Merge branch 'master' into processmitigations-v-tishe

Author: TimShererWithAquent

docset/winserver2012r2-ps/wsscmdlets/Set-HostedEmailAccount.md

@@ -26,10 +26,10 @@ A hosted email service provides a hosted email account.
 
 ### Example 1: Assign a hosted email account to a local user account
 ```
-PS C:\> Set-HostedEmailAccount -LocalAccountName "PattiFuller" -EmailAccount "PattiFuller@Constoso.com"
+PS C:\> Set-HostedEmailAccount -LocalAccountName "PattiFuller" -EmailAccount "PattiFuller@Contoso.com"
 ```
 
-This command assigns the hosted email account named PattiFuller@Constoso.com to the local user account named PattiFuller.
+This command assigns the hosted email account named PattiFuller@Contoso.com to the local user account named PattiFuller.
 
 ## PARAMETERS
 

docset/winserver2019-ps/defender/Set-MpPreference.md

@@ -2,7 +2,7 @@
 description: Use this topic to help manage Windows and Windows Server technologies with Windows PowerShell.
 external help file: MSFT_MpPreference.cdxml-help.xml
 Module Name: Defender
-ms.date: 06/23/2021
+ms.date: 10/05/2021
 online version: https://docs.microsoft.com/powershell/module/defender/set-mppreference?view=windowsserver2019-ps&wt.mc_id=ps-gethelp
 schema: 2.0.0
 title: Set-MpPreference
@@ -41,7 +41,7 @@ Set-MpPreference [-ExclusionPath <String[]>] [-ExclusionExtension <String[]>] [-
  [-LowThreatDefaultAction <ThreatAction>] [-ModerateThreatDefaultAction <ThreatAction>]
  [-HighThreatDefaultAction <ThreatAction>] [-SevereThreatDefaultAction <ThreatAction>] [-Force]
  [-DisableBlockAtFirstSeen <Boolean>] [-PUAProtection <PUAProtectionType>] [-CimSession <CimSession[]>]
- [-ThrottleLimit <Int32>] [-AsJob]  [<CommonParameters>]  [-DisableGradualRelease <Boolean>] [-SignaturesUpdatesChannel <UpdatesChannelType>] [-EngineUpdatesChannel <UpdatesChannelType>] [-PlatformUpdatesChannel <UpdatesChannelType>]
+ [-ThrottleLimit <Int32>] [-AsJob]  [<CommonParameters>] [-DisableGradualRelease <Boolean>] [-DefinitionUpdatesChannel <UpdatesChannelType>] [-EngineUpdatesChannel <UpdatesChannelType>] [-PlatformUpdatesChannel <UpdatesChannelType>]
 ```
 
 ## DESCRIPTION
@@ -138,6 +138,29 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -DefinitionUpdatesChannel
+Enable this policy to specify when devices receive daily Microsoft Defender security intelligence (definition/signature) updates during the daily gradual rollout. 
+
+Current Channel (Staged): Devices will be offered updates after the release cycle. Suggested to apply to a small, representative part of production population (~10%).
+
+Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). 
+
+If you disable or do not configure this policy, the device will stay up to date automatically during the daily release cycle. Suitable for most devices. 
+
+Supported OS versions: Windows 10 
+
+Note: This policy is available starting with platform version 4.18.2106.5 and later
+
+```yaml
+Type: UpdatesChannelType
+Aliases: suc
+Accepted values: Staged|Broad|Not Configured
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -DisableArchiveScanning
 Indicates whether to scan archive files, such as .zip and .cab files, for malicious and unwanted software.
 If you specify a value of $False or do not specify a value, Windows Defender scans archive files.
@@ -446,6 +469,8 @@ Current Channel (Staged): Devices will be offered updates after the monthly grad
 
 Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). 
 
+Critical- Time Delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.   
+
 If you disable or do not configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices. 
 
 Supported OS versions: Windows 10 
@@ -454,7 +479,7 @@ Note: This policy is available starting with platform version 4.18.2106.5 and la
 ```yaml
 Type: UpdatesChannelType
 Aliases: euc
-Accepted values:Beta|Preview|Staged|Broad|NotConfigured 
+Accepted values:Beta|Preview|Staged|Broad|Delayed|NotConfigured 
 Position: Named
 Default value: None
 Accept pipeline input: False
@@ -648,6 +673,8 @@ Current Channel (Staged): Devices will be offered updates after the monthly grad
 
 Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). 
 
+Critical- Time Delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.   
+
 If you disable or do not configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices. 
 
 Supported OS versions: Windows 10 
@@ -657,7 +684,7 @@ Note: This policy is available starting with platform version 4.18.2106.5 and la
 ```yaml
 Type: UpdatesChannelType
 Aliases: puc
-Accepted values: Beta|Preview|Staged|Broad|NotConfigured 
+Accepted values: Beta|Preview|Staged|Broad|Delayed|NotConfigured 
 Position: Named
 Default value: None
 Accept pipeline input: False
@@ -1143,28 +1170,6 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
-### -SignaturesUpdatesChannel
-Enable this policy to specify when devices receive daily Microsoft Defender definition updates during the daily gradual rollout. 
-
-Current Channel (Staged): Devices will be offered updates after the release cycle. Suggested to apply to a small, representative part of production population (~10%).
-
-Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). 
-
-If you disable or do not configure this policy, the device will stay up to date automatically during the daily release cycle. Suitable for most devices. 
-
-Supported OS versions: Windows 10 
-
-Note: This policy is available starting with platform version 4.18.2106.5 and later
-
-```yaml
-Type: UpdatesChannelType
-Aliases: suc
-Accepted values: Staged|Broad|Not Configured
-Position: Named
-Default value: None
-Accept pipeline input: False
-Accept wildcard characters: False
-```
 
 ### -SignatureUpdateInterval
 Specifies the interval, in hours, at which to check for definition updates.

docset/winserver2019-ps/storage/Get-StorageAdvancedProperty.md

@@ -24,6 +24,8 @@ The **Get-StorageAdvancedProperty** cmdlet gets the advanced properties of a sto
 For example, Get-PhysicalDisk gets the most commonly used attributes of a physical disk such as **CanPool**.
 To get the cache (**IsDeviceCacheEnabled**) and power protection (**IsPowerProtected**) settings for a physical disk, you can pass a **PhysicalDisk** object to the **Get-StorageAdvancedProperty** cmdlet.
 
+The output of the cache (**IsDeviceCacheEnabled**) and power protection (**IsPowerProtected**) are collected from the user-defined settings of the physical disk. Power protection (**IsPowerProtected**) is not an indicator of the physical disk support for power loss protection (PLP). Refer to the physical disk vendor’s datasheet for PLP support details.
+
 ## EXAMPLES
 
 ### Example 1: Get advanced storage properties of a physical disk
@@ -82,4 +84,3 @@ The cmdlet gets the advanced properties for **PhysicalDisk** objects: **IsPowerP
 ## RELATED LINKS
 
 [Get-PhysicalDisk](./Get-PhysicalDisk.md)
-

docset/winserver2022-ps/defender/Add-MpPreference.md

@@ -1,5 +1,5 @@
 ---
-description: Use this topic to help manage Windows and Windows Server technologies with Windows PowerShell.
+description: The Add-MpPreference cmdlet modifies settings for Windows Defender.
 external help file: MSFT_MpPreference.cdxml-help.xml
 Module Name: Defender
 ms.date: 12/20/2016
@@ -17,8 +17,11 @@ Modifies settings for Windows Defender.
 
 ```
 Add-MpPreference [-ExclusionPath <String[]>] [-ExclusionExtension <String[]>] [-ExclusionProcess <String[]>]
- [-ThreatIDDefaultAction_Ids <Int64[]>] [-ThreatIDDefaultAction_Actions <ThreatAction[]>] [-Force]
- [-CimSession <CimSession[]>] [-ThrottleLimit <Int32>] [-AsJob] [<CommonParameters>]
+ [-ExclusionIpAddress <String[]>] [-ThreatIDDefaultAction_Ids <Int64[]>]
+ [-ThreatIDDefaultAction_Actions <ThreatAction[]>] [-AttackSurfaceReductionOnlyExclusions <String[]>]
+ [-ControlledFolderAccessAllowedApplications <String[]>] [-ControlledFolderAccessProtectedFolders <String[]>]
+ [-AttackSurfaceReductionRules_Ids <String[]>] [-AttackSurfaceReductionRules_Actions <ASRRuleActionType[]>]
+ [-Force] [-CimSession <CimSession[]>] [-ThrottleLimit <Int32>] [-AsJob] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -28,13 +31,20 @@ Use this cmdlet to add exclusions for file name extensions, paths, and processes
 ## EXAMPLES
 
 ### Example 1: Add a folder to the exclusion list
-```
-PS C:\> Add-MpPreference -ExclusionPath "C:\Temp"
+```powershell
+Add-MpPreference -ExclusionPath "C:\Temp"
 ```
 
 This command adds the folder C:\Temp to the exclusion list.
 The command disables Windows Defender scheduled and real-time scanning for files in this folder.
 
+### Example 2: Allow an application to access folders
+```powershell
+Add-MpPreference -ControlledFolderAccessAllowedApplications "c:\apps\test.exe"
+```
+
+This command allows the specified application to make changes in controlled folders.
+
 ## PARAMETERS
 
 ### -AsJob
@@ -59,6 +69,57 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -AttackSurfaceReductionOnlyExclusions
+Specifies the files and paths to exclude from Attack Surface Reduction (ASR) rules. Specify the folders or files and resources that should be excluded from ASR rules. Enter a folder path or a fully qualified resource name. For example, ""C:\Windows"" will exclude all files in that directory. ""C:\Windows\App.exe"" will exclude only that specific file in that specific folder.
+
+For more information about excluding files and folders from [ASR rules](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-attack-surface-reduction#exclude-files-and-folders-from-asr-rules).
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -AttackSurfaceReductionRules_Actions
+Specifies the states of attack surface reduction rules specified by using the **AttackSurfaceReductionRules_Ids** parameter.
+If you add multiple rules as a comma-separated list, specify their states separately as a comma-separated list.
+
+```yaml
+Type: ASRRuleActionType[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -AttackSurfaceReductionRules_Ids
+Specifies the IDs of attack surface reduction rules.
+Use the **AttackSurfaceReductionRules_Actions** parameter to specify the state for each rule. 
+If you add multiple rules as a comma-separated list, specify their states separately as a comma-separated list.
+
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -CimSession
 Runs the cmdlet in a remote session or on a remote computer. 
 Enter a computer name or a session object, such as the output of a [New-CimSession](https://go.microsoft.com/fwlink/p/?LinkId=227967) or [Get-CimSession](https://go.microsoft.com/fwlink/p/?LinkId=227966) cmdlet. 
@@ -76,10 +137,55 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -ControlledFolderAccessAllowedApplications
+Specifies applications that can make changes in controlled folders.
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ControlledFolderAccessProtectedFolders
+Specifies more folders to protect.
+
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -ExclusionExtension
 Specifies an array of file name extensions, such as obj or lib, to exclude from scheduled, custom, and real-time scanning.
 This cmdlet adds these file name extensions to the exclusions.
 
+```yaml
+Type: String[]
+Parameter Sets: (All)
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+### -ExclusionIpAddress
+Specifies an array of IP addresses to exclude from scheduled and real-time scanning.
+
 ```yaml
 Type: String[]
 Parameter Sets: (All)