Merge branch 'main' of https://github.com/MicrosoftDocs/memdocs-pr into ado36009095

Author: Mandi Ohlinger

.github/workflows/AutoPublish.yml

@@ -1,5 +1,115 @@
 {
   "redirections": [
+    {
+      "source_path": "intune/intune-service/protect/fota-updates-android.md",
+      "redirect_url": "/intune/device-updates/android/fota-updates",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/software-update-agent-error-codes.md",
+      "redirect_url": "/intune/device-updates/windows/software-update-agent-error-codes",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/software-updates-guide-android.md",
+      "redirect_url": "/intune/device-updates/android/software-updates-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/software-updates-guide-personal-byod.md",
+      "redirect_url": "/intune/device-updates/byod-software-updates-guide",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/apple.md",
+      "redirect_url": "/intune/device-updates/apple/index",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/apple-reports.md",
+      "redirect_url": "/intune/device-updates/apple/reports",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-guide-ios-ipados.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-guide-ios-ipados",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-guide-macos.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-guide-macos",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-ios.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-ios",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/updates/software-updates-macos.md",
+      "redirect_url": "/intune/device-updates/apple/software-updates-macos",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-10-expedite-updates.md",
+      "redirect_url": "/intune/device-updates/windows/expedite-updates",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-10-feature-updates.md",
+      "redirect_url": "/intune/device-updates/windows/feature-updates",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-10-update-rings.md",
+      "redirect_url": "/intune/device-updates/windows/update-rings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-driver-updates-overview.md",
+      "redirect_url": "/intune/device-updates/windows/driver-updates-overview",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-driver-updates-policy.md",
+      "redirect_url": "/intune/device-updates/windows/driver-updates-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-quality-update-policy.md",
+      "redirect_url": "/intune/device-updates/windows/quality-updates-policy",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-compatibility-reports.md",
+      "redirect_url": "/intune/device-updates/windows/compatibility-reports",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-for-business-configure.md",
+      "redirect_url": "/intune/device-updates/windows/configure",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-reports.md",
+      "redirect_url": "/intune/device-updates/windows/reports",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-rollout-options.md",
+      "redirect_url": "/intune/device-updates/windows/rollout-options",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/windows-update-settings.md",
+      "redirect_url": "/intune/device-updates/windows/settings",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "intune/intune-service/protect/zebra-lifeguard-ota-integration.md",
+      "redirect_url": "/intune/device-updates/android/zebra-lifeguard-ota-integration",
+      "redirect_document_id": false
+    },
     {
       "source_path": "intune/analytics/adoption-score.md",
       "redirect_url": "/intune/endpoint-analytics/adoption-score",

.openpublishing.redirection.intune.json

@@ -50,6 +50,9 @@ Headings are driven by article context. -->
       - **In progress** - Application is currently being installed.
       - **Skipped** - Usually indicates that the application was selected in the Windows Autopilot device preparation policy, but wasn't assigned to the device group specified in the Windows Autopilot device preparation policy. It can also mean that the application isn't applicable to the device.
       - **Failed** - The application failed to install. Check logs for further details.
+      
+      > [!Note]
+      > A [known issue](/autopilot/device-preparation/known-issues#win32-winget-and-enterprise-app-catalog-applications-are-skipped-when-managed-installer-policy-is-enabled-for-the-tenant) causes Win32, Microsoft Store, and Enterprise app catalog apps to be skipped when a managed installer is configured. 
 
    1. **Scripts** - Contains information regarding the PowerShell scripts being run during the Windows Autopilot device preparation including the list of scripts being run. Statuses include:
 

autopilot/device-preparation/includes/reporting-monitoring.md

@@ -46,7 +46,7 @@ Date updated: *September 9, 2025*
 
 [Monthly security update releases](/windows/deployment/update/release-cycle#monthly-security-update-release), also known as Windows quality updates, are installed during a Windows Autopilot device preparation deployment as part of the Windows out-of-box experience (OOBE). The monthly security update releases are installed after the device preparation page completes. These updates can't be disabled for Windows Autopilot device preparation deployments. Installation of monthly security update releases during OOBE normally adds 20-40 minutes to the provisioning process. Installation of monthly security update releases also might require restarts.
 
-More details regarding automatic installation of monthly security update releases can be found in the article [Install Windows monthly security update releases](/intune/intune-service/enrollment/windows-enrollment-status#install-windows-monthly-security-update-releases). However, this article is in regards to using the Enrollment Status Page (ESP) with Windows Autopilot. Windows Autopilot device preparation doesn't use the ESP, so the **Install Windows quality updates (might restart the device)** setting mentioned in this article isn't applicable to Windows Autopilot device preparation.
+More details regarding automatic installation of monthly security update releases can be found in the article [Install Windows monthly security update releases](/intune/intune-service/enrollment/windows-enrollment-status#windows-monthly-security-update-release-details). However, this article is in regards to using the Enrollment Status Page (ESP) with Windows Autopilot. Windows Autopilot device preparation doesn't use the ESP, so the **Install Windows quality updates (might restart the device)** setting mentioned in this article isn't applicable to Windows Autopilot device preparation.
 
 For more information, see [Get ready for Windows quality updates out of the box](https://techcommunity.microsoft.com/blog/windows-itpro-blog/get-ready-for-windows-quality-updates-out-of-the-box/4434498).  
 

autopilot/device-preparation/whats-new.md

@@ -39,26 +39,23 @@ appliesto:
 
     - **Owners**: Select users that own the group. Owners can also delete this group.
 
-    - **Dynamic device members**: Select **Add dynamic query** > **Add expression**.
-
-      Create rules using Windows Autopilot device attributes. Windows Autopilot devices that meet these rules are automatically added to the group. Creating an expression using non-Windows Autopilot attributes doesn't guarantee that devices included in the group are registered to Windows Autopilot.
+   - **Dynamic device members**: Select **Add dynamic query** > **Add expression**.
+   
+     Create rules using Windows Autopilot device attributes. Windows Autopilot devices that meet these rules are automatically added to the group. 
+     
+      > [!NOTE] 
+      >
+      > You should only create groups using the Autopilot device attributes, which are available only on registered devices. Creating an expression using non-Windows Autopilot attributes doesn't guarantee that devices will be members of the group before provisioning and could result in unexpected configuration during OOBE.
+   
 
       When creating expressions:
-
-      - To create a group that includes all of the Windows Autopilot devices, enter: `(device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]"))`.
-
-      - Intune's group tag field maps to the `OrderID` attribute on Microsoft Entra devices. To create a group that includes all Windows Autopilot devices with a specific group tag (the Microsoft Entra device `OrderID`), enter: `(device.devicePhysicalIds -any (_ -eq "[OrderID]:179887111881"))`.
-
-      - To create a group that includes all the Windows Autopilot devices with a specific Purchase Order ID, enter: `(device.devicePhysicalIds -any (_ -eq "[PurchaseOrderId]:76222342342"))`
-
+        - To create a group that includes all of the Windows Autopilot devices, enter: `(device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]"))`.
+        - Intune's group tag field maps to the `OrderID` attribute on Microsoft Entra devices. To create a group that includes all Windows Autopilot devices with a specific group tag (the Microsoft Entra device `OrderID`), enter: `(device.devicePhysicalIds -any (_ -eq "[OrderID]:179887111881"))`.
+        - To create a group that includes all the Windows Autopilot devices with a specific Purchase Order ID, enter: `(device.devicePhysicalIds -any (_ -eq "[PurchaseOrderId]:76222342342"))`
       **Save** the expressions.
 
 1. Select **Create**.
 
-> [!NOTE]
->
-> Anything assigned to these attributes is only assigned if the device is registered with Windows Autopilot.
-
 For a detailed tutorial on creating a device group for each of the Windows Autopilot scenarios using Intune, see the following links:
 
 - [User-driven Microsoft Entra join: Create a device group](tutorial/user-driven/azure-ad-join-device-group.md).

autopilot/enrollment-autopilot.md

@@ -14,9 +14,7 @@ Headings are driven by article context. -->
 The **Intune Connector for Active Directory**, also known as the Offline Domain Join (ODJ) Connector, joins computers to an on-premises domain during the Windows Autopilot process. The connector creates computer objects in a specified Organizational Unit (OU) in Active Directory during the domain join process.
 
 > [!IMPORTANT]
-> Starting with Intune 2501, the Intune Connector for Active Directory is updated and improves security by following least-privilege principles using a [Managed Service Account (MSA)](/windows-server/identity/ad-ds/manage/understand-service-accounts#standalone-managed-service-accounts). When you download the connector from Intune, you automatically get the updated version.
-> 
-> The [deprecated legacy connector is still available](https://www.microsoft.com/download/details.aspx?id=105392) and will soon stop accepting enrollment requests. If you still use the legacy connector, update immediately to avoid loss of functionality. For more information, see the [Intune Connector for Active Directory with low-privileged account for Windows Autopilot Hybrid Microsoft Entra join deployments](https://aka.ms/Intune-Connector-blog) blog post.
+> The Intune Connector for Active Directory versions older than 6.2501.2000.5 are deprecated and can no longer process enrollment requests. For more information, see the [Intune Connector for Active Directory with low-privileged account for Windows Autopilot Hybrid Microsoft Entra join deployments](https://aka.ms/Intune-Connector-blog) blog post.
 > 
 > To update the connector, you must:
 >