From 728a8ec67457c1e19bc374bb1c45f2431136ad7d Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 1 Oct 2024 07:56:06 -0400 Subject: [PATCH] updates for footnotes --- .../book/cloud-services-protect-your-work-information.md | 8 +++----- windows/security/book/conclusion.md | 2 +- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/windows/security/book/cloud-services-protect-your-work-information.md b/windows/security/book/cloud-services-protect-your-work-information.md index fce95cdb64..1967d28aaf 100644 --- a/windows/security/book/cloud-services-protect-your-work-information.md +++ b/windows/security/book/cloud-services-protect-your-work-information.md @@ -13,7 +13,7 @@ ms.date: 09/06/2024 Microsoft Entra ID is a comprehensive cloud-based identity management solution that helps enable secure access to applications, networks, and other resources and guard against threats. Microsoft Entra ID can also be used with Windows Autopilot for zero-touch provisioning of devices preconfigured with corporate security policies. -Organizations can deploy Microsoft Entra ID joined devices to enable access to both cloud and on-premises apps and resources. Access to resources can be controlled based on the Microsoft Entra ID account and Conditional Access policies applied to the device. For the most seamless and delightful end to end single sign-on (SSO) experience, we recommend users configure Windows Hello for Business during the out of box experience for easy passwordless sign-in to Entra ID . +Organizations can deploy Microsoft Entra ID joined devices to enable access to both cloud and on-premises apps and resources. Access to resources can be controlled based on the Microsoft Entra ID account and Conditional Access policies applied to the device. For the most seamless and delightful end to end single sign-on (SSO) experience, we recommend users configure Windows Hello for Business during the out of box experience for easy passwordless sign-in to Entra ID . For people wanting to connect to Entra on their personal devices, they can do so by using Workplace Join or Add Account – this action registers that users personal device with Microsoft Entra ID and helps- also called Workplace joined - IT admins can support users in bring your own device (BYOD) or mobile device scenarios. Credentials are authenticated and bound to the joined device and cannot be copied to another device without explicit reverification. @@ -107,11 +107,11 @@ When a device is enrolled into device management, the administrator assumes that ## Microsoft Intune -Microsoft Intune15 is a comprehensive endpoint management solution that helps secure, deploy, and manage users, apps, and devices. Intune brings together technologies like Microsoft Configuration Manager and Windows Autopilot to simplify provisioning, configuration management, and software updates across the organization. +Microsoft Intune [\[15\]](conclusion.md#footnote15) is a comprehensive endpoint management solution that helps secure, deploy, and manage users, apps, and devices. Intune brings together technologies like Microsoft Configuration Manager and Windows Autopilot to simplify provisioning, configuration management, and software updates across the organization. Intune works with Microsoft Entra ID to manage security features and processes, including multifactor authentication. -Organizations can cut costs while securing and managing remote PCs through the cloud in compliance with company policies.16 For example, organizations save time and money by provisioning preconfigured devices to remote employees using Windows Autopilot for zerotouch deployment. +Organizations can cut costs while securing and managing remote PCs through the cloud in compliance with company policies [\[15\]](conclusion.md#footnote16). For example, organizations save time and money by provisioning preconfigured devices to remote employees using Windows Autopilot for zerotouch deployment. Windows 11 enables IT professionals to move to the cloud while consistently enforcing security policies. Windows 11 provides expanded support for Group Policy administrative templates (ADMX-backed policies) in MDM solutions like Microsoft Intune, enabling IT professionals to easily apply the same security policies to both on-premises and remote devices. @@ -143,8 +143,6 @@ Microsoft Intune also has policies and settings to configure and manage the flow With Intune, organizations can also extend MAM App Config, MAM App Protection, and App Protection Conditional Access capabilities to Windows. This enables people to access protected organizational content without having the device managed by IT. The first application to support MAM for Windows is Microsoft Edge. - - ## Remote Wipe When a device is lost or stolen, IT administrators might want to remotely wipe data stored in memory and hard disks. A helpdesk agent might also want to reset devices to fix issues encountered by remote workers. A remote wipe can also be used to prepare a previously used device for a new user. diff --git a/windows/security/book/conclusion.md b/windows/security/book/conclusion.md index f784c16252..aa638395ba 100644 --- a/windows/security/book/conclusion.md +++ b/windows/security/book/conclusion.md @@ -72,7 +72,7 @@ Enhanced: 9 Sold separately.\ 10 Email encryption is supported on products such as Microsoft Exchange Server and Microsoft Exchange Online.\ 11 Microsoft internal data.\ -12 Microsoft Entra ID Basic is included with Microsoft Azure and Microsoft 365 subscriptions, and other commercial services subscriptions.\ +12 Microsoft Entra ID Basic is included with Microsoft Azure and Microsoft 365 subscriptions, and other commercial services subscriptions.\git add . 13 Requires Microsoft Entra ID (formerly AAD) Premium; sold separately.\ 14 Hardware dependent.\ 15 Microsoft 365 E3 or E5 required; sold separately.\