Merge pull request #18936 from MandiOhlinger/ado35568855

ADO 35568855 - Windows 10 instances in fundamentals

Author: MandiOhlinger

.openpublishing.redirection.intune.json

@@ -1857,7 +1857,7 @@
     },
     {
       "source_path": "intune/intune/fundamentals/intune-legacy-pc-client.md",
-      "redirect_url": "/intune/intune-service/fundamentals/intune-legacy-pc-client",
+      "redirect_url": "/intune/intune-service/fundamentals/tutorial-walkthrough-endpoint-manager",
       "redirect_document_id": false
     },
     {

.openpublishing.redirection.json

@@ -1,7 +1,11 @@
 {
   "redirections": [
 
-
+    {
+      "source_path": "intune/intune-service/fundamentals/intune-legacy-pc-client.md",
+      "redirect_url": "/intune/intune-service/fundamentals/tutorial-walkthrough-endpoint-manager",
+      "redirect_document_id": false
+    },
     {
       "source_path": "intune/intune-service/copilot/security-copilot-surface-portal.md",
       "redirect_url": "/surface/security-copilot-surface-management-portal",

intune/intune-service/fundamentals/china.md

@@ -27,7 +27,7 @@ Because the China services are operated by a partner from inside China, there ar
 - Migrations from public clouds to sovereign clouds aren't supported. Customers interested in moving to Intune operated by 21Vianet must migrate manually.
 - The tenant attach feature (syncing devices to Intune without enrollment to support cloud console scenarios) isn't currently supported.
 - Derived Credentials aren't supported with Intune operated by 21Vianet.
-- Management of Windows 10 is supported by using the modern MDM channel.
+- Management of Windows is supported by using the modern MDM channel.
 - Intune operated by 21Vianet doesn't support on-premises Exchange Connector.
 - Windows Autopilot and Business Store features aren't currently available. As part of the 2409 Intune service release, we announced support for Windows Autopilot Device Preparation policy in Intune operated by 21Vianet in China cloud. For  more information, see [(What's new in Windows Autopilot device preparation | Microsoft Learn](/autopilot/device-preparation/whats-new#windows-autopilot-device-preparation-deployment-status-report-available-in-the-monitor-tab-under-enrollment)
 - Intune operated by 21Vianet supports the Company Portal for Windows app. Use WinGet to download the Company portal package and dependencies and then deploy as a Line-of-Business app via Intune. [Use the WinGet tool to install and manage applications](/windows/package-manager/winget/).

intune/intune-service/fundamentals/create-custom-role.md

@@ -221,7 +221,7 @@ The following permissions are available when creating custom roles.
 | Remote Help app/View screen   | View screen allows the helper to view the sharer's device when Remote Help is enabled.    |
 | Remote tasks/Bypass activation lock | Remove the Activation Lock from supervised devices without requiring the user's Apple ID and password. This may be required if a user leaves the company and returns the device; without the user's Apple ID and password, there's no way to reactivate the device. Or, you need to reassign some devices to a different department during a device refresh in your organization. You can only reassign devices that don't have Activation Lock enabled. You must also have the Managed Device Read permission to view devices in the Azure portal before initiating this remote task. |
 | Remote tasks/Change organizational unit   | Move a Chrome Enterprise device to an existing organizational unit in your Google Workspace domain.  |
-| Remote tasks/Clean PC| Initiate a Fresh start device action. This action removes any apps that are installed on a Windows 10 PC that is running the Creators Update. Then, it automatically updates the PC to the latest version of Windows.|
+| Remote tasks/Clean PC| Initiate a Fresh start device action. This action removes any apps that are installed on a Windows device. |
 | Remote tasks/Collect diagnostics    | Collect device diagnostics    |
 | Remote tasks/Disable lost mode| Turn off the lost mode for an iOS device. |
 | Remote tasks/Enable lost mode | Initiate lost mode on lost or stolen iOS devices. This mode lets you enter a message and a phone number that appears on the lock screen of the device. To use lost mode, the device must be a corporate-owned iOS device that is in supervised mode.  |

intune/intune-service/fundamentals/deployment-guide-enrollment-windows.md

@@ -58,7 +58,7 @@ You can use this enrollment option to:
 | --- | --- |
 | You use Windows client. | ✅ <br/><br/> Configuration Manager supports Windows Server. |
 | You have Microsoft Entra ID P1 or P2 | ✅ |
-| You'll use Conditional Access (CA) on devices enrolled using [bulk enrollment](../enrollment/windows-bulk-enroll.md) with a provisioning package. | ✅ On Windows 11 and Windows 10 1803+, CA is available for Windows devices enrolled using bulk enrollment. <br/><br/> ❌ On Windows 10 1709 and older, CA isn't available for Windows devices enrolled using bulk enrollment. |
+| You'll use Conditional Access (CA) on devices enrolled using [bulk enrollment](../enrollment/windows-bulk-enroll.md) with a provisioning package. | ✅ On Windows, CA is available for Windows devices enrolled using bulk enrollment. |
 | You have remote workers. | ✅ |
 | Devices are personal or BYOD. | ✅ <br/><br/> ❌ If you use Group Policy, then bulk enrollment and automatic enrollment are for corporate-owned devices, not personal or BYOD. |
 | Devices are owned by the organization or school. | ✅  |
@@ -176,7 +176,7 @@ For more information about Windows Autopilot, go to [Windows Autopilot overview]
 | Devices are Microsoft Entra hybrid joined. | ✅ <br/><br/> Microsoft Entra hybrid joined devices are joined to your on-premises Active Directory, and registered with your Microsoft Entra ID. Devices in Microsoft Entra ID are available to Intune. Devices that aren't registered in Microsoft Entra ID aren't available to Intune. <br/><br/>A full Microsoft Entra joined solution might be better for your organization. For more information, go to the [Success with remote Windows Autopilot and Microsoft Entra hybrid join](https://techcommunity.microsoft.com/t5/intune-customer-success/success-with-remote-windows-autopilot-and-hybrid-azure-active/ba-p/2749353) blog.|
 | You have remote workers. | ✅ <br/><br/> The OEM or partner can send devices directly to your users.|
 | Devices are owned by the organization or school. | ✅ |
-| You have new or existing devices. | ✅ <br/><br/> You can update existing desktops running older Windows versions, like Windows 7, to Windows 10. This option also uses Microsoft Configuration Manager. |
+| You have new or existing devices. | ✅ <br/><br/> You can update existing desktops running older Windows versions. This option also uses Microsoft Configuration Manager. |
 | Need to enroll a few devices, or a large number of devices (bulk enrollment). | ✅ |
 | You have Microsoft Entra ID P1 or P2. | ✅ <br/><br/> Windows Autopilot uses Automatic enrollment. Automatic enrollment requires Microsoft Entra ID P1 or P2. |
 | Devices are associated with a single user. | ✅ |

intune/intune-service/fundamentals/device-lifecycle.md

@@ -28,15 +28,13 @@ Here are the types of configuration options that are available:
 
 - [**Device configuration profiles**](../configuration/device-profiles.md). These policies let you configure the features and capabilities of the devices that you manage. For example, you could require the use of a password on Android phones or disable the use of the camera on iPhones.
 - [**Company resource access**](../configuration/device-profiles.md). When you let your users access their work on their personal device, this can present you with challenges. For example, how do you ensure that all devices that need to access company email are configured correctly? How can you ensure that users can access the company network with a VPN connection without having to know complex settings? Intune can help to reduce this burden by automatically configuring the devices that you manage to access common company resources.
-- [**Windows PC management policies (with the Intune client software)**](./intune-legacy-pc-client.md). While enrolling Windows PCs with Intune gives you the most device management capabilities, Intune continues to support managing Windows PCs with the Intune client software. If you need information about some of the tasks that you can perform with PCs, start here.
 
 ## Protect
 
 In the modern IT world, protecting devices from unauthorized access is one of the most important tasks that you perform. In addition to the items in the **Configure** step of the device lifecycle, Intune provides these capabilities that help protect devices you manage from unauthorized access or malicious attacks:
 
 - [**Multi-factor authentication**](../enrollment/multi-factor-authentication.md). Adding an extra layer of authentication to user sign-ins can help make devices even more secure. Many devices support multi-factor authentication that requires a second level of authentication, such as a phone call or text message, before users can gain access.
 - [**Windows Hello for Business settings**](../protect/windows-hello.md). Windows Hello for Business is an alternative sign-in method that lets users use a *gesture*—such as a fingerprint or Windows Hello—to sign in without needing a password.
-- [**Policies to protect Windows PCs (with the Intune client software)**](./intune-legacy-pc-client.md). When you manage Windows PCs by using the Intune client software, policies are available that let you control settings for Endpoint Protection, software updates, and Windows Firewall on PCs that you manage.
 
 ## Retire
 

intune/intune-service/fundamentals/filters-device-properties.md

@@ -5,7 +5,7 @@ author: MandiOhlinger
 ms.author: mandia
 ms.date: 03/06/2025
 ms.topic: reference
-ms.reviewer: gokarthi
+ms.reviewer: mattcall
 ms.collection:
 - M365-identity-device-management
 ---
@@ -27,6 +27,10 @@ This article describes the different [managed device properties](#managed-device
 
 [!INCLUDE [android_device_administrator_support](../includes/android-device-administrator-support.md)]
 
+## Before you begin
+
+- [!INCLUDE [windows-10-support](../includes/windows-10-support.md)]
+
 ## Managed device properties
 
 You can use the following device properties in your managed device filter rules:
@@ -286,8 +290,10 @@ You can use the following device properties in your managed device filter rules:
 
   - Windows
 
-> [!TIP]
-> In Windows PowerShell, use the `Get-WmiObject -Class Win32_OperatingSystem |select operatingsystemSKU` command on a Windows device to return the SKU number.
+> [!NOTE]
+>
+> - In Windows PowerShell, use the `Get-WmiObject -Class Win32_OperatingSystem |select operatingsystemSKU` command on a Windows device to return the SKU number.
+> - [!INCLUDE [windows-10-support](../includes/windows-10-support.md)]
 
 ## Managed app properties
 

intune/intune-service/fundamentals/filters-performance-recommendations.md

@@ -5,7 +5,7 @@ author: MandiOhlinger
 ms.author: mandia
 ms.date: 12/11/2024
 ms.topic: article
-ms.reviewer: gokarthi
+ms.reviewer: mattcall
 ms.collection:
 - M365-identity-device-management
 ---

intune/intune-service/fundamentals/filters-reports-troubleshoot.md

@@ -5,7 +5,7 @@ author: MandiOhlinger
 ms.author: mandia
 ms.date: 11/20/2024
 ms.topic: how-to
-ms.reviewer: gokarthi, abalwan
+ms.reviewer: mattcall, abalwan
 ms.collection:
 - M365-identity-device-management
 ---

intune/intune-service/fundamentals/filters-supported-workloads.md

@@ -5,7 +5,7 @@ author: MandiOhlinger
 ms.author: mandia
 ms.date: 07/28/2025
 ms.topic: reference
-ms.reviewer: gokarthi
+ms.reviewer: mattcall
 ms.collection:
 - M365-identity-device-management
 ---