Merging changes synced from https://github.com/MicrosoftDocs/memdocs-pr (branch live)

Author: Learn Build Service GitHub App

.openpublishing.redirection.intune.json

@@ -1,5 +1,115 @@
 {
   "redirections": [
+    {
+      "source_path": "intune/intune-service/protect/fota-updates-android.md",
+      "redirect_url": "/intune/device-updates/android/fota-updates",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/software-update-agent-error-codes.md",
+      "redirect_url": "/intune/device-updates/windows/software-update-agent-error-codes",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/software-updates-guide-android.md",
+      "redirect_url": "/intune/device-updates/android/software-updates-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/software-updates-guide-personal-byod.md",
+      "redirect_url": "/intune/device-updates/byod-software-updates-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/apple.md",
+      "redirect_url": "/intune/device-updates/apple/index",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/apple-reports.md",
+      "redirect_url": "/intune/device-updates/apple/reports",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-guide-ios-ipados.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-guide-ios-ipados",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-guide-macos.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-guide-macos",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-ios.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-ios",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-macos.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-macos",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-10-expedite-updates.md",
+      "redirect_url": "/intune/device-updates/windows/expedite-updates",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-10-feature-updates.md",
+      "redirect_url": "/intune/device-updates/windows/feature-updates",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-10-update-rings.md",
+      "redirect_url": "/intune/device-updates/windows/update-rings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-driver-updates-overview.md",
+      "redirect_url": "/intune/device-updates/windows/driver-updates-overview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-driver-updates-policy.md",
+      "redirect_url": "/intune/device-updates/windows/driver-updates-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-quality-update-policy.md",
+      "redirect_url": "/intune/device-updates/windows/quality-updates-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-compatibility-reports.md",
+      "redirect_url": "/intune/device-updates/windows/compatibility-reports",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-for-business-configure.md",
+      "redirect_url": "/intune/device-updates/windows/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-reports.md",
+      "redirect_url": "/intune/device-updates/windows/reports",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-rollout-options.md",
+      "redirect_url": "/intune/device-updates/windows/rollout-options",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-settings.md",
+      "redirect_url": "/intune/device-updates/windows/settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/zebra-lifeguard-ota-integration.md",
+      "redirect_url": "/intune/device-updates/android/zebra-lifeguard-ota-integration",
+      "redirect_document_id": false
+    },
     {
       "source_path": "intune/analytics/adoption-score.md",
       "redirect_url": "/intune/endpoint-analytics/adoption-score",

autopilot/known-issues.md

@@ -1,7 +1,7 @@
 ---
 title: Windows Autopilot known issues
 description: Be informed about known issues that might occur during Windows Autopilot deployment. # RSS subscription is based on this description so don't change. If the description needs to change, update RSS URL in the Tip in the article.
-ms.date: 08/13/2025
+ms.date: 12/15/2025
 ms.collection:
   - M365-modern-desktop
   - highpri
@@ -137,13 +137,16 @@ The Windows Autopilot deployment report was updated to a new infrastructure that
 
 <!-- MAXADO-9270654 -->
 
-### Auto logon for Kiosk device profile only partially fixed
+### Auto logon for Kiosk device profile is fixed
 
-Date added: *August 21, 2024*
+Date added: *August 21, 2024*  
+Date updated: *December 15, 2025*
 
-The known issue of [Kiosk device profiles not auto logging in when auto logon was enabled](#kiosk-device-profile-not-auto-logging-in) was previously reported as fixed. However, there are scenarios where the issue might still occur when using autologon with Kiosks and [Assigned Access](/windows/configuration/assigned-access/overview). If multiple reboots or unexpected reboots occur during the Windows out-of-box experience (OOBE) when initially configuring the Kiosk, the autologon entries in the registry might be deleted. The issue is being investigated.
+The known issue of [Kiosk device profiles not auto logging in when auto logon was enabled](#kiosk-device-profile-not-auto-logging-in) was previously reported as fixed. There were scenarios where the issue could still occur when using autologon with Kiosks and [Assigned Access](/windows/configuration/assigned-access/overview). If multiple reboots or unexpected reboots occur during the Windows out-of-box experience (OOBE) when initially configuring the Kiosk, the autologon entries in the registry might be deleted.
 
-The following workarounds are available until the issue is resolved:
+**Resolution**: This issue is fixed in Windows 11, version 24H2 on systems that are patched with [KB5058411](https://support.microsoft.com/topic/may-13-2025-kb5058411-os-build-26100-4061-356568c2-c730-469e-819d-b680d43b1265) or later.
+
+Prior to the [KB5058411](https://support.microsoft.com/topic/may-13-2025-kb5058411-os-build-26100-4061-356568c2-c730-469e-819d-b680d43b1265) fix, the following workarounds were available:
 
 1. Apply or reapply the kiosk profile after Windows Autopilot completes.
 
@@ -204,9 +207,9 @@ Platforms with the Infineon SLB9672 TPM with firmware release 15.22 with EK cert
 ### Kiosk device profile not auto logging in
 
 Date added: *January 30, 2023*<br>
-Date updated: *August 21, 2024*
+Date updated: *August 21, 2024*, *December 15, 2025*
 
-There's currently a known issue in the following Windows Updates released in January 2023:
+There was a known issue in the following Windows Updates released in January 2023:
 
 - Windows 11, version 22H2: [KB5022303](https://support.microsoft.com/topic/january-10-2023-kb5022303-os-build-22621-1105-c45956c6-4ccb-4216-832c-2ec6309c7629)
 - Windows 11, version 21H2: [KB5022287](https://support.microsoft.com/topic/january-10-2023-kb5022287-os-build-22000-1455-951898ec-2628-4d25-850e-9a44207bc139)
@@ -218,9 +221,7 @@ If these updates are installed on a device, Kiosk device profiles that have auto
 - Windows 11, version 21H2: [KB5025224](https://support.microsoft.com/topic/april-11-2023-kb5025224-os-build-22000-1817-ebc75372-608d-4a77-a6e0-cb1e15f117fc) or later.
 - Windows 10, version 22H2: [KB5023773](https://support.microsoft.com/topic/march-21-2023-kb5023773-os-builds-19042-2788-19044-2788-and-19045-2788-preview-5850ac11-dd43-4550-89ec-9e63353fef23) or later.
 
-> [!NOTE]
->
-> This issue was only partially fixed and can still occur under certain conditions. For more information, see [Auto logon for Kiosk device profile only partially fixed](#auto-logon-for-kiosk-device-profile-only-partially-fixed).
+**Resolution**: This issue is fixed. For more information, see [Auto logon for Kiosk device profile only partially fixed](#auto-logon-for-kiosk-device-profile-is-fixed).
 
 ### TPM attestation isn't working on AMD platforms with ASP fTPM
 

intune/agents/vulnerability-remediation-agent-use.md

@@ -140,16 +140,16 @@ Remediation guidance falls into the following categories:
 - Deployment of a quality update policy
 - Expedited deployment of quality updates using Windows update rings
 
-When a recommendation involves a Windows update, the agent guidance includes details about using [update rings](../intune-service/protect/windows-10-update-rings.md) to help manage a controlled rollout of the update.
+When a recommendation involves a Windows update, the agent guidance includes details about using [update rings](../device-updates/windows/update-rings.md) to help manage a controlled rollout of the update.
 
 > [!IMPORTANT]
-> Some suggested Windows update recommendations begin with **Expedite**. The agent uses this format when the CVE's Common Vulnerability Scoring System (CVSS) score reaches a risk value of **9.0** or greater. For this level of risk, the agent recommends expediting these updates to your devices immediately. The guidance includes how to use [Expedited installation of quality updates](../intune-service/protect/windows-10-expedite-updates.md) to more rapidly deploy the recommended update.
+> Some suggested Windows update recommendations begin with **Expedite**. The agent uses this format when the CVE's Common Vulnerability Scoring System (CVSS) score reaches a risk value of **9.0** or greater. For this level of risk, the agent recommends expediting these updates to your devices immediately. The guidance includes how to use [Expedited installation of quality updates](../device-updates/windows/expedite-updates.md) to more rapidly deploy the recommended update.
 
 #### Configuration recommendations
 
 > [!NOTE]
 >  
-> There is an active but temporary issue affecting the Vulnerability Remediation agent. Until it’s resolved, the agent is unable to provide recommended __Configurations__ for settings to use for this threat. The agent still identifies threats, explains their background, and offers step-by-step actions.
+> There is an active but temporary issue affecting the Vulnerability Remediation agent. Until it's resolved, the agent is unable to provide recommended __Configurations__ for settings to use for this threat. The agent still identifies threats, explains their background, and offers step-by-step actions.
 >
 > Configuration recommendations will resume automatically once the issue is resolved.
 

intune/configmgr/comanage/faq.yml

@@ -129,7 +129,7 @@ sections:
         answer: |
           You can manage updates for Windows and Microsoft 365 apps with either Configuration Manager or Intune. Configuration Manager provides a very detailed and controlled process for managing these updates and their content, which is important to some customers. A modern approach is to just keep devices up to date, but still control the timing and user experiences.
 
-          If you switch the **Windows Update policies** workload to Intune, then it becomes the management authority for Windows quality and feature updates. Use Intune to configure settings for update rings and feature update settings. For more information, see [Manage Windows software updates in Intune](../../intune-service/protect/windows-update-for-business-configure.md).
+          If you switch the **Windows Update policies** workload to Intune, then it becomes the management authority for Windows quality and feature updates. Use Intune to configure settings for update rings and feature update settings. For more information, see [Manage Windows software updates in Intune](../../device-updates/windows/configure.md).
 
           If you switch the **Office Click-to-Run apps** workload to Intune, then it becomes the management authority for Microsoft 365 apps and updates. When you create a new Microsoft 365 suite deployment, choose the update channel for your clients will be at. For more information, see the following articles:
 

intune/configmgr/comanage/workloads.md

@@ -51,7 +51,7 @@ After moving the Windows Update workload to Intune, the client settings in Confi
 > [!NOTE]
 > To use Windows Autopatch with these devices, this workload must be moved to Intune, and client settings for Software Updates set to 'No' in Configuration Manager. For more information, see [Prerequisites for Windows Autopatch](/windows/deployment/windows-autopatch/prepare/windows-autopatch-prerequisites).
 
-For more information on the Intune feature, see [Manage Windows software updates in Intune](../../intune-service/protect/windows-update-for-business-configure.md).
+For more information on the Intune feature, see [Manage Windows software updates in Intune](../../device-updates/windows/configure.md).
 
 ## Resource access policies
 

intune/configmgr/core/plan-design/hierarchy/microsoft-connected-cache.md

@@ -262,7 +262,7 @@ When you install a Microsoft Connected Cache on a Configuration Manager distribu
 
 To configure the device to use the Microsoft Connected Cache, configure the **DOCacheHost** policy. Set it to the FQDN or IP address of the Configuration Manager distribution point. For more information on this policy, see [Policy CSP - DeliveryOptimization](/windows/client-management/mdm/policy-csp-deliveryoptimization#deliveryoptimization-docachehost).
 
-To use Intune to configure this policy, use the **DO Cache Host** setting in Intune Delivery Optimization profiles created *after* April 24, 2025. If your Intune profile was created *before* April 24, 2025, use the setting named **Cache server host names**. For more information, see [Delivery Optimization Windows devices in Intune](../../../../intune-service/configuration/delivery-optimization-windows.md).
+To use Intune to configure this policy, use the **DO Cache Host** setting in Intune Delivery Optimization profiles created *after* April 24, 2025. If your Intune profile was created *before* April 24, 2025, use the setting named **Cache server host names**. For more information, see [Delivery Optimization Windows devices in Intune](../../../..//intune-service/configuration/delivery-optimization-windows.md).
 
 When you enable this policy for cloud-managed devices, either type of device can request the server to cache content, and either can download the content. If multiple devices request the same content, no matter their management authority, they download supported and available content from the Microsoft Connected Cache.
 

…-service/protect/fota-updates-android.md …e/device-updates/android/fota-updates.mdintune/intune-service/protect/fota-updates-android.md renamed to intune/device-updates/android/fota-updates.md intune/intune-service/protect/fota-updates-android.md renamed to intune/device-updates/android/fota-updates.md

@@ -1,15 +1,12 @@
 ---
 title: Android FOTA Updates
 description: Use Microsoft Intune to manage firmware updates on Android devices. A FOTA update can include software and security patches, feature updates, and other changes to the device's firmware.
-author: paolomatarazzo
-ms.author: paoloma
 ms.date: 04/09/2025
 ms.topic: how-to
 ms.reviewer: jieyan
 ms.subservice: suite
 ms.collection:
 - M365-identity-device-management
-- highpri
 - sub-updates
 ---
 # Android FOTA Updates
@@ -25,7 +22,7 @@ You have two ways to manage software updates on android:
 - Use Firmware Over-the-Air (FOTA), which works for some OEMs.
 
     > [!NOTE]
-    > [Microsoft Intune Plan 2 or Microsoft Intune Suite license](../fundamentals/intune-add-ons.md) is required.
+    > [Microsoft Intune Plan 2 or Microsoft Intune Suite license](../../intune-service/fundamentals/intune-add-ons.md) is required.
     >
     > If Zebra updated the available firmware list in the last 24 hours, then the list of firmware available might take up to 24 hours to populate.
 
@@ -35,7 +32,7 @@ You have two ways to manage software updates on android:
     2. Navigate to **Devices** > **By platform** > **Android** > **Manage devices** > **Configuration** > **Create** > **New policy** > **Fully Managed, Dedicated, and Corporate-Owned Work Profile** > **Device restrictions**.
     3. Device restrictions profiles offer control over how the device handles over-the-air updates and allow you to set a freeze period for these updates.
     > [!NOTE]
-    > Not all device manufacturers support over-the-air updates. For more information, see [Corporate-owned Android Enterprise device restriction settings in Microsoft Intune](../configuration/device-restrictions-android-for-work.md)
+    > Not all device manufacturers support over-the-air updates. For more information, see [Corporate-owned Android Enterprise device restriction settings in Microsoft Intune](../../intune-service/configuration/device-restrictions-android-for-work.md)
 
 Firmware Over-the-Air (FOTA) updates allow remotely updating the firmware of devices using a wireless connection, rather than requiring the devices to be physically connected to a computer or network.
 
@@ -45,5 +42,5 @@ In the context of FOTA, a deployment is an update policy that includes instructi
 
 In addition, Microsoft Intune supports FOTA update management for supported devices from the following manufacturers. Manufacturer-specific FOTA support might offer more controls beyond what Device restrictions profiles offer.
 
-- **Zebra**: Go to [Zebra LifeGuard Over-the-Air Integration with Microsoft Intune](../protect/zebra-lifeguard-ota-integration.md).
+- **Zebra**: Go to [Zebra LifeGuard Over-the-Air Integration with Microsoft Intune](zebra-lifeguard-ota-integration.md).
 - **Samsung**: Go to [Samsung E-FOTA Update Management with Microsoft Endpoint Manager](https://techcommunity.microsoft.com/t5/intune-customer-success/samsung-e-fota-update-management-with-microsoft-endpoint-manager/ba-p/2002552)