Merging changes synced from https://github.com/MicrosoftDocs/azure-docs-pr (branch live)

Author: Learn Build Service GitHub App

articles/active-directory/enterprise-users/domains-admin-takeover.md

@@ -69,7 +69,7 @@ When you complete the preceding steps, you're now the global administrator of th
 
 7. Select **Custom domain names**, then add the domain name. You'll have to enter the DNS TXT records to verify ownership of the domain name. 
 
-   ![domain verified as added to Azure AD](./media/domains-admin-takeover/add-domain-to-azure-ad.png)
+   ![domain verified as added to Azure AD](./media/domains-admin-takeover/add-domain.png)
 
 > [!NOTE]
 > Any users of Power BI or Azure Rights Management service who have licenses assigned in the Microsoft 365 organization must save their dashboards if the domain name is removed. They must sign in with a user name like *user\@fourthcoffeexyz.onmicrosoft.com* rather than *user\@fourthcoffee.xyz*.

articles/active-directory/enterprise-users/groups-create-rule.md

@@ -47,7 +47,7 @@ For examples of syntax, supported properties, operators, and values for a member
 1. Browse to **Azure Active Directory** > **Groups**.
 1. Select **All groups**, and select **New group**.
 
-   ![Screenshot showing how to select the "add new group" action](./media/groups-create-rule/create-new-group-azure-active-directory.png)
+   ![Screenshot showing how to select the "add new group" action](./media/groups-create-rule/create-new-group.png)
 
 1. On the **Group** page, enter a name and description for the new group. Select a **Membership type** for either users or devices, and then select **Add dynamic query**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
 

articles/active-directory/enterprise-users/groups-dynamic-membership.md

@@ -20,8 +20,8 @@ ms.collection: M365-identity-device-management
 
 You can create attribute-based rules to enable dynamic membership for a group in Azure Active Directory (Azure AD), part of Microsoft Entra. Dynamic group membership adds and removes group members automatically using membership rules based on member attributes. This article details the properties and syntax to create dynamic membership rules for users or devices. You can set up a rule for dynamic membership on security groups or Microsoft 365 groups.
 
-When the attributes of a user or a device change, the system evaluates all dynamic group rules in a directory to see if the change would trigger any group adds or removes. If a user or device satisfies a rule on a group, they're added as a member of that group. If they no longer satisfy the rule, they're removed. You can't manually add or remove a member of a dynamic group.
 
+When the attributes of a user or a device change, the system evaluates all dynamic group rules in a directory to see if the change would trigger any group adds or removes. If a user or device satisfies a rule on a group, they're added as a member of that group. If they no longer satisfy the rule, they're removed. You can't manually add or remove a member of a dynamic group.
 - You can create a dynamic group for devices or for users, but you can't create a rule that contains both users and devices.
 - You can't create a device group based on the user attributes of the device owner. Device membership rules can reference only device attributes.
 
@@ -358,7 +358,7 @@ device.objectId -ne null
 
 ## Extension properties and custom extension properties
 
-Extension attributes and custom extension properties are supported as string properties in dynamic membership rules. [Extension attributes](/graph/api/resources/onpremisesextensionattributes) can be synced from on-premises Window Server Active Directory or updated using Microsoft Graph and take the format of "ExtensionAttributeX", where X equals 1 - 15. Multi-value extension properties are not supported in dynamic membership rules. Here's an example of a rule that uses an extension attribute as a property:
+Extension attributes and custom extension properties are supported as string properties in dynamic membership rules. [Extension attributes](/graph/api/resources/onpremisesextensionattributes) can be synced from on-premises Window Server Active Directory or updated using Microsoft Graph and take the format of "ExtensionAttributeX", where X equals 1 - 15. Multi-value extension properties aren't supported in dynamic membership rules. Here's an example of a rule that uses an extension attribute as a property:
 
 ```
 (user.extensionAttribute15 -eq "Marketing")

articles/active-directory/enterprise-users/media/domains-admin-takeover/add-domain-to-azure-ad.png renamed to articles/active-directory/enterprise-users/media/domains-admin-takeover/add-domain.png

@@ -40,15 +40,15 @@ After you sign in to the [Azure portal](https://portal.azure.com), you can creat
 
 1. Select **Create**.
 
-    ![Azure Active Directory - Overview page - Create a tenant](media/active-directory-access-create-new-tenant/azure-ad-portal.png) 
+    ![Azure Active Directory - Overview page - Create a tenant](media/create-new-tenant/portal.png) 
 
 1. On the Basics tab, select the type of tenant you want to create, either **Azure Active Directory** or **Azure Active Directory (B2C)**.
 
 1. Select **Next: Configuration** to move on to the Configuration tab.
 
 1.  On the Configuration tab, enter the following information:
 
-    ![Azure Active Directory - Create a tenant page - configuration tab ](media/active-directory-access-create-new-tenant/azure-ad-create-new-tenant.png)
+    ![Azure Active Directory - Create a tenant page - configuration tab ](media/create-new-tenant/create-new-tenant.png)
 
     - Type your desired Organization name (for example _Contoso Organization_) into the **Organization name** box.
 
@@ -78,7 +78,7 @@ If you're not going to continue to use this application, you can delete the tena
 
     The tenant and its associated information are deleted.
 
-    ![Overview page, with highlighted Delete directory button](media/active-directory-access-create-new-tenant/azure-ad-delete-new-tenant.png)
+    ![Overview page, with highlighted Delete directory button](media/create-new-tenant/delete-new-tenant.png)
 
 ## Next steps
 

articles/active-directory/enterprise-users/media/groups-create-rule/create-new-group-azure-active-directory.png renamed to articles/active-directory/enterprise-users/media/groups-create-rule/create-new-group.png

@@ -64,19 +64,20 @@ If you signed up using a new Azure AD license plan, you must activate it for you
 
 - Open the confirmation email you received from Microsoft after you signed up, and then select either **Sign In** or **Sign Up**.
 
-    ![Confirmation email with sign in and sign up links](media/active-directory-get-started-premium/MOLSEmail.png)
+    ![Confirmation email with sign in and sign up links](media/get-started-premium/MOLSEmail.png)
 
     - **Sign in.** Choose this link if you have an existing tenant, and then sign in using your existing administrator account. You must be a global administrator on the tenant where the licenses are being activated.
 
     - **Sign up.** Choose this link if you want to open the **Create Account Profile** page and create a new Azure AD tenant for your licensing plan.
 
-        ![Create account profile page, with sample information](media/active-directory-get-started-premium/MOLSAccountProfile.png)
+        ![Create account profile page, with sample information](media/get-started-premium/MOLSAccountProfile.png)
 
 When you're done, you'll see a confirmation box thanking you for activating the license plan for your tenant.
 
-![Confirmation box with thank you](media/active-directory-get-started-premium/MOLSThankYou.png)
+![Confirmation box with thank you](media/get-started-premium/MOLSThankYou.png)
 
 ## Activate your Azure AD access
+
 If you're adding new Azure AD Premium licenses to an existing subscription, your Azure AD access should already be activated. Otherwise, you need to activate Azure AD access after you receive the **Welcome email**.  
 
 After your purchased licenses are provisioned in your directory, you'll receive a **Welcome email**. This email confirms that you can start managing your Azure AD Premium or Enterprise Mobility + Security licenses and features. 
@@ -88,13 +89,14 @@ After your purchased licenses are provisioned in your directory, you'll receive
 
 1. Open the **Welcome email**, and then select **Sign In**.
 
-    ![Welcome email, with highlighted sign in link](media/active-directory-get-started-premium/AADEmail.png)
+    ![Welcome email, with highlighted sign in link](media/get-started-premium/AADEmail.png)
 
 2. After successfully signing in, you'll go through two-step verification using a mobile device.
 
-    ![Two-step verification page with mobile verification](media/active-directory-get-started-premium/SignUppage.png)
+    ![Two-step verification page with mobile verification](media/get-started-premium/SignUppage.png)
 
 The activation process typically takes only a few minutes and then you can use your Azure AD tenant. 
 
 ## Next steps
-Now that you have Azure AD Premium, you can [customize your domain](add-custom-domain.md), add your [corporate branding](customize-branding.md), [create a tenant](active-directory-access-create-new-tenant.md), and [add groups](active-directory-groups-create-azure-portal.md) and [users](add-users-azure-active-directory.md).
+
+Now that you have Azure AD Premium, you can [customize your domain](add-custom-domain.md), add your [corporate branding](customize-branding.md), [create a tenant](create-new-tenant.md), and [add groups](active-directory-groups-create-azure-portal.md) and [users](add-users-azure-active-directory.md).

articles/active-directory/fundamentals/create-new-tenant.md

@@ -90,7 +90,7 @@ You can see all the groups for your organization in the **Groups - All groups**
 
     The **Groups - All groups** page appears, showing all your active groups.
 
-    ![Screenshot of the 'Groups-All groups' page, showing all existing groups.](media/active-directory-groups-view-azure-portal/groups-search.png)
+    ![Screenshot of the 'Groups-All groups' page, showing all existing groups.](media/groups-view-azure-portal/groups-search.png)
 
 ## Search for a group
 Search the **Groups – All groups** page to find the **MDM policy – West** group.
@@ -99,20 +99,20 @@ Search the **Groups – All groups** page to find the **MDM policy – West** gr
 
     The search results appear under the **Search** box, including the _MDM policy - West_ group.
 
-    ![Screenshot of the 'Groups' search page showing matching search results.](media/active-directory-groups-view-azure-portal/groups-search-group-name.png)
+    ![Screenshot of the 'Groups' search page showing matching search results.](media/groups-view-azure-portal/groups-search-group-name.png)
 
 1. Select the group **MDM policy – West**.
 
 1. View the group info on the **MDM policy - West Overview** page, including the number of members of that group.
 
-    ![Screenshot of MDM policy – West Overview page with member info.](media/active-directory-groups-view-azure-portal/groups-overview.png)
+    ![Screenshot of MDM policy – West Overview page with member info.](media/groups-view-azure-portal/groups-overview.png)
 
 ## View group members
 Now that you’ve found the group, you can view all the assigned members.
 
 Select **Members** from the **Manage** area, and then review the complete list of member names assigned to that specific group, including _Alain Charon_.
 
-![Screenshot of the list of members assigned to the MDM policy – West group.](media/active-directory-groups-view-azure-portal/groups-all-members.png)
+![Screenshot of the list of members assigned to the MDM policy – West group.](media/groups-view-azure-portal/groups-all-members.png)
 
 ## Clean up resources
 The group you just created is used in other articles in the Azure AD Fundamentals documentation. If you'd rather not use this group, you can delete it and its assigned members using the following steps:
@@ -127,7 +127,7 @@ The group you just created is used in other articles in the Azure AD Fundamental
 
     The group and its associated members are deleted.
 
-    ![Screenshot of the MDM policy – West Overview page with Delete link highlighted.](media/active-directory-groups-view-azure-portal/groups-delete.png)
+    ![Screenshot of the MDM policy – West Overview page with Delete link highlighted.](media/groups-view-azure-portal/groups-delete.png)
 
     >[!Important]
     >This doesn't delete the user Alain Charon, just his membership in the deleted group.

articles/active-directory/fundamentals/get-started-premium.md

@@ -24,7 +24,7 @@ When a user signs up for a Microsoft cloud service, a new Azure AD tenant is
 
 While users may only have a single authentication *home* directory, users may participate as guests in multiple directories. You can see both the home and guest directories for each user in Azure AD.
 
-:::image type="content" source="media/active-directory-how-subscriptions-associated-directory/trust-relationship-azure-ad.png" alt-text="Screenshot that shows the trust relationship between Azure subscriptions and Azure active directories.":::
+:::image type="content" source="media/how-subscriptions-associated-directory/trust-relationship.png" alt-text="Screenshot that shows the trust relationship between Azure subscriptions and Azure active directories.":::
 
 > [!Important]
 > When a subscription is associated with a different directory, users who have roles assigned using [Azure role-based access control](../../role-based-access-control/role-assignments-portal.md) lose their access. Classic subscription administrators, including Service Administrator and Co-Administrators, also lose access.
@@ -57,17 +57,17 @@ To associate an existing subscription with your Azure AD, follow these steps:
 
 1. Select **Change directory**.
 
-   :::image type="content" source="media/active-directory-how-subscriptions-associated-directory/change-directory-in-azure-subscriptions.png" alt-text="Screenshot that shows the Subscriptions page, with the Change directory option highlighted.":::
+   :::image type="content" source="media/how-subscriptions-associated-directory/change-directory-in-azure-subscriptions.png" alt-text="Screenshot that shows the Subscriptions page, with the Change directory option highlighted.":::
 
 1. Review any warnings that appear, and then select **Change**.
 
-   :::image type="content" source="media/active-directory-how-subscriptions-associated-directory/edit-directory-ui.png" alt-text="Screenshot that shows the Change the directory page with a sample directory and the Change button highlighted.":::
+   :::image type="content" source="media/how-subscriptions-associated-directory/edit-directory-ui.png" alt-text="Screenshot that shows the Change the directory page with a sample directory and the Change button highlighted.":::
 
    After the directory is changed for the subscription, you'll get a success message.
 
 1. Select **Switch directories** on the subscription page to go to your new directory.
 
-   :::image type="content" source="media/active-directory-how-subscriptions-associated-directory/directory-switcher.png" alt-text="Screenshot that shows the Directory switcher page with sample information.":::
+   :::image type="content" source="media/how-subscriptions-associated-directory/directory-switcher.png" alt-text="Screenshot that shows the Directory switcher page with sample information.":::
 
    It can take several hours for everything to show up properly. If it seems to be taking too long, check the **Global subscription filter**. Make sure the moved subscription isn't hidden. You may need to sign out of the Azure portal and sign back in to see the new directory.
 

articles/active-directory/fundamentals/groups-view-azure-portal.md

@@ -32,7 +32,7 @@ Azure subscriptions have a trust relationship with Azure Active Directory (Azure
 
 1. Scroll down to the **Tenant ID** section and you can find your tenant ID in the box.
 
-:::image type="content" source="media/active-directory-how-to-find-tenant/portal-tenant-id.png" alt-text="Azure Active Directory - Properties - Tenant ID - Tenant ID field":::
+:::image type="content" source="media/how-to-find-tenant/portal-tenant-id.png" alt-text="Azure Active Directory - Properties - Tenant ID - Tenant ID field":::
 
 ## Find tenant ID with PowerShell