From 0fa76610daed8bb4567fddc91f17a40ed99429f6 Mon Sep 17 00:00:00 2001 From: ricastil <57725157+ricastil@users.noreply.github.com> Date: Thu, 10 Mar 2022 11:56:19 -0600 Subject: [PATCH 1/9] Add roles/permissions to section: Add Update Compliance to your Azure subscription adding the following information on roles required to enable, write or read in log analytics. --- .../deployment/update/update-compliance-get-started.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index fc12dbcd1f..5eeb00b62c 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -51,8 +51,9 @@ Before you begin the process to add Update Compliance to your Azure subscription ## Add Update Compliance to your Azure subscription -Update Compliance is offered as an Azure Marketplace application which is linked to a new or existing [Azure Log Analytics](/azure/log-analytics/query-language/get-started-analytics-portal) workspace within your Azure subscription. To configure this, follow these steps: +Update Compliance is offered as an Azure Marketplace application which is linked to a new or existing [Azure Log Analytics](/azure/log-analytics/query-language/get-started-analytics-portal) workspace within your Azure subscription. Please note that for the following steps you must have one of the following [Azure roles](https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-roles) at minimum in order to add the solution: Owner or Contributor. +To configure this, follow these steps: 1. Go to the [Update Compliance page in the Azure Marketplace](https://azuremarketplace.microsoft.com/marketplace/apps/Microsoft.WaaSUpdateInsights?tab=Overview). You might need to login to your Azure subscription to access this. 2. Select **Get it now**. 3. Choose an existing or configure a new Log Analytics Workspace, ensuring it is in a **Compatible Log Analytics region** from the following table. Although an Azure subscription is required, you won't be charged for ingestion of Update Compliance data. @@ -60,6 +61,11 @@ Update Compliance is offered as an Azure Marketplace application which is linked - [Azure Update Management](/azure/automation/automation-intro#update-management) users should use the same workspace for Update Compliance. 4. After your workspace is configured and selected, select **Create**. You'll receive a notification when the solution has been successfully created. +Once the solution is in place, a user can leverage one of the following Azure roles with Update Compliance: + +• To edit and write queries we recommend the [Log Analytics Contributor ](https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#log-analytics-contributor) +• To read and only view date we recommend the [Log Analytics Reader](https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#log-analytics-reader) + |Compatible Log Analytics regions | | ------------------------------- | |Australia Central | From 7072d798f45ac5982a346e2ed9e0ca8cc8d30e59 Mon Sep 17 00:00:00 2001 From: ricastil <57725157+ricastil@users.noreply.github.com> Date: Sun, 13 Mar 2022 12:02:41 -0500 Subject: [PATCH 2/9] Update windows/deployment/update/update-compliance-get-started.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/update/update-compliance-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 5eeb00b62c..3c4dfeceea 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -51,7 +51,7 @@ Before you begin the process to add Update Compliance to your Azure subscription ## Add Update Compliance to your Azure subscription -Update Compliance is offered as an Azure Marketplace application which is linked to a new or existing [Azure Log Analytics](/azure/log-analytics/query-language/get-started-analytics-portal) workspace within your Azure subscription. Please note that for the following steps you must have one of the following [Azure roles](https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-roles) at minimum in order to add the solution: Owner or Contributor. +Update Compliance is offered as an Azure Marketplace application that is linked to a new or existing [Azure Log Analytics](/azure/log-analytics/query-language/get-started-analytics-portal) workspace within your Azure subscription. Note that, for the following steps, you must have either an Owner or Contributor [Azure role](/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-roles) as a minimum in order to add the solution. To configure this, follow these steps: 1. Go to the [Update Compliance page in the Azure Marketplace](https://azuremarketplace.microsoft.com/marketplace/apps/Microsoft.WaaSUpdateInsights?tab=Overview). You might need to login to your Azure subscription to access this. From c1c5c4835e23f26cbc2a8449a7286aeec93f6336 Mon Sep 17 00:00:00 2001 From: ricastil <57725157+ricastil@users.noreply.github.com> Date: Sun, 13 Mar 2022 12:02:46 -0500 Subject: [PATCH 3/9] Update windows/deployment/update/update-compliance-get-started.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/update/update-compliance-get-started.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 3c4dfeceea..da329d77f9 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -61,10 +61,11 @@ To configure this, follow these steps: - [Azure Update Management](/azure/automation/automation-intro#update-management) users should use the same workspace for Update Compliance. 4. After your workspace is configured and selected, select **Create**. You'll receive a notification when the solution has been successfully created. -Once the solution is in place, a user can leverage one of the following Azure roles with Update Compliance: +Once the solution is in place, you can leverage one of the following Azure roles with Update Compliance: -• To edit and write queries we recommend the [Log Analytics Contributor ](https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#log-analytics-contributor) -• To read and only view date we recommend the [Log Analytics Reader](https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#log-analytics-reader) +- To edit and write queries we recommend the [Log Analytics Contributor](/azure/role-based-access-control/built-in-roles#log-analytics-contributor) role. + +- To read and only view data we recommend the [Log Analytics Reader](/azure/role-based-access-control/built-in-roles#log-analytics-reader) role. |Compatible Log Analytics regions | | ------------------------------- | From bf20d7c0bdaa6f7da8eb4506caf171c4893323bb Mon Sep 17 00:00:00 2001 From: "wh0se@sk1ng" Date: Wed, 16 Mar 2022 11:48:05 -0500 Subject: [PATCH 4/9] Update wip-learning.md --- .../windows-information-protection/wip-learning.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/wip-learning.md b/windows/security/information-protection/windows-information-protection/wip-learning.md index 3ae137caca..2e28240bcc 100644 --- a/windows/security/information-protection/windows-information-protection/wip-learning.md +++ b/windows/security/information-protection/windows-information-protection/wip-learning.md @@ -33,7 +33,7 @@ In the **Website learning report**, you can view a summary of the devices that h 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). -1. Click **Client apps** > **App protection status** > **Reports**. +1. Click **Apps** > **Monitor** > **App protection status** > **Reports**. ![Image showing the UI path to the WIP report.](images/access-wip-learning-report.png) From b280797ed9c4f68e33f7b469d4ef1165960feabf Mon Sep 17 00:00:00 2001 From: anwarmahmood1 <43573768+anwarmahmood1@users.noreply.github.com> Date: Sun, 20 Mar 2022 12:27:41 +0000 Subject: [PATCH 5/9] now named "Allow pre-provisioned deployment" ? --- .../windows-autopilot/demonstrate-deployment-on-vm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md index 8e20414961..86203e2980 100644 --- a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md +++ b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md @@ -508,7 +508,7 @@ Select **Next** to continue with the **Out-of-box experience (OOBE)** settings: | Privacy Settings | Hide | | Hide change account options | Hide | | User account type | Standard | -| Allow White Glove OOBE | No | +| Allow pre-provisioned deployment | No | | Language (Region) | Operating system default | | Automatically configure keyboard | Yes | | Apply device name template | No | From 0c227854b070e4f940a495b6d8c9440ca9e75d3b Mon Sep 17 00:00:00 2001 From: anwarmahmood1 <43573768+anwarmahmood1@users.noreply.github.com> Date: Sun, 20 Mar 2022 12:48:33 +0000 Subject: [PATCH 6/9] correct InTune and Office 365 names --- .../windows-autopilot/demonstrate-deployment-on-vm.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md index 8e20414961..26946f6e30 100644 --- a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md +++ b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md @@ -814,9 +814,9 @@ At this point, you have completed steps to add a Win32 app to Intune. For more information on adding apps to Intune, see [Intune Standalone - Win32 app management](/intune/apps-win32-app-management). -### Add Office 365 +### Add Microsoft 365 Apps -#### Create app in Intune +#### Create app in Microsoft Endpoint Manager Log in to the Azure portal and select **Intune**. @@ -824,7 +824,7 @@ Go to **Intune > Clients apps > Apps**, and then select the **Add** button to cr ![Create app step 1.](images/app17.png) -Under **App Type**, select **Office 365 Suite > Windows 10**: +Under **App Type**, select **Microsoft 365 Apps > Windows 10 and later**: ![Create app step 2.](images/app18.png) From 6f93994e821d294841dc11302159276098a16437 Mon Sep 17 00:00:00 2001 From: "wh0se@sk1ng" Date: Mon, 21 Mar 2022 07:36:13 -0700 Subject: [PATCH 7/9] Update windows/security/information-protection/windows-information-protection/wip-learning.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../windows-information-protection/wip-learning.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/wip-learning.md b/windows/security/information-protection/windows-information-protection/wip-learning.md index 2e28240bcc..db8059550f 100644 --- a/windows/security/information-protection/windows-information-protection/wip-learning.md +++ b/windows/security/information-protection/windows-information-protection/wip-learning.md @@ -33,7 +33,7 @@ In the **Website learning report**, you can view a summary of the devices that h 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). -1. Click **Apps** > **Monitor** > **App protection status** > **Reports**. +1. Select **Apps** > **Monitor** > **App protection status** > **Reports**. ![Image showing the UI path to the WIP report.](images/access-wip-learning-report.png) From 0b38e0ece42c6054a5cd374831438d70985d274b Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Tue, 22 Mar 2022 13:53:31 -0700 Subject: [PATCH 8/9] update author metadata --- .../windows-information-protection/wip-learning.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/wip-learning.md b/windows/security/information-protection/windows-information-protection/wip-learning.md index db8059550f..0cf382492f 100644 --- a/windows/security/information-protection/windows-information-protection/wip-learning.md +++ b/windows/security/information-protection/windows-information-protection/wip-learning.md @@ -9,9 +9,9 @@ ms.mktglfcycl: ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: cabailey -ms.author: cabailey -manager: laurawi +author: aczechowski +ms.author: aaroncz +manager: dougeby audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual From c2ce7fe2462020ab15ae8dd9e7fb9a45b8befa9c Mon Sep 17 00:00:00 2001 From: Diana Hanson Date: Wed, 23 Mar 2022 10:01:58 -0600 Subject: [PATCH 9/9] Update demonstrate-deployment-on-vm.md Sync PR https://github.com/MicrosoftDocs/windows-docs-pr/pull/6384 Fix warning --- .../windows-autopilot/demonstrate-deployment-on-vm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md index afc3e62c70..03e2aee015 100644 --- a/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md +++ b/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm.md @@ -88,7 +88,7 @@ If you already have Hyper-V and a Windows 10 VM, you can skip directly to the [C - [Prepare the app for Intune](#prepare-the-app-for-intune) - [Create app in Intune](#create-app-in-intune) - [Assign the app to your Intune profile](#assign-the-app-to-your-intune-profile) - - [Add Office 365](#add-office-365) + - [Add Office 365](#add-microsoft-365-apps) - [Create app in Intune](#create-app-in-intune) - [Assign the app to your Intune profile](#assign-the-app-to-your-intune-profile) - [Glossary](#glossary)