Azure network connection<!--38457869 idready-->
+### On-premises network connection has been renamed to Azure network connection<!--38457869 -->
 
 The term **on-premises network connection** has been renamed to **Azure network connection** in all user interfaces, documentation, and communications.