Merge branch 'MicrosoftDocs:main' into WDAC-Docs

.openpublishing.redirection.json

@@ -20735,10 +20735,20 @@
       "redirect_url": "https://aka.ms/AzureCodeSigning",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/deployment/update/quality-updates.md",
+      "redirect_url": "/windows/deployment/update/release-cycle",
+      "redirect_document_id": false
+    },    
     {
       "source_path": "windows/deployment/windows-autopatch/references/windows-autopatch-privacy.md",
       "redirect_url": "/windows/deployment/windows-autopatch/overview/windows-autopatch-privacy",
       "redirect_document_id": true
+    },
+    {
+      "source_path": "store-for-business/sign-up-microsoft-store-for-business.md",
+      "redirect_url": "/microsoft-store",
+      "redirect_document_id": false
     }
   ]
 }

education/includes/education-content-updates.md

@@ -2,6 +2,21 @@
 
 
 
+## Week of March 20, 2023
+
+
+| Published On |Topic title | Change |
+|------|------------|--------|
+| 3/21/2023 | [Windows 11 SE Overview](/education/windows/windows-11-se-overview) | modified |
+| 3/22/2023 | [Configure Stickers for Windows 11 SE](/education/windows/edu-stickers) | modified |
+| 3/22/2023 | [Configure Take a Test in kiosk mode](/education/windows/edu-take-a-test-kiosk-mode) | modified |
+| 3/22/2023 | [Configure federated sign-in for Windows devices](/education/windows/federated-sign-in) | modified |
+| 3/22/2023 | [Reset devices with Autopilot Reset](/education/windows/autopilot-reset) | modified |
+| 3/22/2023 | [Deploy Windows 10 in a school district (Windows 10)](/education/windows/deploy-windows-10-in-a-school-district) | modified |
+| 3/22/2023 | [Deploy Windows 10 in a school (Windows 10)](/education/windows/deploy-windows-10-in-a-school) | modified |
+| 3/22/2023 | [Deployment recommendations for school IT administrators](/education/windows/edu-deployment-recommendations) | modified |
+
+
 ## Week of March 06, 2023
 
 

windows/client-management/mdm/laps-csp.md

@@ -112,7 +112,7 @@ Use this setting to tell the CSP to immediately generate and store a new passwor
 
 <!-- Device-Actions-ResetPassword-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
-This action invokes an immediate reset of the local administrator account password, ignoring the normal constraints such as PasswordLengthDays, etc
+This action invokes an immediate reset of the local administrator account password, ignoring the normal constraints such as PasswordLengthDays, etc.
 <!-- Device-Actions-ResetPassword-Editable-End -->
 
 <!-- Device-Actions-ResetPassword-DFProperties-Begin -->
@@ -333,7 +333,7 @@ This setting is ignored if the password is currently being stored in Azure.
 
 This setting is only honored when the Active Directory domain is at Windows Server 2016 Domain Functional Level or higher.
 
-- If this setting is enabled, and the Active Directory domain meets the DFL prerequisite, the password will be encrypted before before being stored in Active Directory.
+- If this setting is enabled, and the Active Directory domain meets the DFL prerequisite, the password will be encrypted before being stored in Active Directory.
 
 - If this setting is disabled, or the Active Directory domain does not meet the DFL prerequisite, the password will be stored as clear-text in Active Directory.
 
@@ -343,7 +343,7 @@ If not specified, this setting defaults to True.
 <!-- Device-Policies-ADPasswordEncryptionEnabled-Editable-Begin -->
 <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
 > [!IMPORTANT]
-> This setting is ignored unless BackupDirectory is configured to back up the password to Active Directory, AND the the Active Directory domain is at Windows Server 2016 Domain Functional Level or higher.
+> This setting is ignored unless BackupDirectory is configured to back up the password to Active Directory, AND the Active Directory domain is at Windows Server 2016 Domain Functional Level or higher.
 <!-- Device-Policies-ADPasswordEncryptionEnabled-Editable-End -->
 
 <!-- Device-Policies-ADPasswordEncryptionEnabled-DFProperties-Begin -->
@@ -642,8 +642,8 @@ If not specified, this setting defaults to True.
 
 | Value | Description |
 |:--|:--|
-| false | Allow configured password expiriration timestamp to exceed maximum password age. |
+| false | Allow configured password expiration timestamp to exceed maximum password age. |
-| true (Default) | Do not allow configured password expiriration timestamp to exceed maximum password age. |
+| true (Default) | Do not allow configured password expiration timestamp to exceed maximum password age. |
 <!-- Device-Policies-PasswordExpirationProtectionEnabled-AllowedValues-End -->
 
 <!-- Device-Policies-PasswordExpirationProtectionEnabled-Examples-Begin -->
@@ -746,7 +746,7 @@ If not specified, this setting will default to 3 (Reset the password and logoff
 | Value | Description |
 |:--|:--|
 | 1 | Reset password: upon expiry of the grace period, the managed account password will be reset. |
-| 3 (Default) | Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated. |
+| 3 (Default) | Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will be terminated. |
 | 5 | Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted. |
 <!-- Device-Policies-PostAuthenticationActions-AllowedValues-End -->
 

windows/client-management/mdm/policy-csp-admx-icm.md

@@ -555,11 +555,11 @@ The Knowledge Base is an online source of technical support information and self
 <!-- Description-Source-ADMX -->
 This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.
 
-- If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet.
+- If you enable this setting, all of the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet.
 
-- If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet.
+- If you disable this policy setting, all of the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet.
 
-- If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured.
+- If you do not configure this policy setting, all of the policy settings in the "Internet Communication settings" section are set to not configured.
 <!-- InternetManagement_RestrictCommunication_1-Description-End -->
 
 <!-- InternetManagement_RestrictCommunication_1-Editable-Begin -->
@@ -617,11 +617,11 @@ This policy setting specifies whether Windows can access the Internet to accompl
 <!-- Description-Source-ADMX -->
 This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.
 
-- If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet.
+- If you enable this setting, all of the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet.
 
-- If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet.
+- If you disable this policy setting, all of the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet.
 
-- If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured.
+- If you do not configure this policy setting, all of the policy settings in the "Internet Communication settings" section are set to not configured.
 <!-- InternetManagement_RestrictCommunication_2-Description-End -->
 
 <!-- InternetManagement_RestrictCommunication_2-Editable-Begin -->

windows/client-management/mdm/policy-csp-admx-smartcard.md

@@ -599,11 +599,11 @@ This policy setting allows you to control whether elliptic curve cryptography (E
 
 <!-- FilterDuplicateCerts-Description-Begin -->
 <!-- Description-Source-ADMX -->
-This policy settings lets you configure if all your valid logon certificates are displayed.
+This policy setting lets you configure if all your valid logon certificates are displayed.
 
 During the certificate renewal period, a user can have multiple valid logon certificates issued from the same certificate template. This can cause confusion as to which certificate to select for logon. The common case for this behavior is when a certificate is renewed and the old one has not yet expired. Two certificates are determined to be the same if they are issued from the same template with the same major version and they are for the same user (determined by their UPN).
 
-If there are two or more of the "same" certificate on a smart card and this policy is enabled then the certificate that is used for logon on Windows 2000, Windows XP, and Windows 2003 Server will be shown, otherwise the the certificate with the expiration time furthest in the future will be shown.
+If there are two or more of the "same" certificate on a smart card and this policy is enabled then the certificate that is used for logon on Windows 2000, Windows XP, and Windows 2003 Server will be shown, otherwise the certificate with the expiration time furthest in the future will be shown.
 
 > [!NOTE]
 > This setting will be applied after the following policy "Allow time invalid certificates"
@@ -796,7 +796,7 @@ By default the user principal name (UPN) is displayed in addition to the common
 
 - If you enable this policy setting or do not configure this setting, then the subject name will be reversed.
 
-If you disable , the subject name will be displayed as it appears in the certificate.
+If you disable, the subject name will be displayed as it appears in the certificate.
 <!-- ReverseSubject-Description-End -->
 
 <!-- ReverseSubject-Editable-Begin -->

windows/deployment/TOC.yml

@@ -11,8 +11,8 @@
           href: update/waas-quick-start.md        
         - name: Windows as a service overview
           href: update/waas-overview.md      
-        - name: Monthly quality updates
+        - name: Update release cycle
-          href: update/quality-updates.md
+          href: update/release-cycle.md
         - name: Basics of Windows updates, channels, and tools
           href: update/get-started-updates-channels-tools.md
         - name: Prepare servicing strategy for Windows client updates

windows/deployment/deploy-enterprise-licenses.md

@@ -8,7 +8,9 @@ ms.prod: windows-client
 ms.technology: itpro-fundamentals
 ms.localizationpriority: medium
 ms.topic: how-to
-ms.collection: highpri, tier2
+ms.collection:
+  - highpri
+  - tier2
 appliesto: 
   - ✅ <b>Windows 10</b>
   - ✅ <b>Windows 11</b>

windows/deployment/deploy-whats-new.md

@@ -1,15 +1,17 @@
 ---
 title: What's new in Windows client deployment
-manager: aaroncz
-ms.author: frankroj
 description: Use this article to learn about new solutions and online content related to deploying Windows in your organization.
 ms.localizationpriority: medium
 ms.prod: windows-client
-author: frankroj
-ms.topic: article
-ms.collection: highpri, tier2
-ms.date: 11/23/2022
 ms.technology: itpro-deploy
+author: frankroj
+manager: aaroncz
+ms.author: frankroj
+ms.topic: conceptual
+ms.collection:
+  - highpri
+  - tier2
+ms.date: 11/23/2022
 ---
 
 # What's new in Windows client deployment

windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md

@@ -8,7 +8,9 @@ ms.localizationpriority: medium
 author: frankroj
 ms.topic: article
 ms.technology: itpro-deploy
-ms.collection: highpri, tier2
+ms.collection:
+  - highpri
+  - tier3
 ms.date: 11/28/2022
 ---
 

windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md

@@ -8,7 +8,9 @@ ms.localizationpriority: medium
 author: frankroj
 ms.topic: article
 ms.technology: itpro-deploy
-ms.collection: highpri, tier2
+ms.collection:
+  - highpri
+  - tier3
 ms.date: 11/28/2022
 ---
 

windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md

@@ -8,7 +8,9 @@ ms.localizationpriority: medium
 author: frankroj
 ms.topic: article
 ms.technology: itpro-deploy
-ms.collection: highpri, tier2
+ms.collection:
+  - highpri
+  - tier3
 ms.date: 11/28/2022
 ---
 

windows/deployment/do/index.yml

@@ -9,7 +9,9 @@ metadata:
   ms.topic: landing-page
   ms.prod: windows-client
   ms.technology: itpro-updates
-  ms.collection: highpri, tier3
+  ms.collection:
+    - highpri
+    - tier3
   author: aczechowski
   ms.author: aaroncz
   manager: dougeby

windows/deployment/do/mcc-isp-faq.yml

@@ -5,7 +5,9 @@ metadata:
   author: amymzhou
   ms.author: amymzhou
   manager: aaroncz
-  ms.collection: highpri, tier3
+  ms.collection:
+    - highpri
+    - tier3
   ms.topic: faq
   ms.date: 09/30/2022
   ms.prod: windows-client

windows/deployment/do/waas-delivery-optimization-faq.yml

@@ -2,13 +2,15 @@
 metadata:
   title: Delivery Optimization Frequently Asked Questions
   description: The following is a list of frequently asked questions for Delivery Optimization.
-  ms.reviewer: aaroncz
+  ms.reviewer: mstewart
   ms.prod: windows-client
-  author: carmenf
+  author: cmknox
   ms.author: carmenf
-  manager: dougeby
+  manager: aaroncz
   ms.technology: itpro-updates
-  ms.collection: highpri, tier3
+  ms.collection:
+    - highpri
+    - tier3
   ms.topic: faq
   ms.date: 08/04/2022
 title: Delivery Optimization Frequently Asked Questions

windows/deployment/do/waas-delivery-optimization-reference.md

@@ -285,7 +285,7 @@ This policy allows you to specify how your client(s) can discover Delivery Optim
 
 With either option, the client will query DHCP Option ID 235 and use the returned value as the Cache Server Hostname. Option 2 overrides the Cache Server Hostname policy, if set. **By default, this policy has no value.**
 
-Set this policy to designate Delivery Optimization in Network Cache servers through a custom DHCP Option. Specify the custom DHCP option on your server as *text* type. You can add one or more values as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address with commas.
+Set this policy to designate Delivery Optimization in Network Cache servers through a custom DHCP Option. Specify the custom DHCP option on your DHCP server as *text* type. You can add one or more values as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address with commas.
 
 > [!NOTE]
 > If you format the DHCP Option ID incorrectly, the client will fall back to the Cache Server Hostname policy value if that value has been set.

windows/deployment/do/waas-delivery-optimization.md

@@ -1,14 +1,16 @@
 ---
 title: What is Delivery Optimization?
-manager: aaroncz
 description: This article provides information about Delivery Optimization, a peer-to-peer distribution method in Windows 10 and Windows 11.
 ms.prod: windows-client
-author: cmknox
-ms.localizationpriority: medium
-ms.author: carmenf
-ms.collection: tier3, highpri
-ms.topic: article
 ms.technology: itpro-updates
+ms.localizationpriority: medium
+author: cmknox
+ms.author: carmenf
+manager: aaroncz
+ms.collection:
+  - tier3
+  - highpri
+ms.topic: overview
 ms.date: 12/31/2017
 ---
 
@@ -16,7 +18,7 @@ ms.date: 12/31/2017
 
 **Applies to**
 
-- Windows 10
+- Windows 10
 - Windows 11
 
 > **Looking for Group Policy objects?** See [Delivery Optimization reference](waas-delivery-optimization-reference.md) or the master spreadsheet available at the Download Center [for Windows 11](https://www.microsoft.com/en-us/download/details.aspx?id=104594) or [for Windows 10](https://www.microsoft.com/en-us/download/details.aspx?id=104678).
@@ -81,7 +83,7 @@ In Windows client Enterprise, Professional, and Education editions, Delivery Opt
 
 ## How Microsoft uses Delivery Optimization
 
-At Microsoft, to help ensure that ongoing deployments weren't affecting our network and taking away bandwidth for other services, Microsoft IT used a couple of different bandwidth management strategies. Delivery Optimization, peer-to-peer caching enabled through Group Policy, was piloted and then deployed to all managed devices using Group Policy. Based on recommendations from the Delivery Optimization team, we used the "group" configuration to limit sharing of content to only the devices that are members of the same Active Directory domain. The content is cached for 24 hours. More than 76 percent of content came from peer devices versus the Internet.
+At Microsoft, to help ensure that ongoing deployments weren't affecting our network and taking away bandwidth for other services, Microsoft IT used a couple of different bandwidth management strategies. Delivery Optimization, peer-to-peer caching enabled through Group Policy, was piloted and then deployed to all managed devices using Group Policy. Based on recommendations from the Delivery Optimization team, we used the "group" configuration to limit sharing of content to only the devices that are members of the same Active Directory domain. The content is cached for 24 hours. More than 76 percent of content came from peer devices versus the Internet.
 
 For more information, check out the [Adopting Windows as a Service at Microsoft](https://www.microsoft.com/itshowcase/Article/Content/851/Adopting-Windows-as-a-service-at-Microsoft) technical case study.