Merge pull request #21750 from MicrosoftDocs/main

Publish 08/07/2023, 3:30 PM

Author: garycentric

microsoft-365/admin/TOC.yml

@@ -99,8 +99,6 @@
           href: multi-tenant/manage.md
     - name: Office 365 operated by 21Vianet
       items: 
-        - name: About Office 365 operated by 21Vianet
-          href: services-in-china/services-in-china.md
         - name: Download the Office app for Android for Office 365 operated by 21Vianet
           href: services-in-china/download-office-app-for-Android.md
         - name: Download the Office app for iOS for Office 365 operated by 21Vianet

microsoft-365/admin/services-in-china/services-in-china.md

@@ -5,6 +5,7 @@ f1.keywords:
 ms.author: sharik
 author: skjerland
 manager: scotv
+ms.reviewer: xiaowan
 ms.date: 02/18/2020
 audience: Admin
 ms.topic: overview
@@ -24,7 +25,7 @@ search.appverid:
 - MET150
 - GEU150
 - GEA150
-ms.assetid: a8ab5061-3346-4da0-bb7c-5260822b53ae
+ROBOTS: NOINDEX
 description: "Learn more about Office 365 operated by 21Vianet that is designed to meet the needs for secure, reliable and scalable cloud services in China."
 monikerRange: 'o365-21vianet'
 ---

microsoft-365/commerce/subscriptions/cancel-your-subscription.md

@@ -24,7 +24,7 @@ ms.custom:
 - admindeeplinkMAC
 search.appverid: MET150
 description: "Learn how to cancel your Dynamics 365, Intune, Power Platform, and Microsoft 365 for business trial or paid subscriptions in the Microsoft 365 admin center."
-ms.date: 04/04/2023
+ms.date: 08/07/2023
 ---
 
 # Cancel your Microsoft business subscription
@@ -129,6 +129,10 @@ When the cancellation becomes effective, your users lose access to their data. B
 
 If you canceled your subscription and didn't [move users to a different subscription](move-users-different-subscription.md) that includes Microsoft 365, Microsoft 365 runs in reduced functionality mode. When this happens, users can only read and print documents, and Microsoft 365 apps display [Unlicensed Product notifications](https://support.microsoft.com/office/0d23d3c0-c19c-4b2f-9845-5344fedc4380). To avoid any confusion, have your users [uninstall Microsoft 365](https://support.microsoft.com/office/9dd49b83-264a-477a-8fcc-2fdf5dbf61d8) from their computers.
 
+### Offboard devices from Microsoft Defender for Business (optional)
+
+If you canceled your subscription, you can offboard devices, such as computers, phones, and tablets, that were onboarded to Defender for Business or Microsoft 365 Business Premium. See [Offboard a device from Microsoft Defender for Business](../../security/defender-business/mdb-offboard-devices.md).
+
 ### Close your account (optional)
 
 If you want to completely close your account with Microsoft, see [Close your account](../close-your-account.md).

microsoft-365/commerce/try-or-buy-microsoft-365.md

@@ -27,14 +27,14 @@ ms.custom:
 - adminvideo
 search.appverid: GEA150 
 description: "Learn how to sign up for a free 30-day trial or buy a subscription for Microsoft 365 for business products and services."
-ms.date: 07/11/2023
+ms.date: 08/07/2023
 ---
 
 # Try or buy a Microsoft 365 for business subscription
 
 Check out all of our small business content on [Small business help & learning](https://go.microsoft.com/fwlink/p/?linkid=2224585) and our [Microsoft 365 small business help](https://go.microsoft.com/fwlink/p/?linkid=2197659) on YouTube.
 
-Microsoft 365 for business is a subscription service that lets you run your organization in the cloud while Microsoft takes care of the IT for you. We manage your devices, protect against real-world threats, and provide your organization with the latest in business software. You can sign up for a free trial subscription for Microsoft 365 Business Basic, Microsoft 365 Business Standard, Microsoft 365 Business Premium, or Microsoft 365 Apps for business and try it out for 30 days.
+Microsoft 365 for business is a subscription service that lets you run your organization in the cloud while Microsoft takes care of the IT for you. We manage your devices, protect against real-world threats, and provide your organization with the latest in business software. You can sign up for a free trial subscription for Microsoft 365 Business Basic, Microsoft 365 Business Standard, Microsoft 365 Business Premium, Microsoft Defender for Business, or Microsoft 365 Apps for business and try it out for 30 days.
 
 > [!NOTE]
 > You must use a credit or debit card when you sign up for a free trial. At the end of your free trial period, your trial subscription is automatically converted to a paid subscription. Your card isn't billed until the trial period ends.
@@ -68,7 +68,7 @@ Proof of payment is provided in the form of Fapiaos. You can submit your Fapiao
 
 ## Try a free trial subscription
 
-To create an account and sign up for a free trial subscription of Microsoft 365 Business Basic, Microsoft 365 Business Standard, Microsoft 365 Business Premium, or Microsoft 365 Apps for business, use the following steps.
+To create an account and sign up for a free trial subscription of Microsoft 365 Business Basic, Microsoft 365 Business Standard, Microsoft 365 Business Premium, Microsoft Defender for Business, or Microsoft 365 Apps for business, use the following steps.
 
 1. Go to the <a href="https://www.aka.ms/office365signup" target="_blank">Microsoft 365 Products</a> site.
 2. Select the plan that you want, such as **Microsoft 365 Business Standard**, scroll down the page, and select **Try free for 1 month**.
@@ -212,7 +212,8 @@ If you have a new account and are setting up your first subscription, you can us
 
 - [Set up Microsoft 365 Business Basic](../admin/setup/setup-business-basic.md)
 - [Set up Microsoft 365 Business Standard](../admin/setup/setup-business-standard.md)
-- [Set up Microsoft 365 Business Premium](../business/set-up.md)
+- [Set up Microsoft 365 Business Premium](../business-premium/index.md)
+- [Set up Microsoft Defender for Business](../security/defender-business/mdb-setup-configuration.md)
 - [Set up Microsoft 365 Apps for business](../admin/setup/setup-apps-for-business.md)
 
 If you already have a subscription and are adding a new subscription, you can move users to it. To learn how, see [Move users to a different subscription](subscriptions/move-users-different-subscription.md).

microsoft-365/enterprise/subscriptions-licenses-accounts-and-tenants-for-microsoft-cloud-offerings.md

@@ -3,7 +3,7 @@ title: "Subscriptions, licenses, accounts, and tenants for Microsoft's cloud off
 ms.author: kvice
 author: kelleyvice-msft
 manager: scotv
-ms.date: 08/10/2020
+ms.date: 08/07/2023
 audience: ITPro
 ms.topic: conceptual
 ms.service: microsoft-365-enterprise

microsoft-365/loop/loop-workspaces-configuration.md

@@ -32,6 +32,14 @@ If you're looking to manage Loop components in the Microsoft 365 ecosystem, visi
 
 Just like other Microsoft 365 experiences, Loop also leverages core services across SharePoint and Microsoft 365. To effectively enable Loop workspace experiences, follow the instructions in [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges) to ensure connections to Loop services.
 
+### Exchange Online license
+
+Loop workspaces currently require each user to have an Exchange Online license and the user account cannot be a resource account (e.g. a shared mailbox user). If these requirements are not met, users will experience failures in the Loop app; won't receive notifications or signals when they collaborate and update; and encounter failures in other experiences also.
+
+### WebSocket connections
+
+Loop's near real-time communications are enabled by the core services that run a WebSocket server. Coauthors in the same session need to establish secured WebSocket connections to this service to send and receive collaborative data such as changes made by others, live cursors, presence, and so on. These experiences are crucial to Loop, and to all the scenarios powered by Fluid framework. So, at the minimum, WebSocket will need to be unblocked from the user's endpoint.
+
 ### Microsoft 365 Groups for Cloud Policy
 
 If you want to scope the Cloud Policy settings to only some users in your tenant, you must create or use an existing Microsoft 365 group that defines which users in your organization this policy will apply to. To create a Microsoft 365 group, see [Create a Microsoft 365 group](/microsoft-365/admin/create-groups/create-groups).
@@ -43,13 +51,18 @@ You'll be able to use this group for the Cloud Policy setup procedure specified
 
 If you prefer, you can also create other types of groups to use with Cloud Policy. For more information, see [learn more about creating groups in the Microsoft 365 admin center](/microsoft-365/admin/email/create-edit-or-delete-a-security-group) or [learn more about creating dynamic groups in AzureAD](/azure/active-directory/external-identities/use-dynamic-groups).
 
-### Exchange Online license
+## Settings management in the Microsoft Admin Center
 
-Loop workspaces currently require each user to have an Exchange Online license and the user account cannot be a resource account (e.g. a shared mailbox user). If these requirements are not met, users will experience failures in the Loop app; won't receive notifications or signals when they collaborate and update; and encounter failures in other experiences also.
+If you're looking for a simple way to turn on or off the creation of content in Loop workspaces in your tenant, do the following:
 
-### WebSocket connections
+1. Sign in to the Microsoft 365 admin center as a Global Administrator.
+2. Navigate to [Home > Org settings > Services > Loop](https://admin.microsoft.com/Adminportal/Home#/Settings/Services/:/Settings/L1/Loop).
+3. Choose your desired state for Loop workspaces via the checkbox.
+    > [!NOTE]
+    > If your tenant was automatically enabled as part of an early adopter program by Microsoft, the checkbox may not reflect this. However, the state you save in the Admin Center will override any defaults for your tenant.
+4. Select Save.
 
-Loop's near real-time communications are enabled by the core services that run a WebSocket server. Coauthors in the same session need to establish secured WebSocket connections to this service to send and receive collaborative data such as changes made by others, live cursors, presence, and so on. These experiences are crucial to Loop, and to all the scenarios powered by Fluid framework. So, at the minimum, WebSocket will need to be unblocked from the user's endpoint.
+The Microsoft Admin Center will configure the Cloud Policy setting described below, targeted at All users (your full tenant). See the next section if you wish to perform more advanced controls.
 
 ## Settings management in Cloud Policy
 
@@ -66,19 +79,19 @@ The Loop app checks the following Cloud Policy setting to see if workspaces are
 To configure these Cloud Policy settings, perform the following steps:
 
 1. Sign in to https://config.office.com/ with your Microsoft 365 admin credentials.
-1. Select **Customization** from the left pane.
-1. Select **Policy Management**.
-1. Create a new policy configuration or edit an existing one.
-1. From the **Choose the scope** dropdown list, choose either **All users** or select the group for which you want to apply the policy. For more information, See [Microsoft 365 Groups for Cloud Policy](#microsoft-365-groups-for-cloud-policy).
-1. In **Configure Settings**, choose **Create and view Loop workspaces in Loop** and then choose one of the following settings:
+2. Select **Customization** from the left pane.
+3. Select **Policy Management**.
+4. Create a new policy configuration or edit an existing one.
+5. From the **Choose the scope** dropdown list, choose either **All users** or select the group for which you want to apply the policy. For more information, See [Microsoft 365 Groups for Cloud Policy](#microsoft-365-groups-for-cloud-policy).
+6. In **Configure Settings**, choose **Create and view Loop workspaces in Loop** and then choose one of the following settings:
     - **Enabled**: Loop app and creation of workspaces is available to the users.
     - **Disabled**: Loop app and creation of workspaces isn't available to the users.
     - **Not configured**: Loop app and creation of workspaces isn't available to the users.
         - Loop during Public Preview is **IT Admin Opt-in** by default.
         - Loop app will still open Loop components when workspaces is disabled. If this isn't rolled out to your environment, Loop components will open in Office.com.
         - Ensure additional [Loop service requirements](#requirements) are met.
-1. Save the policy configuration.
-1. Reassign priority for any security group, if required. (If two or more policy configurations are applicable to the same set of users, the one with the higher priority is applied.)
+7. Save the policy configuration.
+8. Reassign priority for any security group, if required. (If two or more policy configurations are applicable to the same set of users, the one with the higher priority is applied.)
 
 In case you create a new policy configuration or change the configuration for an existing policy, there will be a delay in the change being reflected as described below:
 - If there were existing policy configurations prior to the change, then it will take 90 mins for the change to be reflected.
@@ -90,4 +103,4 @@ Loop workspaces and the content created in Loop workspaces don't yet support eDi
 
 ## Related topics
 
-[Get started with Microsoft Loop - Microsoft Support](https://support.microsoft.com/office/get-started-with-microsoft-loop-9f4d8d4f-dfc6-4518-9ef6-069408c21f0c)
+[Get started with Microsoft Loop - Microsoft Support](https://support.microsoft.com/office/get-started-with-microsoft-loop-9f4d8d4f-dfc6-4518-9ef6-069408c21f0c)

microsoft-365/media/defender/m365-defender-rbac-activate-workload-selection.png

@@ -6,7 +6,7 @@ description: Windows Server includes automatic exclusions, based on server role.
 ms.service: microsoft-365-security
 ms.subservice: mde
 ms.localizationpriority: medium
-ms.date: 07/18/2023
+ms.date: 08/07/2023
 author: denisebmsft
 ms.author: deniseb
 ms.topic: conceptual
@@ -47,6 +47,7 @@ For a more detailed overview of exclusions, see [Manage exclusions for Microsoft
 - Appropriate exclusions must be set for software that isn't included with the operating system.
 - Windows Server 2012 R2 doesn't have Microsoft Defender Antivirus as an installable feature. When you onboard those servers to Defender for Endpoint, you'll install Microsoft Defender Antivirus, and default exclusions for operating system files are applied. However, exclusions for server roles (as specified below) don't apply automatically, and you should configure these exclusions as appropriate. To learn more, see [Onboard Windows servers to the Microsoft Defender for Endpoint service](configure-server-endpoints.md).
 - Built-in exclusions and automatic server role exclusions don't appear in the standard exclusion lists that are shown in the [Windows Security app](microsoft-defender-security-center-antivirus.md).
+- The list of built-in exclusions changes frequently with [security intelligence updates](microsoft-defender-antivirus-updates.md#security-intelligence-updates) and product updates. This article lists some, but not all, of the built-in and automatic exclusions.
 
 ## Automatic server role exclusions
 

microsoft-365/media/defender/m365-defender-rbac-assignments.png

@@ -17,7 +17,7 @@ ms.collection:
 ms.topic: conceptual
 ms.subservice: mde
 search.appverid: met150
-ms.date: 12/18/2020
+ms.date: 08/07/2023
 ---
 
 # Microsoft Defender for Endpoint data storage and privacy
@@ -29,13 +29,14 @@ ms.date: 12/18/2020
 - [Microsoft Defender for Endpoint Plan 1](https://go.microsoft.com/fwlink/p/?linkid=2154037)
 - [Microsoft Defender for Endpoint Plan 2](https://go.microsoft.com/fwlink/p/?linkid=2154037)
 - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804)
+- [Microsoft Defender for Business](../defender-business/mdb-overview.md)
 
 > Want to experience Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-assignaccess-abovefoldlink)
 
 This section covers some of the most frequently asked questions regarding privacy and data handling for Defender for Endpoint.
 
 > [!NOTE]
-> This document explains the data storage and privacy details related to Defender for Endpoint. For more information related to Defender for Endpoint and other products and services like Microsoft Defender Antivirus and Windows, see [Microsoft Privacy Statement](https://go.microsoft.com/fwlink/?linkid=827576). See also [Windows privacy FAQ](https://go.microsoft.com/fwlink/?linkid=827577) for more information.
+> This document explains the data storage and privacy details related to Defender for Endpoint and Defender for Business. For more information related to Defender for Endpoint and other products and services like Microsoft Defender Antivirus and Windows, see [Microsoft Privacy Statement](https://go.microsoft.com/fwlink/?linkid=827576). See also [Windows privacy FAQ](https://go.microsoft.com/fwlink/?linkid=827577) for more information.
 
 ## What data does Microsoft Defender for Endpoint collect?
 
@@ -69,8 +70,6 @@ Customer data in pseudonymized form may also be stored in the central storage an
 
 Once configured, you cannot change the location where your data is stored. This provides a convenient way to minimize compliance risk by actively selecting the geographic locations where your data will reside.
 
-
-
 ## Data sharing for Microsoft Defender for Endpoint
 
 Microsoft Defender for Endpoint shares data, including customer data, among the following Microsoft products also licensed by the customer.