Merge pull request #9098 from MicrosoftDocs/main

Auto push to live 2025-06-10 18:07:24

Author: Deland-Han

support/azure/azure-storage/files/file-sync/file-sync-troubleshoot-sync-group-management.md

@@ -41,6 +41,7 @@ To create a cloud endpoint, your user account must have the following Microsoft
 
 The following built-in roles have the required Microsoft Authorization permissions:
 
+- Azure File Sync Administrator
 - Owner
 - User Access Administrator
 
@@ -49,7 +50,7 @@ To determine whether your user account role has the required permissions:
 1. In the Azure portal, select **Resource groups**.
 2. Select the resource group where the storage account is located, and then select **Access control (IAM)**.
 3. On the **Check access** tab, select **View my access**.
-4. On the **Current role assignments** tab, select the role (for example, Owner or Contributor) for your user account.
+4. On the **Current role assignments** tab, select the role (for example, File Sync Administrator, Owner or Contributor) for your user account.
 5. On the **Permissions** tab, verify the role for your user account has the following permissions:
     - **Read**: **Get role definition**
     - **Write**: **Create or update custom role definition**

support/windows-365/troubleshoot-azure-network-connection.md

@@ -2,9 +2,9 @@
 title: Troubleshoot Azure network connections
 description: Troubleshoot Azure network connections in Windows 365.
 manager: dcscontentpm
-ms.date: 01/20/2025
+ms.date: 06/10/2025
 ms.topic: troubleshooting
-ms.reviewer: ericor, erikje
+ms.reviewer: ericor, erikje, joeno
 ms.custom:
 - pcy:Azure Network Connection\VNET Setup and Config Issues
 - sap:WinComm User Experience
@@ -41,6 +41,14 @@ Successful communication with a domain controller within your organization is es
 > [!NOTE]
 > This section only applies to hybrid environments.
 
+### Windows Remote Management (WinRM) requirements for ANC
+
+WinRM is required to complete an ANC setup.
+
+To ensure successful provisioning, verify that WinRM isn't restricted to specific IP addresses, whether through a Group Policy Object (GPO) or Microsoft Intune configuration service provider (CSP), for the groups used in your provisioning policies. WinRM should be configured to allow network requests from any IP address.
+
+For more information, see [GPO configurations](/windows/win32/winrm/installation-and-configuration-for-windows-remote-management) or [Intune CSP](/windows/client-management/mdm/policy-csp-remotemanagement).
+
 ### ANC Endpoint Access
 
 During ANC configuration, the service needs to download configuration data from various Microsoft endpoints as listed in [Network requirements](/windows-365/enterprise/requirements-network). Failure to reach these endpoints due to misconfigured network settings can lead to a failure. To ensure successful access, Transport Layer Security (TLS) inspection should be avoided on any vNET used for ANC connections. Ensure that you can successfully resolve and reach these endpoints through the Azure vNet used and ensure that any firewall, proxy, or other Network services employed within the network allow access to them.