Merge pull request #19457 from MicrosoftDocs/main

Auto Publish – main to live - 2026-01-27 23:30 UTC

Author: learn-build-service-prod[bot]

intune/intune-service/apps/app-protection-policies-monitor.md

@@ -9,17 +9,18 @@ ms.collection:
 ---
 
 # How to Monitor App Protection Policies
-[!INCLUDE [azure_portal](../includes/azure_portal.md)]
 
 You can monitor the status of the app protection policies that you applied to users from the Intune app protection pane in Intune. Additionally, you can find information about the users affected by app protection policies, policy compliance status, and any issues that your users might be experiencing.
 
 App protection data is retained for a minimum of 90 days. Any app instances that checked in to the Intune service within the past 90 days is included in the app protection status report.
 
-> [!NOTE]
-> When you delete an app protection policy, scoped admins no longer see app instances associated with that policy. Global admins continue to see the policy name listed as "not available."
+## Before you begin
 
-> [!NOTE]
-> For iOS 16 and later devices, the **Device Name** value in all app protection reports is a generic device name. For more information, see [Apple Developer documentation](https://developer.apple.com/documentation/uikit/uidevice/1620015-name).
+- When you delete an app protection policy, scoped admins no longer see app instances associated with that policy. Global Administrators continue to see the policy name listed as "not available."
+
+  [!INCLUDE [global-admin](../includes/global-admin.md)]
+
+- For iOS 16 and later devices, the **Device Name** value in all app protection reports is a generic device name. For more information, see [Apple Developer documentation](https://developer.apple.com/documentation/uikit/uidevice/1620015-name).
 
 ## View the **App protection status** report
 

intune/intune-service/apps/tutorial-configure-slack-enterprise-grid.md

@@ -38,11 +38,6 @@ Turn on EMM for your Slack Enterprise Grid plan by following [Slack's instructio
 
 Sign in to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) as the built-in **[Intune Administrator](/entra/identity/role-based-access-control/permissions-reference#intune-administrator)** Microsoft Entra role.
 
-If you created an Intune Trial subscription, the account that created the subscription is a Microsoft Entra [Global Administrator](/entra/identity/role-based-access-control/permissions-reference#global-administrator).
-
-> [!CAUTION]
-> [!INCLUDE [global-admin](../includes/global-admin.md)]
-
 ## Set up Slack for EMM on iOS devices
 
 Add the iOS/iPadOS app Slack for EMM to your Intune tenant and create an app configuration policy to enable your organizations' iOS/iPadOS users to access Slack with Intune as an EMM provider.

intune/intune-service/fundamentals/deployment-plan-setup.md

@@ -21,7 +21,7 @@ The first step when deploying Microsoft Intune is to set up your Intune environm
 
 This article takes you through each step in the process of setting up Microsoft Intune. This article also provides the choices and considerations you need to make when setting up an endpoint-management solution such as Intune.
 
-The purpose of this article is to help you get a better understanding of Intune's supported configurations. After reviewing the article, you should be able to sign up for the Microsoft Intune's free trial, add end users, define user groups, assign licenses to users, and set up the other needed settings to begin using Microsoft Intune. All the steps provided in the article help you to add and manage devices and apps using Intune.
+The purpose of this article is to help you get a better understanding of Intune's supported configurations. After reviewing the article, you should be able to sign up for the [Microsoft Intune's free trial](try-intune-overview.md), add end users, define user groups, assign licenses to users, and set up the other needed settings to begin using Microsoft Intune. All the steps provided in the article help you to add and manage devices and apps using Intune.
 
 ## Prerequisites
 
@@ -95,10 +95,7 @@ The people in your organization each need a user account before they can sign in
 
 As an administrator, you can add users individually or in bulk to Intune.
 
-You must be a Microsoft Entra [License Administrator](/entra/identity/role-based-access-control/permissions-reference#license-administrator) or [User Administrator](/entra/identity/role-based-access-control/permissions-reference#user-administrator) to add users to Intune. If you created an Intune Trial subscription, the account that created the subscription is a Microsoft Entra [Global Administrator](/entra/identity/role-based-access-control/permissions-reference#global-administrator).
-
-> [!CAUTION]
-> [!INCLUDE [global-admin](../includes/global-admin.md)]
+You must be a Microsoft Entra [License Administrator](/entra/identity/role-based-access-control/permissions-reference#license-administrator) or [User Administrator](/entra/identity/role-based-access-control/permissions-reference#user-administrator) to add users to Intune.
 
 ## 5 - Create groups in Intune
 
@@ -120,7 +117,7 @@ For guidance, go to [Microsoft Intune licensing](licenses.md).
 
 ✔️ **Get started with assigning licenses to users**
 
-Whether you added users one at a time or all at once, you must assign each user an Intune license before users can enroll their devices in Intune. The Microsoft Intune free trial provides 25 Intune licenses. For a list of licenses, see Licenses that include Intune.
+Whether you added users one at a time or all at once, you must assign each user an Intune license before users can enroll their devices in Intune. The [Microsoft Intune's free trial](try-intune-overview.md) provides 25 Intune licenses. For a list of licenses, see Licenses that include Intune.
 Give users permission to use Intune. Each user or userless device requires an Intune license to access the service.
 
 For guidance, go to [Assign licenses](licenses-assign.md).

intune/intune-service/fundamentals/intune-endpoints.md

@@ -354,10 +354,41 @@ Before running the script, ensure you have:
 
 ### Usage
 
-Run the script from an Intune-managed device to test connectivity to the Intune network endpoints using Azure Front Door.
+Run the script from an Intune-managed device to test connectivity to the Intune network endpoints using Azure Front Door. The script can be run in the context of the logged-on user or as the Local System account (Device context).
 
-Open **PowerShell** and use the following syntax:
+#### Script Execution
 
+**Option 1: Run as Current User**
+
+Open **PowerShell** as the current user, navigate to the directory containing the script and run with the following command: 
+
+```powershell
+.\Test-IntuneAFDConnectivity.ps1
+```
+
+**Option 2: Run as System (Device Context)**
+
+To test connectivity as the device itself, use [PsExec](/sysinternals/downloads/psexec) from [Microsoft Sysinternals](/sysinternals/downloads/pstools).
+
+1. Download [PsExec](/sysinternals/downloads/psexec)
+
+1. Open **PowerShell** as an Administrator. Navigate to the directory containing **PsExec**.
+
+3. Run the following command to run the script as SYSTEM:
+
+```powershell
+.\psexec.exe -accepteula -i -s powershell.exe
+```
+
+1. In the new PowerShell window, navigate to the directory containing the script and run with the following command:
+
+```powershell
+.\Test-IntuneAFDConnectivity.ps1
+```
+
+### Options and Commands
+
+Use the following options based on your environment:
 
 |Cloud|Command|Notes|
 | -------- | -------- | -------- |