Merge pull request #228581 from OWinfreyATL/owinfreyATL-November2017-Archive-Removed

prmerger-automator[bot] · web-flow · commit 667220a0fed2 · 2023-02-26T17:12:56.000Z
November 2017 removed from archive
diff --git a/articles/active-directory/fundamentals/whats-new-archive.md b/articles/active-directory/fundamentals/whats-new-archive.md
@@ -9597,223 +9597,4 @@ For more information, see [Privileged Identity Management for Azure resources (p
 
 ---
 
-## November 2017
-
-### Access Control service retirement
-
-**Type:** Plan for change
-**Service category:** Access Control service
-**Product capability:** Access Control service
-
-Azure Active Directory Access Control (also known as the Access Control service) will be retired in late 2018. More information that includes a detailed schedule and high-level migration guidance will be provided in the next few weeks. You can leave comments on this page with any questions about the Access Control service, and a team member will answer them.
-
----
-
-### Restrict browser access to the Intune Managed Browser
-
-**Type:** Plan for change
-**Service category:** Conditional Access
-**Product capability:** Identity security and protection
-
-You can restrict browser access to Office 365 and other Azure AD-connected cloud apps by using the Intune Managed Browser as an approved app.
-
-You now can configure the following condition for application-based Conditional Access:
-
-**Client apps:** Browser
-
-**What is the effect of the change?**
-
-Today, access is blocked when you use this condition. When the preview is available, all access will require the use of the managed browser application.
-
-Look for this capability and more information in upcoming blogs and release notes.
-
-For more information, see [Conditional Access in Azure AD](../conditional-access/overview.md).
-
----
-
-### New approved client apps for Azure AD app-based Conditional Access
-
-**Type:** Plan for change
-**Service category:** Conditional Access
-**Product capability:** Identity security and protection
-
-The following apps are on the list of [approved client apps](../conditional-access/concept-conditional-access-conditions.md#client-apps):
-
-- [Microsoft Kaizala](https://www.microsoft.com/garage/profiles/kaizala/)
-- Microsoft StaffHub
-
-For more information, see:
-
-- [Approved client app requirement](../conditional-access/concept-conditional-access-conditions.md#client-apps)
-- [Azure AD app-based Conditional Access](../conditional-access/app-based-conditional-access.md)
-
----
-
-### Terms-of-use support for multiple languages
-
-**Type:** New feature
-**Service category:** Terms of use
-**Product capability:** Compliance
-
-Administrators now can create new terms of use that contain multiple PDF documents. You can tag these PDF documents with a corresponding language. Users are shown the PDF with the matching language based on their preferences. If there is no match, the default language is shown.
-
----
-
-### Real-time password writeback client status
-
-**Type:** New feature
-**Service category:** Self-service password reset
-**Product capability:** User authentication
-
-You now can review the status of your on-premises password writeback client. This option is available in the **On-premises integration** section of the [Password reset](https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/PasswordReset) page.
-
-If there are issues with your connection to your on-premises writeback client, you see an error message that provides you with:
-
-- Information on why you can't connect to your on-premises writeback client.
-- A link to documentation that assists you in resolving the issue.
-
-For more information, see [on-premises integration](../authentication/concept-sspr-howitworks.md#on-premises-integration).
-
----
-
-### Azure AD app-based Conditional Access
-
-**Type:** New feature
-**Service category:** Azure AD
-**Product capability:** Identity security and protection
-
-You now can restrict access to Office 365 and other Azure AD-connected cloud apps to [approved client apps](../conditional-access/concept-conditional-access-conditions.md#client-apps) that support Intune app protection policies by using [Azure AD app-based Conditional Access](../conditional-access/app-based-conditional-access.md). Intune app protection policies are used to configure and protect company data on these client applications.
-
-By combining [app-based](../conditional-access/app-based-conditional-access.md) with [device-based](../conditional-access/require-managed-devices.md) Conditional Access policies, you have the flexibility to protect data for personal and company devices.
-
-The following conditions and controls are now available for use with app-based Conditional Access:
-
-**Supported platform condition**
-
-- iOS
-- Android
-
-**Client apps condition**
-
-- Mobile apps and desktop clients
-
-**Access control**
-
-- Require approved client app
-
-For more information, see [Azure AD app-based Conditional Access](../conditional-access/app-based-conditional-access.md).
-
----
-
-### Manage Azure AD devices in the Azure portal
-
-**Type:** New feature
-**Service category:** Device registration and management
-**Product capability:** Identity security and protection
-
-You now can find all your devices connected to Azure AD and the device-related activities in one place. There is a new administration experience to manage all your device identities and settings in the Azure portal. In this release, you can:
-
-- View all your devices that are available for Conditional Access in Azure AD.
-- View properties, which include your hybrid Azure AD-joined devices.
-- Find BitLocker keys for your Azure AD-joined devices, manage your device with Intune, and more.
-- Manage Azure AD device-related settings.
-
-For more information, see [Manage devices by using the Azure portal](../devices/device-management-azure-portal.md).
-
----
-
-### Support for macOS as a device platform for Azure AD Conditional Access
-
-**Type:** New feature
-**Service category:** Conditional Access
-**Product capability:** Identity security and protection
-
-You now can include (or exclude) macOS as a device platform condition in your Azure AD Conditional Access policy. With the addition of macOS to the supported device platforms, you can:
-
-- **Enroll and manage macOS devices by using Intune.** Similar to other platforms like iOS and Android, a company portal application is available for macOS to do unified enrollments. You can use the new company portal app for macOS to enroll a device with Intune and register it with Azure AD.
-- **Ensure macOS devices adhere to your organization's compliance policies defined in Intune.** In Intune on the Azure portal, you now can set up compliance policies for macOS devices.
-- **Restrict access to applications in Azure AD to only compliant macOS devices.** Conditional Access policy authoring has macOS as a separate device platform option. Now you can author macOS-specific Conditional Access policies for the targeted application set in Azure.
-
-For more information, see:
-
-- [Create a device compliance policy for macOS devices with Intune](/mem/intune/protect/compliance-policy-create-mac-os)
-- [Conditional Access in Azure AD](../conditional-access/overview.md)
-
----
-
-### Network Policy Server extension for Azure AD Multi-Factor Authentication
-
-**Type:** New feature
-**Service category:**  Multifactor authentication
-**Product capability:** User authentication
-
-The Network Policy Server extension for Azure Active Directory (Azure AD) Multi-Factor Authentication adds cloud-based multifactor authentication capabilities to your authentication infrastructure by using your existing servers. With the Network Policy Server extension, you can add phone call, text message, or phone app verification to your existing authentication flow. You don't have to install, configure, and maintain new servers.
-
-This extension was created for organizations that want to protect virtual private network connections without deploying the Azure Active Directory Multi-Factor Authentication Server. The Network Policy Server extension acts as an adapter between RADIUS and cloud-based Azure AD Multi-Factor Authentication to provide a second factor of authentication for federated or synced users.
-
-For more information, see [Integrate your existing Network Policy Server infrastructure with Azure AD Multi-Factor Authentication](../authentication/howto-mfa-nps-extension.md).
-
----
-
-### Restore or permanently remove deleted users
-
-**Type:** New feature
-**Service category:** User management
-**Product capability:** Directory
-
-In the Azure AD admin center, you can now:
-
-- Restore a deleted user.
-- Permanently delete a user.
-
-**To try it out:**
-
-1. In the Azure AD admin center, select [All users](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/UserManagementMenuBlade/All) in the **Manage** section.
-
-2. From the **Show** list, select **Recently deleted users**.
-
-3. Select one or more recently deleted users, and then either restore them or permanently delete them.
-
----
-
-### New approved client apps for Azure AD app-based Conditional Access
-
-**Type:** Changed feature
-**Service category:** Conditional Access
-**Product capability:** Identity security and protection
-
-The following apps were added to the list of [approved client apps](../conditional-access/concept-conditional-access-conditions.md#client-apps):
-
-- Microsoft Planner
-- Azure Information Protection
-
-For more information, see:
-
-- [Approved client app requirement](../conditional-access/concept-conditional-access-conditions.md#client-apps)
-- [Azure AD app-based Conditional Access](../conditional-access/app-based-conditional-access.md)
-
----
-
-### Use "OR" between controls in a Conditional Access policy
-
-**Type:** Changed feature
-**Service category:** Conditional Access
-**Product capability:** Identity security and protection
-
-You now can use "OR" (require one of the selected controls) for Conditional Access controls. You can use this feature to create policies with "OR" between access controls. For example, you can use this feature to create a policy that requires a user to sign in by using multifactor authentication "OR" to be on a compliant device.
-
-For more information, see [Controls in Azure AD Conditional Access](../conditional-access/controls.md).
-
----
-
-### Aggregation of real-time risk detections
-
-**Type:** Changed feature
-**Service category:** Identity protection
-**Product capability:** Identity security and protection
-
-In Azure AD Identity Protection, all real-time risk detections that originated from the same IP address on a given day are now aggregated for each risk detection type. This change limits the volume of risk detections shown without any change in user security.
-
-The underlying real-time detection works each time the user signs in. If you have a sign-in risk security policy set up to multifactor authentication or block access, it is still triggered during each risky sign-in.
-
 
