Merge pull request #16755 from MicrosoftDocs/main

Publish main to live, Monday 10:30AM PST, 11/25

Author: Ruchika-mittal01

autopilot/requirements.md

@@ -8,7 +8,7 @@ author: frankroj
 ms.author: frankroj
 ms.reviewer: jubaptis
 manager: aaroncz
-ms.date: 09/06/2024
+ms.date: 11/25/2024
 ms.collection:
   - M365-modern-desktop
   - highpri
@@ -67,6 +67,7 @@ The following editions of Windows 11 are supported:
 - Windows 11 Pro for Workstations.
 - Windows 11 Enterprise.
 - Windows 11 Education.
+- [Windows 11 Enterprise LTSC](/windows/whats-new/ltsc/overview).
 
 #### Windows 10
 

memdocs/intune/protect/certificates-profile-scep.md

@@ -5,7 +5,7 @@ keywords:
 author: lenewsad
 ms.author: lanewsad
 manager: dougeby
-ms.date: 11/19/2024
+ms.date: 11/25/2024
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: protect
@@ -55,7 +55,8 @@ Devices that run Android Enterprise might require a PIN before SCEP can provisio
 **Applies to**:  
 
 - Windows 10  
-- Windows 11  
+- Windows 11
+- Android   
 - iOS  
 - macOS  
 
@@ -101,7 +102,7 @@ For more information about the KDC's requirements and enforcement date for stron
 
      1. Under Monitoring, certificate reporting isn't available for **Device Owner** SCEP certificate profiles.
      1. You can't use Intune to revoke certificates that were provisioned by SCEP certificate profiles for **Device Owners**. You can manage revocation through an external process or directly with the certification authority.
-     1. SCEP certificate profiles are supported for Wi-Fi network configuration.  VPN configuration profile support isn't available. A future update might include support for VPN configuration profiles.  
+     1. SCEP certificate profiles are supported for Wi-Fi network configuration. VPN configuration profile support isn't available. A future update might include support for VPN configuration profiles.  
      1. The following variables aren't available for use on Android (AOSP) SCEP certificate profiles. Support for these variables will come in a future update.
         - onPremisesSamAccountName
         - OnPrem_Distinguished_Name

windows-365/link/deployment-overview.md

@@ -31,7 +31,7 @@ ms.collection:
 
 # Windows 365 Link deployment overview
 
-Before users can use their Windows 365 Link to connect to their Cloud PC provided by their organization, admins must set up the organization's Microsoft Entra ID and Intune environments to manage, register, and enroll the device.
+Before users can use their Windows 365 Link to connect to their Cloud PC provided by their organization, admins must set up the organization's Microsoft Entra ID and Intune environments to join and enroll the device.
 
 To set up your organization's environment to deploy and manage Windows 365 Link devices, admins must complete the following steps:
 
@@ -40,7 +40,7 @@ To set up your organization's environment to deploy and manage Windows 365 Link
 3. [Configure Microsoft Entra Mobility settings to automatically enroll Windows 365 Link devices in Intune](intune-automatic-enrollment.md).
 4. [Create an Intune filter for Windows 365 Link devices](create-intune-filter.md) (optional).
 5. [Optimize enrollment restrictions to let Windows 365 Link devices enroll](enrollment-restrictions.md).
-6. [Synchronize conditional access policies](conditional-access-policies-synchronize.md).
+6. [Validate conditional access policies](conditional-access-policies-synchronize.md).
 7. [Suppress single sign-on consent prompt](single-sign-on-suppress.md) (recommended).
 
 After setting up deployment for your Windows 365 Link devices, you can start [onboarding](onboarding.md) them.

windows-365/link/setup.md

@@ -49,13 +49,13 @@ Complete the following steps to set up your new device:
 4. On the **Let's connect you to a network** page, select a network > **Next**.
 ![Screenshot of network connect page.](media/setup/connect-network.png)
 5. On the **Let's set things up for your work or school** page, type your work or school e-mail > **Next**
-6[Screenshot of e-mail sign in page.](media/setup/email-sign-in.png)
+![Screenshot of e-mail sign in page.](media/setup/email-sign-in.png)
 7. Authenticate your account as requested. Your organization defined the authentication method (FIDO2 security key, Passkey (FIDO2), Microsoft Authenticator app, and so on).
 8. You're connected to your Cloud PC with all of your context and apps just where you left off.
 
 You can adjust additional settings prior to sign-in by using [Quick settings](quick-settings.md) in the bottom-right corner.
 
-When you sign in for the first time, the Windows 365 Link automatically joins Microsoft Entra ID and enrolls the device into Microsoft Intune tenant associated with the account used to sign in. You organization's admins use Intune to manage both virtual machines and hardware devices, including Windows 365 Link.
+When you sign in for the first time, the Windows 365 Link automatically joins Microsoft Entra ID and enrolls the device into Microsoft Intune tenant associated with the account used to sign in. Your organization's admins use Intune to manage both virtual machines and hardware devices, including Windows 365 Link.
 
 <!-- ########################## -->
 ## Next steps