Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into normesta-sdk-interop

Author: normesta

.openpublishing.redirection.json

@@ -23069,6 +23069,16 @@
       "redirect_url": "/azure/storage/common/storage-quickstart-create-account",
       "redirect_document_id": true
     },
+    {
+      "source_path": "articles/storage/common/storage-quickstart-create-account.md",
+      "redirect_url": "/azure/storage/common/storage-account-create",
+      "redirect_document_id": true
+    },
+    {
+      "source_path": "articles/storage/common/storage-account-manage.md",
+      "redirect_url": "/azure/storage/common/storage-account-keys-manage",
+      "redirect_document_id": true
+    },
     {
       "source_path": "articles/storage/common/storage-account-options.md",
       "redirect_url": "/azure/storage/common/storage-account-overview",
@@ -43977,6 +43987,11 @@
       "source_path": "articles/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-storage.md",
       "redirect_url": "/azure/active-directory/managed-identities-azure-resources/overview",
       "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/virtual-desktop/bandwidth-recommendations.md",
+      "redirect_url": "https://docs.microsoft.com/windows-server/remote/remote-desktop-services/network-guidance",
+      "redirect_document_id": false
     }
   ]
 }

articles/active-directory-domain-services/security-audit-events.md

@@ -66,7 +66,7 @@ The following table outlines scenarios for each destination resource type.
 
 | Target Resource | Scenario |
 |:---|:---|
-|Azure Storage| This target should be used when your primary need is to store security audit events for archival purposes. Other targets can be used for archival purposes, however those targets provide capabilities beyond the primary need of archiving. Before you enable Azure AD DS security audit events, [Create an Azure storage account](../storage/common/storage-quickstart-create-account.md?tabs=azure-portal#create-a-storage-account-1).|
+|Azure Storage| This target should be used when your primary need is to store security audit events for archival purposes. Other targets can be used for archival purposes, however those targets provide capabilities beyond the primary need of archiving. Before you enable Azure AD DS security audit events, first [Create an Azure Storage account](../storage/common/storage-account-create.md).|
 |Azure Event Hubs| This target should be used when your primary need is to share security audit events with additional software such as data analysis software or security information & event management (SIEM) software. Before you enable Azure AD DS security audit events, [Create an event hub using Azure portal](https://docs.microsoft.com/azure/event-hubs/event-hubs-create)|
 |Azure Log Analytics Workspace| This target should be used when your primary need is to analyze and review secure audits from the Azure portal directly. Before you enable Azure AD DS security audit events, [Create a Log Analytics workspace in the Azure portal.](https://docs.microsoft.com/azure/azure-monitor/learn/quick-create-workspace)|
 

articles/active-directory/authentication/media/quickstart-sspr/sspr-authentication-methods.png

@@ -1,75 +1,85 @@
 ---
-title: Quickstart Azure AD self-service password reset
-description: In this quickstart, you will quickly configure Azure AD self-service password reset to allow users to reset their own passwords
+title: Quickstart - Azure AD self-service password reset
+description: In this quickstart, you learn how to configure Azure AD self-service password reset to allow users to reset their own passwords and reduce IT department overhead.
 
 services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: quickstart
-ms.date: 07/17/2018
+ms.date: 12/10/2019
 
 ms.author: iainfou
 author: iainfoulds
 manager: daveba
 ms.reviewer: sahenry
 
-# Customer intent: As an Azure AD Administrator, I want to protect user authentication so I deploy SSPR so that when users have trouble signing-in they can reset their passwords using something they know.
+# Customer intent: As an Azure AD Administrator, I want to protect user authentication and reduce IT department overhead by deploying self-service password reset (SSPR) so that users can reset their own passwords when they have problems.
 ms.collection: M365-identity-device-management
 ---
-# Quickstart: Self-service password reset
+# Quickstart: Configure Azure Active Directory self-service password reset
 
-In this quickstart, you walk through configuring self-service password reset (SSPR) as a simple means for IT administrators to enable users to reset their passwords or unlock their accounts.
+In this quickstart, you configure Azure Active Directory (AD) self-service password reset (SSPR) to enable users to reset their passwords or unlock their accounts. With SSPR, users can reset their own credentials without helpdesk or administrator assistance. This ability lets users regain access to their account without waiting for additional support.
+
+> [!IMPORTANT]
+> This quickstart shows an administrator how to enable self-service password reset. If your IT team hasn't already enabled the ability to reset your own password, reach out to your helpdesk for additional assistance.
+>
+> If your IT team has enabled password reset, once you're [registered for self-service password reset][register-sspr] you can then [reset your work or school password][reset-password]. If you're not already registered for self-service password reset, reach out to your helpdesk for additional assistance.
 
 ## Prerequisites
 
 * A working Azure AD tenant with at least a trial license enabled.
+    * If needed, [create one for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
 * An account with Global Administrator privileges.
-* A non-administrator test user with a password you know, if you need to create a user see the article [Quickstart: Add new users to Azure Active Directory](../add-users-azure-active-directory.md).
-* A pilot group to test with that the non-administrator test user is a member of, if you need to create a group see the article [Create a group and add members in Azure Active Directory](../active-directory-groups-create-azure-portal.md).
+* A non-administrator test user with a password you know, such as *testuser*.
+    * If you need to create a user, see [Quickstart: Add new users to Azure Active Directory](../add-users-azure-active-directory.md).
+* A pilot group to test with that the non-administrator test user is a member of, such as *SSPR-Test-Group*.
+    * If you need to create a group, see how to [Create a group and add members in Azure Active Directory](../active-directory-groups-create-azure-portal.md).
 
 ## Enable self-service password reset
 
 [View this process as a video on YouTube](https://youtu.be/Pa0eyqjEjvQ)
 
-1. From your existing Azure AD tenant, from the Azure portal menu or from the **Home** page, select **Azure Active Directory**. Then, select **Password reset**.
-
-2. From the **Properties** page, under the option **Self Service Password Reset Enabled**, choose **Selected**.
-    * From **Select group**, choose your pilot group created as part of the prerequisites section of this article.
-    * Click **Save**.
+1. In the Azure portal menu or from the **Home** page, select **Azure Active Directory** and then choose **Password reset**.
 
-3. From the **Authentication methods** page, make the following choices:
-   * Number of methods required to reset: **1**
-   * Methods available to users:
-      * **Email**
-      * **Mobile app code (preview)**
-   * Click **Save**.
+1. On the **Properties** page under the option for **Self Service Password Reset Enabled**, choose **Selected**.
+1. Choose **Select group**, then select your pilot group created as part of the prerequisites section of this article, such as *SSPR-Test-Group*. When ready, select **Save**.
+1. On the **Authentication methods** page, make the following choices and then choose **Save**:
+    * Number of methods required to reset: **1**
+    * Methods available to users:
+        * **Mobile app code**
+        * **Email**
 
-     ![Choosing authentication methods for SSPR][Authentication]
+    > [!div class="mx-imgBorder"]
+    > ![Choosing authentication methods for SSPR][Authentication]
 
-4. From the **Registration** page, make the following choices:
+4. From the **Registration** page, make the following choices and then choose **Save**:
    * Require users to register when they sign in: **Yes**
    * Set the number of days before users are asked to reconfirm their authentication information: **365**
 
 ## Test self-service password reset
 
-Now lets test your SSPR configuration with a test user. Since Microsoft enforces strong authentication requirements for Azure administrator accounts, testing using an administrator account may change the outcome. For more information regarding the administrator password policy, see our [password policy](concept-sspr-policy.md) article.
+Now lets test your SSPR configuration with a test user that's part of the group you selected in the previous section, such as *testuser*. Since Microsoft enforces strong authentication requirements for Azure administrator accounts, testing using an administrator account may change the outcome. For more information regarding the administrator password policy, see our [password policy](concept-sspr-policy.md) article.
 
 1. Open a new browser window in InPrivate or incognito mode, and browse to [https://aka.ms/ssprsetup](https://aka.ms/ssprsetup).
-2. Sign in with a non-administrator test user, and register your authentication phone.
-3. Once complete, click the button marked **looks good** and close the browser window.
+2. Sign in with a non-administrator test user, such as *testuser*, and register your authentication phone.
+3. Once complete, select the button marked **Looks good** and close the browser window.
 4. Open a new browser window in InPrivate or incognito mode, and browse to [https://aka.ms/sspr](https://aka.ms/sspr).
-5. Enter your non-administrator test users' User ID, the characters from the CAPTCHA, and then click **Next**.
-6. Follow the verification steps to reset your password
+5. Enter your non-administrator test users' User ID, such as *testuser*, the characters from the CAPTCHA, and then select **Next**.
+6. Follow the verification steps to reset your password.
 
 ## Clean up resources
 
-It's easy to disable self-service password reset. Open your Azure AD tenant and go to **Properties** > **Password Reset**, and then select **None** under **Self Service Password Reset Enabled**.
+To disable self-service password reset, search for and select **Azure Active Directory** in the Azure portal. Select **Properties** > **Password Reset**, and then choose **None** under **Self Service Password Reset Enabled**. When ready, select **Save**.
 
 ## Next steps
 
-In this quickstart, you’ve learned how to quickly configure self-service password reset for your cloud-only users. To find out how to complete a more detailed roll out, continue to our roll out guide.
+In this quickstart, you learned how to configure self-service password reset for your cloud-only users. To find out how to complete a more detailed roll out, continue to our roll out guide.
 
 > [!div class="nextstepaction"]
 > [Roll out self-service password reset](howto-sspr-deployment.md)
 
 [Authentication]: ./media/quickstart-sspr/sspr-authentication-methods.png "Azure AD authentication methods available and the quantity required"
+
+<!-- INTERNAL LINKS -->
+[register-sspr]: ../user-help/active-directory-passwords-reset-register.md
+[reset-password]: ../user-help/active-directory-passwords-update-your-own-password.md

articles/active-directory/authentication/quickstart-sspr.md

@@ -27,17 +27,24 @@ A common way to assign Azure AD roles to a user is on the **Directory role** pag
 You can also assign roles using Privileged Identity Management (PIM). For more detailed information about how to use PIM, see [Privileged Identity Management](https://docs.microsoft.com/azure/active-directory/privileged-identity-management).
 
 ### To assign a role to a user
-1. Sign in to the [Azure portal](https://portal.azure.com/) using a Global administrator account for the directory.
+1. Go to the [Azure portal](https://portal.azure.com/) and log in using a Global administrator account for the directory. 
 
-2. Select **Azure Active Directory**, select **Users**, and then search for and select the user getting the role assignment. For example, _Alain Charon_.
+2. Search for and select **Azure Active Directory**.
+
+      ![Azure portal search for Azure Active Directory](media/active-directory-users-assign-role-azure-portal/search-azure-active-directory.png)
+
+
+3. Select **Users**.
+
+4. Search for and select the user getting the role assignment. For example, _Alain Charon_.
 
       ![All users page - select the user](media/active-directory-users-assign-role-azure-portal/directory-role-select-user.png)
 
-3. On the **Alain Charon - Profile** page, select **Assigned roles**.
+5. On the **Alain Charon - Profile** page, select **Assigned roles**.
 
     The **Alain Charon - Directory role** page appears.
 
-4. Select **Add assignment**, select the role to assign to Alain (for example, _Application administrator_), and then choose **Select**.
+6. Select **Add assignment**, select the role to assign to Alain (for example, _Application administrator_), and then choose **Select**.
 
     ![Assigned roles page - showing the selected role](media/active-directory-users-assign-role-azure-portal/directory-role-select-role.png)
 

articles/active-directory/fundamentals/active-directory-users-assign-role-azure-portal.md

@@ -61,11 +61,13 @@ Depending on what you want to review, you will create your access review in Azur
 
 To onboard access reviews, follow these steps.
 
-1. As a Global administrator or User administrator, sign in to the [Azure portal](https://portal.azure.com) where you want to use access reviews.
+1. Go to the [Azure portal](https://portal.azure.com) to manage access reviews and sign in as a Global administrator or User administrator.
 
-1. In the left navigation, click **Azure Active Directory**.
+1. Search for and select **Azure Active Directory**.
 
-1. In the left menu, click **Identity Governance**.
+      ![Azure portal search for Azure Active Directory](media/access-reviews-overview/search-azure-active-directory.png)
+
+1. Select **Identity Governance**.
 
 1. Click **Access reviews**.