Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)

Author: tynevi

.openpublishing.redirection.json

@@ -26998,12 +26998,12 @@
         },
         {
             "source_path": "articles/active-directory/user-help/device-management-azuread-registered-devices-windows10-setup.md",
-            "redirect_url": "azure/active-directory/user-help/user-help-register-device-on-network",
+            "redirect_url": "/azure/active-directory/user-help/user-help-register-device-on-network",
             "redirect_document_id": true
         },
         {
             "source_path": "articles/active-directory/user-help/device-management-azuread-joined-devices-setup.md",
-            "redirect_url": "azure/active-directory/user-help/user-help-join-device-on-network",
+            "redirect_url": "/azure/active-directory/user-help/user-help-join-device-on-network",
             "redirect_document_id": true
         },
         {

articles/active-directory-b2c/active-directory-b2c-reference-threat-management.md

@@ -24,4 +24,4 @@ Azure AD B2C uses detection and mitigation techniques like SYN cookies, and rate
 
 Azure AD B2C also has mitigation techniques in place for password attacks. Mitigation includes brute-force password attacks and dictionary password attacks. Passwords that are set by users are required to be reasonably complex. By using various signals, Azure AD B2C analyzes the integrity of requests. Azure AD B2C is designed to intelligently differentiate intended users from hackers and botnets. Azure AD B2C provides a sophisticated strategy to lock accounts based on the passwords entered, in the likelihood of an attack.
 
-For more information, visit the [Microsoft Trust Center](https://www.microsoft.com/en-us/trustcenter/default.aspx).
+For more information, visit the [Microsoft Trust Center](https://www.microsoft.com/trustcenter/default.aspx).

articles/active-directory-b2c/active-directory-b2c-user-migration.md

@@ -359,7 +359,7 @@ You can view and monitor logging information in near-real time.
 After you complete the [Get started with custom policies][B2C-GetStartedCustom] walkthrough, we recommend that you build your scenario by using your own custom policy files. For your reference, we have provided [Sample policy files][UserMigrationSample].
 
 [AD-PasswordPolicies]: https://docs.microsoft.com/azure/active-directory/active-directory-passwords-policy
-[AD-Powershell]: https://docs.microsoft.com/en-us/powershell/azure/active-directory/install-adv2
+[AD-Powershell]: https://docs.microsoft.com/powershell/azure/active-directory/install-adv2
 [AppService-Deploy]: https://docs.microsoft.com/aspnet/core/tutorials/publish-to-azure-webapp-using-vs
 [B2C-AppRegister]: https://docs.microsoft.com/azure/active-directory-b2c/active-directory-b2c-app-registration
 [B2C-GetStarted]: https://docs.microsoft.com/azure/active-directory-b2c/active-directory-b2c-get-started

articles/active-directory-b2c/manage-user-access.md

@@ -42,7 +42,7 @@ Depending on application regulation, parental consent might need to be granted b
 
 The following is an example of a user flow for gathering parental consent:
 
-1. An [Azure Active Directory Graph API](https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/api-catalog) operation identifies the user as a minor and returns the user data to the application in the form of an unsigned JSON token.
+1. An [Azure Active Directory Graph API](https://msdn.microsoft.com/library/azure/ad/graph/api/api-catalog) operation identifies the user as a minor and returns the user data to the application in the form of an unsigned JSON token.
 
 2. The application processes the JSON token and shows a screen to the minor, notifying him or her that parental consent is required and requesting the consent of a parent online. 
 
@@ -52,7 +52,7 @@ The following is an example of a user flow for gathering parental consent:
 
 5. When either the minor or the adult revokes consent, the Azure AD Graph API can be used to change **consentProvidedForMinor** to **denied**. Alternatively, the application may choose to delete a minor whose consent has been revoked. It is optionally possible to customize the user flow so that the authenticated minor (or parent that is using the minor’s account) can revoke consent. Azure AD B2C records **consentProvidedForMinor** as **denied**.
 
-For more information about **legalAgeGroupClassification**, **consentProvidedForMinor**, and **ageGroup**, see [User resource type](https://developer.microsoft.com/en-us/graph/docs/api-reference/beta/resources/user). For more information about custom attributes, see [Use custom attributes to collect information about your consumers](active-directory-b2c-reference-custom-attr.md). When you address extended attributes by using the Azure AD Graph API, you must use the long version of the attribute, such as *extension_18b70cf9bb834edd8f38521c2583cd86_dateOfBirth*: *2011-01-01T00:00:00Z*.
+For more information about **legalAgeGroupClassification**, **consentProvidedForMinor**, and **ageGroup**, see [User resource type](https://developer.microsoft.com/graph/docs/api-reference/beta/resources/user). For more information about custom attributes, see [Use custom attributes to collect information about your consumers](active-directory-b2c-reference-custom-attr.md). When you address extended attributes by using the Azure AD Graph API, you must use the long version of the attribute, such as *extension_18b70cf9bb834edd8f38521c2583cd86_dateOfBirth*: *2011-01-01T00:00:00Z*.
 
 ## Gather date of birth and country data
 

articles/active-directory-b2c/manage-user-data.md

@@ -15,7 +15,7 @@ ms.component: B2C
 
 # Manage user data in Azure Active Directory B2C
 
- This article discusses how you can manage the user data in Azure Active Directory (Azure AD) B2C by using the operations that are provided by the [Azure Active Directory Graph API](https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/api-catalog). Managing user data includes deleting or exporting data from audit logs.
+ This article discusses how you can manage the user data in Azure Active Directory (Azure AD) B2C by using the operations that are provided by the [Azure Active Directory Graph API](https://msdn.microsoft.com/library/azure/ad/graph/api/api-catalog). Managing user data includes deleting or exporting data from audit logs.
 
 [!INCLUDE [gdpr-intro-sentence.md](../../includes/gdpr-intro-sentence.md)]
 

articles/active-directory-domain-services/active-directory-ds-troubleshooting.md

@@ -135,7 +135,7 @@ If one or more users in your Azure AD tenant are unable to sign in to the newly
 * **External accounts:** Ensure that the affected user account is not an external account in the Azure AD tenant. Examples of external accounts include Microsoft accounts (for example, '[email protected]') or user accounts from an external Azure AD directory. Since Azure AD Domain Services does not have credentials for such user accounts, these users cannot sign in to the managed domain.
 * **Synced accounts:** If the affected user accounts are synchronized from an on-premises directory, verify that:
 
-  * You have deployed or updated to the [latest recommended release of Azure AD Connect](https://www.microsoft.com/en-us/download/details.aspx?id=47594).
+  * You have deployed or updated to the [latest recommended release of Azure AD Connect](https://www.microsoft.com/download/details.aspx?id=47594).
   * You have configured Azure AD Connect to [perform a full synchronization](active-directory-ds-getting-started-password-sync.md).
   * Depending on the size of your directory, it may take a while for user accounts and credential hashes to be available in Azure AD Domain Services. Ensure you wait long enough before retrying authentication.
   * If the issue persists after verifying the preceding steps, try restarting the Microsoft Azure AD Sync Service. From your sync machine, launch a command prompt and execute the following commands:

articles/active-directory-domain-services/index.yml

@@ -26,22 +26,22 @@ sections:
     - href: active-directory-ds-overview.md
       html: <p>Read about what Azure AD Domain Services can do for you.</p>
       image:
-        src: https://docs.microsoft.com/en-us/media/common/i_investigate.svg
+        src: https://docs.microsoft.com/media/common/i_investigate.svg
       title: What is Azure AD Domain Services?
     - href: active-directory-ds-getting-started.md
       html: <p>Create your own managed domain with this simple walkthrough.</p>
       image:
-        src: https://docs.microsoft.com/en-us/media/common/i_deploy.svg
+        src: https://docs.microsoft.com/media/common/i_deploy.svg
       title: Get started
     - href: active-directory-ds-contact-us.md
       html: <p>Receive help when you need it.</p>
       image:
-        src: https://docs.microsoft.com/en-us/media/common/i_support.svg
+        src: https://docs.microsoft.com/media/common/i_support.svg
       title: Get support
-    - href: https://azure.microsoft.com/en-us/updates/?product=active-directory-ds
+    - href: https://azure.microsoft.com/updates/?product=active-directory-ds
       html: <p>See new features in Azure AD Domain Services.</p>
       image:
-        src: https://docs.microsoft.com/en-us/media/common/i_whats-new.svg
+        src: https://docs.microsoft.com/media/common/i_whats-new.svg
       title: What's new
 
 - title: Videos
@@ -58,7 +58,7 @@ sections:
     - html: <a href="active-directory-ds-features.md">Features of Azure AD Domain Services</a>
     - html: <a href="active-directory-ds-scenarios.md">How can you use the service?</a>
     - html: <a href="active-directory-ds-synchronization.md">Understand how synchronization works in Azure AD Domain Services</a>
-    - html: <a href="https://azure.microsoft.com/en-us/pricing/details/active-directory-ds/">Pricing of Azure AD Domain Services</a>
+    - html: <a href="https://azure.microsoft.com/pricing/details/active-directory-ds/">Pricing of Azure AD Domain Services</a>
 
 - title: Applications and Azure AD Domain Services 
   items:
@@ -90,13 +90,13 @@ sections:
     - html: <a href="active-directory-ds-troubleshooting.md">Troubleshooting guide</a>
     - html: <a href="active-directory-ds-troubleshoot-alerts.md">Troubleshooting alerts on your managed domain</a>
     - html: <a href="active-directory-ds-faqs.md">Frequently Asked Questions</a>
-    - html: <a href="https://azure.microsoft.com/en-us/support/options/">Get support</a>
+    - html: <a href="https://azure.microsoft.com/support/options/">Get support</a>
 
 - title: Other resources
   items:
   - type: list
     style: unordered
     items:
     - html: <a href="https://feedback.azure.com/forums/169401-azure-active-directory/">Give feedback on Azure AD Domain Services at UserVoice</a>
-    - html: <a href="https://azure.microsoft.com/en-us/roadmap/?category=security-identity">Azure Roadmap</a>
-    - html: <a href="https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-contact-us">Contact Us</a>
+    - html: <a href="https://azure.microsoft.com/roadmap/?category=security-identity">Azure Roadmap</a>
+    - html: <a href="https://docs.microsoft.com/azure/active-directory-domain-services/active-directory-ds-contact-us">Contact Us</a>

articles/active-directory/TOC.md

@@ -82,34 +82,9 @@
 #### [Getting support for B2B](b2b/get-support.md)
 
 ## [Manage groups and members](fundamentals/active-directory-manage-groups.md)
-### Manage groups
-#### [Azure portal](fundamentals/active-directory-groups-create-azure-portal.md)
-#### [Azure AD PowerShell for Graph (v2)](users-groups-roles/groups-settings-v2-cmdlets.md)
-#### [Azure AD PowerShell MSOnline](users-groups-roles/groups-settings-cmdlets.md)
-### [Manage group members](fundamentals/active-directory-groups-members-azure-portal.md)
-### [Manage group owners](fundamentals/active-directory-accessmanagement-managing-group-owners.md)
-### [Manage group membership](fundamentals/active-directory-groups-membership-azure-portal.md)
-### [Assign licenses using groups](fundamentals/active-directory-licensing-whatis-azure-portal.md)
-#### [Assign licenses to a group](users-groups-roles/licensing-groups-assign.md)
-#### [Identify and resolve license problems in a group](users-groups-roles/licensing-groups-resolve-problems.md)
-#### [Migrate individual licensed users to group-based licensing](users-groups-roles/licensing-groups-migrate-users.md)
-#### [Migrate users between product licenses](users-groups-roles/licensing-groups-change-licenses.md)
-#### [Additional scenarios for group-based licensing](users-groups-roles/licensing-group-advanced.md)
-#### [Azure PowerShell examples for group-based licensing](users-groups-roles/licensing-ps-examples.md)
-#### [Reference for products and service plans in Azure AD](users-groups-roles/licensing-service-plan-reference.md)
-### [Set up Office 365 groups expiration](users-groups-roles/groups-lifecycle.md)
-### [Enforce a naming policy for groups](users-groups-roles/groups-naming-policy.md)
-### [View all groups](fundamentals/active-directory-groups-view-azure-portal.md)
-### [Add group access to SaaS apps](users-groups-roles/groups-saasapps.md)
+### [Manage groups](fundamentals/active-directory-groups-create-azure-portal.md)
 ### [Restore a deleted Office 365 group](fundamentals/active-directory-groups-restore-azure-portal.md)
 ### [Manage group settings](fundamentals/active-directory-groups-settings-azure-portal.md)
-### [Set up self-service groups](users-groups-roles/groups-self-service-management.md)
-### Dynamic groups
-#### [Create a dynamic group](users-groups-roles/groups-create-rule.md)
-#### [Rule syntax and properties](users-groups-roles/groups-dynamic-membership.md)
-#### [Change group membership type](users-groups-roles/groups-change-type.md)
-#### [Troubleshoot](users-groups-roles/groups-troubleshooting.md)
-
 ## [Manage reports](reports-monitoring/overview-reports.md)
 ### [Sign-ins activity](reports-monitoring/concept-sign-ins.md)
 ### [Audit activity](reports-monitoring/concept-audit-logs.md)
@@ -362,12 +337,7 @@
 ### [Azure AD Connect](./connect/active-directory-aadconnect.md)
 ### Custom domain names
 #### [Quickstart](fundamentals/add-custom-domain.md)
-#### [Add custom domain names](users-groups-roles/domains-manage.md)
 ### [Administer your directory](fundamentals/active-directory-administer.md)
-### [Delete a directory](users-groups-roles/directory-delete-howto.md)
-### [Multiple directories](users-groups-roles/licensing-directory-independence.md)
-### [Self-service signup](users-groups-roles/directory-self-service-signup.md)
-### [Take over an unmanaged directory](users-groups-roles/domains-admin-takeover.md)
 ### [Enterprise State Roaming](active-directory-windows-enterprise-state-roaming-overview.md)
 #### [Enable](active-directory-windows-enterprise-state-roaming-enable.md)
 #### [Group policy settings](active-directory-windows-enterprise-state-roaming-group-policy-settings.md)
@@ -378,14 +348,6 @@
 
 ### [Integrate on-premises identities using Azure AD Connect](./connect/active-directory-aadconnect.md)
 
-## Delegate access to resources
-### [Administrator roles](users-groups-roles/directory-assign-admin-roles.md)
-#### [View members of an admin role](users-groups-roles//directory-manage-roles-portal.md)
-#### [Assign admin role to a user](fundamentals/active-directory-users-assign-role-azure-portal.md)
-#### [Compare member and guest user permissions](fundamentals/users-default-permissions.md)
-### [Administrator role security](users-groups-roles/directory-admin-roles-secure.md)  
-#### [Create emergency access administrator accounts](users-groups-roles/directory-emergency-access.md)
-### [Administrative units](users-groups-roles/directory-administrative-units.md)
 ### [Configure token lifetimes](active-directory-configurable-token-lifetimes.md)
 
 ## Access reviews
@@ -419,9 +381,6 @@
 #### [Microsoft Graph](identity-protection/graph-get-started.md)
 ### [Privileged Identity Management](privileged-identity-management/pim-configure.md?toc=%2fazure%2factive-directory%2ftoc.json)
 
-## Integrate other services with Azure AD 
-### [Integrate LinkedIn with Azure AD](users-groups-roles/linkedin-integration.md)
-
 ## [Deploy AD FS in Azure](active-directory-aadconnect-azure-adfs.md)
 ### [High availability](active-directory-adfs-in-azure-with-azure-traffic-manager.md)
 ### [Change signature hash algorithm](active-directory-federation-sha256-guidance.md)
@@ -434,13 +393,11 @@
 ### [PoC Playbook: Implementation](active-directory-playbook-implementation.md)
 ### [PoC Playbook: Building Blocks](active-directory-playbook-building-blocks.md)
 
-
 # Reference
 ## [Code samples](https://azure.microsoft.com/resources/samples/?service=active-directory)
 ## [Azure PowerShell cmdlets](/powershell/azure/overview)
 ## [Java API Reference](/java/api)
 ## [.NET API](/active-directory/adal/microsoft.identitymodel.clients.activedirectory)
-## [Service limits and restrictions](users-groups-roles/directory-service-limits-restrictions.md)
 
 # Related
 ## [Multi-Factor Authentication](/azure/multi-factor-authentication/)

articles/active-directory/active-directory-apps-index.md

@@ -92,7 +92,7 @@ If your organization maintains a Windows Server Active Directory on premises alo
 |:---:| --- |
 | An overview on the single sign-on options offered in Azure AD Connect, as well as information on managing hybrid environments |[User Sign On Options in Azure AD Connect](active-directory-aadconnect-user-signin.md) |
 | General guidance for managing environments with both on-premises Active Directory and Azure Active Directory |[Azure AD Hybrid Identity Design Considerations](active-directory-hybrid-identity-design-considerations-overview.md)<br /><br />[Integrating your On-Premises Identities with Azure Active Directory](active-directory-aadconnect.md) |
-| Guidance on using Password Sync to enable SSO |[Implement Password Synchronization with Azure AD Connect](connect/active-directory-aadconnectsync-implement-password-hash-synchronization.md)<br /><br />[Troubleshoot Password Synchronization](https://support.microsoft.com/en-us/kb/2855271) |
+| Guidance on using Password Sync to enable SSO |[Implement Password Synchronization with Azure AD Connect](connect/active-directory-aadconnectsync-implement-password-hash-synchronization.md)<br /><br />[Troubleshoot Password Synchronization](https://support.microsoft.com/kb/2855271) |
 | Guidance on using Password Writeback to enable SSO |[Getting Started with Password Management in Azure AD](authentication/quickstart-sspr.md)<br /><br />[Troubleshoot Password Writeback](authentication/active-directory-passwords-troubleshoot.md#troubleshoot-password-writeback) |
 | Guidance on using third party identity providers to enable SSO |[List of Compatible Third-Party Identity Providers That Can Be Used to Enable Single Sign-On](https://aka.ms/ssoproviders) |
 | How Windows 10 users can enjoy the benefits of single sign-on via Azure AD Join |[Extending Cloud Capabilities to Windows 10 Devices through Azure Active Directory Join](active-directory-azureadjoin-overview.md) |

articles/active-directory/active-directory-conditional-access-azure-authenticator-app.md

@@ -86,7 +86,7 @@ After you have installed the Azure Authenticator app, you can also create a work
 ### Sending log files to report issues
 1. Follow the guidance on Microsoft Support to report an incident with the Azure Authenticator app, obtain an incident number, and send log files against the assigned incident number as follows:
 2. From the pop up menu, click **Logging**.
-3. If you have an open incident with Microsoft Support, make note of the incident number (you'll need it for a later step). If you have not already created a support incident and would like assistance, follow the guidance at [Microsoft Support](https://support.microsoft.com/en-us/contactus) to open a new incident.
+3. If you have an open incident with Microsoft Support, make note of the incident number (you'll need it for a later step). If you have not already created a support incident and would like assistance, follow the guidance at [Microsoft Support](https://support.microsoft.com/contactus) to open a new incident.
 4. On the logging screen, click **Send Now**.
 5. Select the email provider you want to use.
 6. If you already have an open incident Microsoft Support, contact the Support Engineer assigned to your issue to find out how to send the log data and have it associated with your incident. The Support Engineer will provide you with information for the email address and subject line. If you do not already have a support incident, please follow the guidance at Microsoft Support to open a new incident.