Merge branch 'main' into eflow-diagnose-nw

Author: fcabreramsft

.openpublishing.publish.config.json

@@ -978,6 +978,7 @@
     ".openpublishing.redirection.app-service.json",
     ".openpublishing.redirection.key-vault.json",
     ".openpublishing.redirection.sql-database.json",
+    ".openpublishing.redirection.machine-configuration.json",
     ".openpublishing.redirection.security-benchmark.json",
     "articles/synapse-analytics/.openpublishing.redirection.synapse-analytics.json",
     ".openpublishing.redirection.azure-web-pubsub.json",

.openpublishing.redirection.json

@@ -7641,6 +7641,16 @@
       "redirect_url": "/azure/azure-monitor/app/overview-dashboard",
       "redirect_document_id": true
     },
+    {
+      "source_path_from_root": "/articles/azure-monitor/agents/azure-monitor-agent-overview.md",
+      "redirect_url": "/azure/azure-monitor/agents/agents-overview",
+      "redirect_document_id": true
+    },
+    {
+      "source_path_from_root": "/azure/azure-monitor/agents/agents-overview.md#log-analytics-agent",
+      "redirect_url": "/azure/azure-monitor/agents/log-analytics-agent",
+      "redirect_document_id": true
+    },
     {
       "source_path_from_root": "/articles/cognitive-services/Computer-vision/deploy-computer-vision-on-container-instances.md",
       "redirect_url": "/azure/cognitive-services/containers/azure-container-instance-recipe",

.openpublishing.redirection.machine-configuration.json

@@ -0,0 +1,69 @@
+{
+    "redirections": [
+        {
+          "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration.md",
+          "redirect_url": "/azure/governance/machine-configuration/overview",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration-policy-effects.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-policy-effects",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-desired-state-configuration-extension-migration.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-dsc-extension-migration",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration-custom.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-custom",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-test.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-test",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-signing.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-signing",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-setup.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-setup",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-publish.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-publish",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-definition.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-definition",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-create-assignment.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-create-assignment",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/how-to/guest-configuration-azure-automation-migration.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-azure-automation-migration",
+          "redirect_document_id": false
+        },
+        {
+          "source_path_from_root": "/articles/governance/policy/concepts/guest-configuration-assignments.md",
+          "redirect_url": "/azure/governance/machine-configuration/machine-configuration-assignments",
+          "redirect_document_id": false
+        },
+      ]
+}

.whatsnew/.azure-monitor.json

@@ -0,0 +1,77 @@
+{
+  "$schema": "https://whatsnewapi.azurewebsites.net/schema",
+  "docSetProductName": "Azure Monitor",
+  "rootDirectory": "articles/azure-monitor/",
+  "docLinkSettings": {
+    "linkFormat": "relative",
+    "relativeLinkPrefix": "/azure/azure-monitor/"
+  },
+  "inclusionCriteria": {
+    "labels": [
+      "label:whats-new"
+    ],
+    "minAdditionsToFile": 1
+  },
+  "areas": [
+    {
+      "names": ["."],
+      "heading": "General"
+    },
+    {
+      "names":["agents"],
+      "heading": "Agents"
+    },
+    {
+      "names":["alters"],
+      "heading": "Alerts"
+    },
+    {
+      "names":["app"],
+      "heading": "Application Insights"
+    },
+    {
+      "names":["autoscale"],
+      "heading": "Autoscale"
+    },
+    {
+      "names":["change"],
+      "heading": "Change Analysis"
+    },
+    {
+      "names":["containers"],
+      "heading": "Containers"
+    },
+    {
+      "names":["essentials"],
+      "heading": "Essentials"
+    },
+    {
+      "names":["insights"],
+      "heading": "Insights"
+    },
+    {
+      "names":["logs"],
+      "heading": "Logs"
+    },
+    {
+      "names":["media"],
+      "heading": "Media"
+    },
+    {
+      "names":["profiler"],
+      "heading": "Profiler"
+    },
+    {
+      "names":["snapshot-debugger"],
+      "heading": "Snapshot Debugger"
+    },
+    {
+      "names":["visualize"],
+      "heading": "Visualize"
+    },
+    {
+      "names":["vm"],
+      "heading": "VMs"
+    }
+  ]
+}

articles/active-directory-b2c/force-password-reset.md

@@ -9,7 +9,7 @@ manager: CelesteDG
 ms.service: active-directory
 ms.workload: identity
 ms.topic: how-to
-ms.date: 01/24/2022
+ms.date: 08/04/2022
 ms.author: kengaderdus
 ms.subservice: B2C
 zone_pivot_groups: b2c-policy-type
@@ -98,15 +98,18 @@ Get the example of the force password reset policy on [GitHub](https://github.co
 
 ## Force password reset on next login
 
-To force reset the password on next login, update the account password profile using MS Graph [Update user](/graph/api/user-update) operation. The following example updates the password profile [forceChangePasswordNextSignIn](user-profile-attributes.md#password-profile-property) attribute to `true`, which forces the user to reset the password on next login.
+To force reset the password on next login, update the account password profile using MS Graph [Update user](/graph/api/user-update) operation. To do this, you need to assign your [Microsoft Graph application](microsoft-graph-get-started.md) the [User administrator](../active-directory/roles/permissions-reference.md#user-administrator) role. Follow the steps in [Grant user administrator role](microsoft-graph-get-started.md?tabs=app-reg-ga#optional-grant-user-administrator-role) to assign your Microsoft Graph application a User administrator role. 
+
+The following example updates the password profile [forceChangePasswordNextSignIn](user-profile-attributes.md#password-profile-property) attribute to `true`, which forces the user to reset the password on next login.
 
 ```http
 PATCH https://graph.microsoft.com/v1.0/users/<user-object-ID>
 Content-type: application/json
 
 {
-"passwordProfile": {
-  "forceChangePasswordNextSignIn": true
+    "passwordProfile": {
+      "forceChangePasswordNextSignIn": true
+    }
 }
 ```
 

articles/active-directory-domain-services/manage-group-policy.md

@@ -24,7 +24,7 @@ This article shows you how to install the Group Policy Management tools, then ed
 If you are interested in server management strategy, including machines in Azure and
 [hybrid connected](../azure-arc/servers/overview.md),
 consider reading about the
-[guest configuration](../governance/policy/concepts/guest-configuration.md)
+[guest configuration](../governance/machine-configuration/overview.md)
 feature of
 [Azure Policy](../governance/policy/overview.md).
 

articles/active-directory/enterprise-users/groups-settings-cmdlets.md

@@ -320,6 +320,10 @@ This step removes settings at directory level, which apply to all Office groups
 
 ## Cmdlet syntax reference
 You can find more Azure Active Directory PowerShell documentation at [Azure Active Directory Cmdlets](/powershell/azure/active-directory/install-adv2).
+  
+## Manage group settings using Microsoft Graph
+
+To configure and manage group settings using Microsoft Graph, see the [groupSetting resource type](/graph/api/resources/groupsetting?view=graph-rest-1.0&preserve-view=true) and its associated methods.
 
 ## Additional reading
 

articles/active-directory/index.yml

@@ -13,7 +13,7 @@ metadata:
   author: rolyon
   ms.author: rolyon
   manager: CelesteDG
-  ms.date: 06/01/2022
+  ms.date: 08/03/2022
 
 highlightedContent:
 # itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | whats-new
@@ -27,9 +27,9 @@ highlightedContent:
     - title: Azure AD feature deployment guide
       itemType: concept
       url: ./fundamentals/active-directory-deployment-checklist-p2.md
-    - title: Workload identities
-      itemType: concept
-      url: ./develop/workload-identities-overview.md
+    - title: Microsoft Entra
+      itemType: get-started
+      url: https://docs.microsoft.com/entra
 
 conceptualContent:
 # itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new

articles/active-directory/saas-apps/google-apps-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 12/27/2021
+ms.date: 08/04/2022
 ms.author: jeedes
 ---
 
@@ -53,7 +53,11 @@ To test the steps in this tutorial, you should follow these recommendations:
 
 4. **Q: Can I enable single sign-on for only a subset of my Google Cloud / G Suite Connector by Microsoft users?**
 
-    A: No, turning on single sign-on immediately requires all your Google Cloud / G Suite Connector by Microsoft users to authenticate with their Azure AD credentials. Because Google Cloud / G Suite Connector by Microsoft doesn't support having multiple identity providers, the identity provider for your Google Cloud / G Suite Connector by Microsoft environment can either be Azure AD or Google -- but not both at the same time.
+    A: Yes, the SSO profiles can be selected per User, Organizational Unit or Group in the Google Workspace.
+
+    ![Screenshot for SSO profile assignment.](./media/google-apps-tutorial/profile-assignment.png)
+
+    Select the SSO profile as "none" for the Google Workspace group. This prevents members of this (Google Workspace group) from being redirected to Azure AD for logon.
 
 5. **Q: If a user is signed in through Windows, are they automatically authenticate to Google Cloud / G Suite Connector by Microsoft without getting prompted for a password?**