Merge pull request #42923 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to master to sync with https://github.com/Microsoft/azure-docs (branch master)

Author: huypub

articles/active-directory/device-management-azuread-joined-devices-frx.md

@@ -36,6 +36,8 @@ In the Windows *out-of-box experience*, joining an on-premises Active Directory
 
 To join a Windows 10 device, the device registration service must be configured to enable you to register devices. In addition to having permission to joining devices in your Azure AD tenant, you must have fewer devices registered than the configured maximum. For more details, see [configure device settings](device-management-azure-portal.md#configure-device-settings).
 
+In addition, if your tenant is federated, your Identity provider MUST support WS-Fed and WS-Trust username/password endpoint. This can be version 1.3 or 2005. This protocol support is required to both join the device to Azure AD and log on to the device with a password.
+
 ## Joining a device
 
 **To join a Windows 10 device to Azure AD during FRX:**

articles/azure-stack/azure-stack-update-1802.md

@@ -1,4 +1,4 @@
----
+---
 title: Azure Stack 1802 Update | Microsoft Docs
 description: Learn about what's in the 1802 update for Azure Stack integrated systems, the known issues, and where to download the update.
 services: azure-stack
@@ -34,7 +34,7 @@ The Azure Stack 1802 update build number is **20180302.1**.
 
 ## Before you begin    
 > [!IMPORTANT]    
-> Do not attempt to create virtual machines during the installation of this update. For more information about managing updates, see [Manage updates in Azure Stack overview](/azure-stack-updates#plan-for-updates).
+> Do not attempt to create virtual machines during the installation of this update. For more information about managing updates, see [Manage updates in Azure Stack overview](azure-stack-updates.md#plan-for-updates).
 
 
 ### Prerequisites

articles/cloud-shell/features.md

@@ -47,7 +47,7 @@ Files outside of `$Home` and machine state are not persisted across sessions.
 
 ### Integration with open-source tooling
 
-Bash in Cloud Shell includes pre-configured authentication for open-source tools such as Terraform, Ansible, and Chef Inspec. Try it out from the example walkthroughs.
+Bash in Cloud Shell includes pre-configured authentication for open-source tools such as Terraform, Ansible, and Chef InSpec. Try it out from the example walkthroughs.
 
 ## Tools
 
@@ -60,7 +60,7 @@ Bash in Cloud Shell includes pre-configured authentication for open-source tools
 |Build tools            |make<br> maven<br> npm<br> pip         |
 |Containers             |[Docker CLI](https://github.com/docker/cli)/[Docker Machine](https://github.com/docker/machine)<br> [Kubectl](https://kubernetes.io/docs/user-guide/kubectl-overview/)<br> [Helm](https://github.com/kubernetes/helm)<br> [DC/OS CLI](https://github.com/dcos/dcos-cli)         |
 |Databases              |MySQL client<br> PostgreSql client<br> [sqlcmd Utility](https://docs.microsoft.com/sql/tools/sqlcmd-utility)<br> [mssql-scripter](https://github.com/Microsoft/sql-xplat-cli) |
-|Other                  |iPython Client<br> [Cloud Foundry CLI](https://github.com/cloudfoundry/cli)<br> [Terraform](https://www.terraform.io/docs/providers/azurerm/)<br> [Ansible](https://www.ansible.com/microsoft-azure)<br> [Chef Inspec](https://www.chef.io/inspec/)| 
+|Other                  |iPython Client<br> [Cloud Foundry CLI](https://github.com/cloudfoundry/cli)<br> [Terraform](https://www.terraform.io/docs/providers/azurerm/)<br> [Ansible](https://www.ansible.com/microsoft-azure)<br> [Chef InSpec](https://www.chef.io/inspec/)| 
 
 ## Language support
 

articles/cognitive-services/text-analytics/quickstarts/csharp.md

@@ -42,7 +42,7 @@ You must also have the [endpoint and access key](../How-tos/text-analytics-how-t
 
 ## Call the Text Analytics API using the SDK
 1. Replace Program.cs with the code provided below. This program demonstrates the capabilities of the Text Analytics API in 3 sections (language extraction, key-phrase extraction and sentiment analysis).
-1. Replace the `client.SubscriptionKey` value with an access key valid for your subscription.
+1. Replace the `Ocp-Apim-Subscription-Key` header value with an access key valid for your subscription.
 1. Replace the location in `client.AzureRegion` (currently `AzureRegions.Westus`) to the region you signed up for.
 1. Run the program.
 
@@ -61,7 +61,7 @@ namespace ConsoleApp1
     class Program
     {
         /// <summary>
-        /// container for subscription credentials. Make sure to enter 
+        /// Container for subscription credentials. Make sure to enter your valid key.
         /// </summary>
         class ApiKeyServiceClientCredentials : ServiceClientCredentials
         {

articles/iot-accelerators/iot-accelerators-remote-monitoring-sample-walkthrough.md

@@ -130,6 +130,8 @@ If you want to explore the source code and developer documentation, start with o
 
 * [Solution accelerator for Remote Monitoring with Azure IoT (.NET)](https://github.com/Azure/azure-iot-pcs-remote-monitoring-dotnet/wiki/).
 * [Solution accelerator for Remote Monitoring with Azure IoT (Java)](https://github.com/Azure/azure-iot-pcs-remote-monitoring-java).
-* [Solution accelerator for Remote Monitoring architecture)](https://github.com/Azure/azure-iot-pcs-remote-monitoring-dotnet/wiki/Architecture).
+
+Detailed solution architecture diagrams:
+* [Solution accelerator for Remote Monitoring architecture](https://github.com/Azure/azure-iot-pcs-remote-monitoring-dotnet/wiki/Architecture).
 
 For more conceptual information about the Remote Monitoring solution accelerator, see [Customize the solution accelerator](../iot-accelerators/iot-accelerators-remote-monitoring-customize.md).

articles/key-vault/key-vault-developers-guide.md

@@ -1,4 +1,4 @@
----
+---
 title: Azure Key Vault Developer's Guide
 description: Developers can use Azure Key Vault to manage cryptographic keys within the Microsoft Azure environment.
 services: key-vault
@@ -51,7 +51,7 @@ Azure Key Vault provides a way to securely store credentials and other keys and
 
 For more information on MSI, see [Managed Service Identity (MSI) for Azure resources](https://docs.microsoft.com/azure/active-directory/msi-overview).
 
-For more information on working with AAD, see [Integrating applications with Azure Active Directory](/active-directory/develop/active-directory-integrating-applications).
+For more information on working with AAD, see [Integrating applications with Azure Active Directory](/azure/active-directory/develop/active-directory-integrating-applications).
 
 Before working with keys, secrets or certificates in your key vault, you'll create and manage your key vault through CLI, PowerShell, Resource Manager Templates or REST, as described in the following articles:
 

articles/security-center/security-center-os-coverage.md

@@ -56,6 +56,6 @@ VMs running in a cloud service are also supported. Only cloud services web and w
 ## Next steps
 
 - [Azure Security Center Planning and Operations Guide](security-center-planning-and-operations-guide.md) — Learn how to plan and understand the design considerations to adopt Azure Security Center
-- [Security alerts by type in Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-alerts-type.md#virtual-machine-behavioral-analysis) - Learn more about virtual machine behavioral analysis and crash dump memory analysis in Security Center
+- [Security alerts by type in Azure Security Center](security-center-alerts-type.md#virtual-machine-behavioral-analysis) - Learn more about virtual machine behavioral analysis and crash dump memory analysis in Security Center
 - [Azure Security Center FAQ](security-center-faq.md) — Find frequently asked questions about using the service
 - [Azure Security blog](http://blogs.msdn.com/b/azuresecurity/) — Find blog posts about Azure security and compliance

articles/security/blueprints/uk-official-three-tier-applications-overview.md

@@ -147,7 +147,7 @@ Storage
 
 **Internet Gateway and Public IP Address**: The internet gateway exposes application services to users through the internet. Traffic accessing these services is secured using an [Application Gateway](https://docs.microsoft.com/azure/application-gateway/application-gateway-introduction) offering Layer 7 routing and load balancing capabilities with web application firewall (WAF) protection.
 
-**Management VNet**: This [VNet](https://docs.microsoft.com/azure/Virtual-Network/virtual-networks-overviewcontains) contains resources that implement management and monitoring capabilities for the workloads running in the production VNet.
+**Management VNet**: This [VNet](https://docs.microsoft.com/azure/virtual-network/virtual-networks-overview) contains resources that implement management and monitoring capabilities for the workloads running in the production VNet.
 
 **Jumpbox**: Also called a [bastion host](https://en.wikipedia.org/wiki/Bastion_host), which is a secure VM on the network that administrators use to connect to VMs in the production VNet. The jumpbox has an NSG that allows remote traffic only from public IP addresses on a safe list. To permit remote desktop (RDP) traffic, the source of the traffic needs to be defined in the NSG. Management of production resources is via RDP using a secured Jumpbox VM.
 

articles/sql-database/sql-database-troubleshoot-data-sync.md

@@ -4,10 +4,10 @@ description: "Learn how to troubleshoot common issues with Azure SQL Data Sync (
 services: sql-database
 ms.date: 04/01/2018
 ms.topic: conceptual
-ms.service: "sql-database"
-author: "douglaslMS"
-ms.author: "douglasl"
-manager: "craigg"
+ms.service: sql-database
+author: douglaslMS
+ms.author: douglasl
+manager: craigg
 ms.custom: data-sync
 ---
 # Troubleshoot issues with SQL Data Sync (Preview)
@@ -235,9 +235,8 @@ Before you proceed, check for the following conditions:
 
 -   The SQL Data Sync (Preview) Windows service is running.  
 -   The service account for SQL Data Sync (Preview) Preview Windows service has network access.    
--   The client agent can contact the Locator Service. Check that the following registry key has the value https://locator.sync.azure.com/LocatorServiceApi.svc:  
-    -   On an x86 computer: `HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\SQL Azure Data Sync\\LOCATORSVCURI`  
-    -   On an x64 computer: `HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\SQL Azure Data Sync\\LOCATORSVCURI`
+-   The outbound 1433 port is open in your local firewall rule.
+-   The local ip is added to the server or database firewall rule for the sync metadata database.
 
 #### Cause
 

articles/storage/files/storage-how-to-use-files-powershell.md

@@ -1,4 +1,4 @@
----
+---
 title: Managing Azure file shares with Azure PowerShell
 description: Learn to manage Azure file shares using Azure PowerShell.
 services: storage
@@ -31,7 +31,7 @@ If you don't have an Azure subscription, you can create a [free account](https:/
 
 [!INCLUDE [cloud-shell-powershell.md](../../../includes/cloud-shell-powershell.md)]
 
-If would like to install and use the PowerShell locally, this guide requires the Azure PowerShell module version 5.1.1 or later. To find out which version of the Azure PowerShell module you are running, execute `Get-Module -ListAvailable AzureRM`. If you need to upgrade, see [Install Azure PowerShell module](/powershell/azure/install-azurerm-ps). If you are running PowerShell locally, you also need to run `Connect-AzureRmAccount` to create a connection with Azure.
+If you would like to install and use the PowerShell locally, this guide requires the Azure PowerShell module version 5.1.1 or later. To find out which version of the Azure PowerShell module you are running, execute `Get-Module -ListAvailable AzureRM`. If you need to upgrade, see [Install Azure PowerShell module](/powershell/azure/install-azurerm-ps). If you are running PowerShell locally, you also need to run `Connect-AzureRmAccount` to create a connection with Azure.
 
 ## Create a resource group
 A resource group is a logical container into which Azure resources are deployed and managed. If you don't already have an Azure resource group, you can create a new one with the [New-AzureRmResourceGroup](/powershell/module/azurerm.resources/new-azurermresourcegroup) cmdlet. 
@@ -162,7 +162,7 @@ Now, if you list the files in the new share, you should see your copied file.
 Get-AzureStorageFile -Context $storageAcct.Context -ShareName "myshare2" -Path "myDirectory2" 
 ```
 
-While the `Start-AzureStorageFileCopy` cmdlet is convenient for ad-hoc file moves between Azure file shares and Azure Blob storage containers, we recommend AzCopy for larger moves (in terms of number or size of files being moved). Learn more about [AzCopy for Windows](../common/storage-use-azcopy.md) and [AzCopy for Linux](../common/storage-use-azcopy-linux.md). AzCopy must be installed locally - it is not available in Cloud Shell 
+While the `Start-AzureStorageFileCopy` cmdlet is convenient for ad-hoc file moves between Azure file shares and Azure Blob storage containers, we recommend AzCopy for larger moves (in terms of number or size of files being moved). Learn more about [AzCopy for Windows](../common/storage-use-azcopy.md) and [AzCopy for Linux](../common/storage-use-azcopy-linux.md). AzCopy must be installed locally - it is not available in Cloud Shell. 
 
 ## Create and modify share snapshots
 One additional useful task you can do with an Azure file share is to create share snapshots. A snapshot preserves a point in time for an Azure file share. Share snapshots are similar to operating system technologies you may already be familiar with such as: