Merge branch 'master' into processmitigations-v-tishe

Author: TimShererWithAquent

docset/winserver2016-ps/provisioning/Install-TrustedProvisioningCertificate.md

@@ -11,7 +11,7 @@ title: Install-TrustedProvisioningCertificate
 # Install-TrustedProvisioningCertificate
 
 ## SYNOPSIS
-{{Fill in the Synopsis}}
+Adds a certificate to the Trusted Certificate Store.
 
 ## SYNTAX
 
@@ -21,16 +21,16 @@ Install-TrustedProvisioningCertificate [-CertificatePath] <String> [-ForceInstal
 ```
 
 ## DESCRIPTION
-{{Fill in the Description}}
+Installs the specified certificate to the Trusted Certificate Store.
 
 ## EXAMPLES
 
-### Example 1
-```
-PS C:\> {{ Add example code here }}
+### Example 1: Install Trusted Provisioning Certificate
+```powershell
+PS C:\> Install-TrustedProvisioningCertificate -CertificatePath trustedCert.cer
 ```
 
-{{ Add example description here }}
+Installs the specified certificate as a trusted provisioning certificate.
 
 ## PARAMETERS
 
@@ -50,7 +50,7 @@ Accept wildcard characters: False
 ```
 
 ### -ConnectedDevice
-{{Fill ConnectedDevice Description}}
+If enabled, specifies that the device type is mobile.
 
 ```yaml
 Type: SwitchParameter
@@ -65,7 +65,7 @@ Accept wildcard characters: False
 ```
 
 ### -ForceInstall
-{{Fill ForceInstall Description}}
+Specifies whether, if the certificate already exists, it will be overwritten.
 
 ```yaml
 Type: SwitchParameter
@@ -80,7 +80,7 @@ Accept wildcard characters: False
 ```
 
 ### -LogsDirectoryPath
-{{Fill LogsDirectoryPath Description}}
+Specifies the logs directory path.
 
 ```yaml
 Type: String
@@ -95,7 +95,7 @@ Accept wildcard characters: False
 ```
 
 ### -WprpFile
-{{Fill WprpFile Description}}
+Specifies the location of the WPR profile file.
 
 ```yaml
 Type: String

docset/winserver2019-ps/assignedaccess/AssignedAccess.md

@@ -13,6 +13,8 @@ title: AssignedAccess
 ## Description
 The Windows PowerShell cmdlets for Assigned Access are designed to enable the administration of restricted app access to specific user accounts. When Assigned Access is configured on a user account, it can use only one Windows Store app. The user cannot exit the app, sign out, or access any system settings.
 
+Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
+
 ## AssignedAccess Cmdlets
 ### [Clear-AssignedAccess](./Clear-AssignedAccess.md)
 Removes the user account from assigned access.

docset/winserver2019-ps/assignedaccess/Clear-AssignedAccess.md

@@ -24,6 +24,8 @@ The **Clear-AssignedAccess** cmdlet clears assigned access configured account se
 
 If a user is signed-in or the computer has a PS/2 keyboard, you must restart the computer to apply the changes.
 
+Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
+
 ## EXAMPLES
 
 ### Example 1: Clear assigned access configured settings

docset/winserver2019-ps/assignedaccess/Get-AssignedAccess.md

@@ -22,6 +22,8 @@ Get-AssignedAccess [<CommonParameters>]
 ## DESCRIPTION
 The **Get-AssignedAccess** cmdlet gets the current configuration for assigned access, including the user name, user SID, app friendly name, and app ID.
 
+Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
+
 ## EXAMPLES
 
 ### Example 1: Get the configuration for assigned access

docset/winserver2019-ps/assignedaccess/Set-AssignedAccess.md

@@ -43,6 +43,8 @@ If a user is signed-in or the computer has a PS/2 keyboard, you must restart the
 
 To sign out of assigned access, quickly press the left Windows logo key five times.
 
+Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
+
 ## EXAMPLES
 
 ### Example 1: Set assigned access by SID and app name

docset/winserver2019-ps/configci/New-CIPolicyRule.md

@@ -308,7 +308,7 @@ Accept wildcard characters: False
 ```
 
 ### -SpecificFileNameLevel
-Specifies the attribute of the file off which to base a file name rule. The -Level must be set to FileName for this option. 
+Specifies the attribute of the file off which to base a file name rule. 
 Refer to [File Name Rules Info](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create#windows-defender-application-control-filename-rules) for a description of the acceptable values. 
 
 ```yaml

docset/winserver2019-ps/defender/Set-MpPreference.md

@@ -2,7 +2,7 @@
 description: Use this topic to help manage Windows and Windows Server technologies with Windows PowerShell.
 external help file: MSFT_MpPreference.cdxml-help.xml
 Module Name: Defender
-ms.date: 10/05/2021
+ms.date: 11/04/2021
 online version: https://docs.microsoft.com/powershell/module/defender/set-mppreference?view=windowsserver2019-ps&wt.mc_id=ps-gethelp
 schema: 2.0.0
 title: Set-MpPreference
@@ -41,7 +41,7 @@ Set-MpPreference [-ExclusionPath <String[]>] [-ExclusionExtension <String[]>] [-
  [-LowThreatDefaultAction <ThreatAction>] [-ModerateThreatDefaultAction <ThreatAction>]
  [-HighThreatDefaultAction <ThreatAction>] [-SevereThreatDefaultAction <ThreatAction>] [-Force]
  [-DisableBlockAtFirstSeen <Boolean>] [-PUAProtection <PUAProtectionType>] [-CimSession <CimSession[]>]
- [-ThrottleLimit <Int32>] [-AsJob]  [<CommonParameters>] [-DisableGradualRelease <Boolean>] [-DefinitionUpdatesChannel <UpdatesChannelType>] [-EngineUpdatesChannel <UpdatesChannelType>] [-PlatformUpdatesChannel <UpdatesChannelType>]
+ [-ThrottleLimit <Int32>] [-AsJob]  [<CommonParameters>] [-DisableGradualRelease <Boolean>] [-DefinitionUpdatesChannel <UpdatesChannelType>] [-EngineUpdatesChannel <UpdatesChannelType>] [-PlatformUpdatesChannel <UpdatesChannelType>][-CloudBlockLevel <CloudBlockLevelType>]
 ```
 
 ## DESCRIPTION
@@ -138,6 +138,25 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -CloudBlockLevel
+Configure this policy to specify the level of cloud protection to your endpoint. 
+
+Default (0): provides strong detection without increasing risk of detecting legitamate files
+Moderate (1): provides moderate detection only for high confidence detections
+High (2): applies a strong level of detection while optimizing client performance
+HighPlus (4): applies extra protection measures (might affect client peformance and increase your chance of false positives)
+ZeroTolerance (6): blocks all unknown executables
+
+```yaml
+Type: CloudBlockLevelType
+Accepted values: Default|Moderate|High|HighPlus|ZeroTolerance
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
+
 ### -DefinitionUpdatesChannel
 Enable this policy to specify when devices receive daily Microsoft Defender security intelligence (definition/signature) updates during the daily gradual rollout. 
 

docset/winserver2019-ps/provisioning/Install-TrustedProvisioningCertificate.md

@@ -11,7 +11,7 @@ title: Install-TrustedProvisioningCertificate
 # Install-TrustedProvisioningCertificate
 
 ## SYNOPSIS
-{{Fill in the Synopsis}}
+Adds a certificate to the Trusted Certificate Store.
 
 ## SYNTAX
 
@@ -21,16 +21,16 @@ Install-TrustedProvisioningCertificate [-CertificatePath] <String> [-ForceInstal
 ```
 
 ## DESCRIPTION
-{{Fill in the Description}}
+Installs the specified certificate to the Trusted Certificate Store.
 
 ## EXAMPLES
 
-### Example 1
-```
-PS C:\> {{ Add example code here }}
+### Example 1: Install Trusted Provisioning Certificate
+```powershell
+PS C:\> Install-TrustedProvisioningCertificate -CertificatePath trustedCert.cer
 ```
 
-{{ Add example description here }}
+Installs the specified certificate as a trusted provisioning certificate.
 
 ## PARAMETERS
 
@@ -50,7 +50,7 @@ Accept wildcard characters: False
 ```
 
 ### -ConnectedDevice
-{{Fill ConnectedDevice Description}}
+If enabled, specifies that the device type is mobile.
 
 ```yaml
 Type: SwitchParameter
@@ -65,7 +65,7 @@ Accept wildcard characters: False
 ```
 
 ### -ForceInstall
-{{Fill ForceInstall Description}}
+Specifies whether, if a certificate already exists, it will be overwritten.
 
 ```yaml
 Type: SwitchParameter
@@ -80,7 +80,7 @@ Accept wildcard characters: False
 ```
 
 ### -LogsDirectoryPath
-{{Fill LogsDirectoryPath Description}}
+Specifies the logs directory path.
 
 ```yaml
 Type: String
@@ -95,7 +95,7 @@ Accept wildcard characters: False
 ```
 
 ### -WprpFile
-{{Fill WprpFile Description}}
+Specifies the location of the WPR profile file.
 
 ```yaml
 Type: String

docset/winserver2022-ps/assignedaccess/AssignedAccess.md

@@ -13,6 +13,8 @@ title: AssignedAccess
 ## Description
 The Windows PowerShell cmdlets for Assigned Access are designed to enable the administration of restricted app access to specific user accounts. When Assigned Access is configured on a user account, it can use only one Windows Store app. The user cannot exit the app, sign out, or access any system settings.
 
+Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
+
 ## AssignedAccess Cmdlets
 ### [Clear-AssignedAccess](./Clear-AssignedAccess.md)
 Removes the user account from assigned access.

docset/winserver2022-ps/assignedaccess/Clear-AssignedAccess.md

@@ -24,6 +24,8 @@ The **Clear-AssignedAccess** cmdlet clears assigned access configured account se
 
 If a user is signed-in or the computer has a PS/2 keyboard, you must restart the computer to apply the changes.
 
+Assigned Access cmdlets are supported on Windows 10 and Windows 11 client operating systems only.
+
 ## EXAMPLES
 
 ### Example 1: Clear assigned access configured settings