Merge pull request #261841 from GitHubber17/183368-8

Freshness | Microsoft Dev Box procedures

Author: v-dirichards

articles/dev-box/how-to-configure-network-connections.md

@@ -1,12 +1,12 @@
 ---
 title: Configure network connections
 titleSuffix: Microsoft Dev Box
-description: Learn how to manage network connections for a dev center in Microsoft Dev Box. Use network connections to connect to virtual network or enable connecting to on-premises resources from a dev box.
+description: Learn how to manage network connections for a dev center in Microsoft Dev Box. Connect to a virtual network or enable connecting to on-premises resources.
 services: dev-box
 ms.service: dev-box
 author: RoseHJM
 ms.author: rosemalcolm
-ms.date: 04/25/2023
+ms.date: 12/20/2023
 ms.topic: how-to
 #Customer intent: As a platform engineer, I want to be able to manage network connections so that I can enable dev boxes to connect to my existing networks and deploy them in the desired region.
 ---
@@ -19,22 +19,25 @@ You can choose to deploy dev boxes to a Microsoft-hosted network associated with
 
 You need to add at least one network connection to a dev center in Microsoft Dev Box.
 
-When you're planning network connectivity for your dev boxes, you must:
+## Prerequisites
+
+- Sufficient permissions to enable creating and configuring network connections.
+- At least one virtual network and subnet available for your dev boxes.
+
+When you're planning network connectivity for your dev boxes, consider the following points:
 
-- Ensure that you have sufficient permissions to create and configure network connections.
-- Ensure that you have at least one virtual network and subnet available for your dev boxes.
 - Identify the region or location that's closest to your dev box users. Deploying dev boxes into a region that's close to users gives them a better experience.
 - Determine whether dev boxes should connect to your existing networks by using Microsoft Entra join or Microsoft Entra hybrid join.
 
-## Permissions
+### Verify your permissions
 
-To manage a network connection, you need the following permissions:
+To manage a network connection, confirm that you have the following permissions:
 
-|Action|Permissions required|
-|-----|-----|
-|Create and configure a virtual network and subnet|Network Contributor permissions on an existing virtual network (Owner or Contributor), or permission to create a new virtual network and subnet.|
-|Create or delete a network connection|Owner or Contributor permissions on an Azure subscription or on a specific resource group, which includes permission to create a resource group.|
-|Add or remove a network connection |Write permission on the dev center.|
+| Action | Role | Permissions required |
+|---|---|---|
+| _Create and configure a virtual network and subnet_ | **Network Contributor** (**Owner** or **Contributor**) | Permissions on an existing virtual network or permission to create a new virtual network and subnet |
+| _Create or delete a network connection_ | **Owner** or **Contributor** | Permissions on an Azure subscription or on a specific resource group, which includes permission to create a resource group |
+| _Add or remove a network connection_ | **Contributor** | Permission to perform **Write** actions on the dev center |
 
 ## Create a virtual network and subnet
 
@@ -49,16 +52,16 @@ To create a network connection, you need an existing virtual network and subnet.
 1. On the **Create virtual network** pane, on the **Basics** tab, enter the following values:
 
     | Setting | Value |
-    | ------- | ----- |
+    |---|---|
     | **Subscription** | Select your subscription. |
-    | **Resource group** | Select an existing resource group. Or create a new one by selecting **Create new**, entering **rg-name**, and then selecting **OK**. |
-    | **Name** | Enter *VNet-name*. |
+    | **Resource group** | Select an existing resource group, or create a new one by selecting **Create new**, entering a name, and then selecting **OK**. |
+    | **Name** | Enter a name for the virtual network. |
     | **Region** | Select the region for the virtual network and dev boxes. |
 
-    :::image type="content" source="./media/how-to-manage-network-connection/example-basics-tab.png" alt-text="Screenshot of the Basics tab on the pane for creating a virtual network in the Azure portal." border="true":::
+    :::image type="content" source="./media/how-to-manage-network-connection/example-basics-tab.png" alt-text="Screenshot of the Basics tab on the pane for creating a virtual network in the Azure portal." lightbox="./media/how-to-manage-network-connection/example-basics-tab.png":::
 
-   > [!Important]
-   > The region that you select for the virtual network is the where the dev boxes will be deployed.
+   > [!IMPORTANT]
+   > The region you select for the virtual network is the where Azure deploys the dev boxes.
 
 1. On the **IP Addresses** tab, accept the default settings.
 
@@ -78,92 +81,84 @@ If your organization routes egress traffic through a firewall, you need to open
 
 The following sections show you how to create and configure a network connection in Microsoft Dev Box.
 
-### Types of Active Directory join
-
-Microsoft Dev Box requires a configured and working Active Directory join, which defines how dev boxes join your domain and access resources. There are two choices:
+### Review types of Active Directory join
 
-- **Microsoft Entra join**: If your organization uses Microsoft Entra ID, you can use a Microsoft Entra join (sometimes called a native Microsoft Entra join). Dev box users sign in to Microsoft Entra joined dev boxes by using their Microsoft Entra account and access resources based on the permissions assigned to that account. Microsoft Entra join enables access to cloud-based and on-premises apps and resources.
+Microsoft Dev Box requires a configured and working Active Directory join, which defines how dev boxes join your domain and access resources. There are two choices: Microsoft Entra join and Microsoft Entra hybrid join.
 
-  For more information, see [Plan your Microsoft Entra join deployment](../active-directory/devices/device-join-plan.md).
-- **Microsoft Entra hybrid join**: If your organization has an on-premises Active Directory implementation, you can still benefit from some of the functionality in Microsoft Entra ID by using Microsoft Entra hybrid joined dev boxes. These dev boxes are joined to your on-premises Active Directory instance and registered with Microsoft Entra ID.
+- **Microsoft Entra join**. If your organization uses Microsoft Entra ID, you can use a Microsoft Entra join (sometimes called a _native_ Microsoft Entra join). Dev box users sign in to Microsoft Entra joined dev boxes by using their Microsoft Entra account. They access resources based on the permissions assigned to that account. Microsoft Entra join enables access to cloud-based and on-premises apps and resources. For more information, see [Plan your Microsoft Entra join deployment](../active-directory/devices/device-join-plan.md).
 
-  Microsoft Entra hybrid joined dev boxes require network line of sight to your on-premises domain controllers periodically. Without this connection, devices become unusable.
-
-  For more information, see [Plan your Microsoft Entra hybrid join deployment](../active-directory/devices/hybrid-join-plan.md).
+- **Microsoft Entra hybrid join**. If your organization has an on-premises Active Directory implementation, you can still benefit from some of the functionality in Microsoft Entra ID by using Microsoft Entra hybrid joined dev boxes. These dev boxes are joined to your on-premises Active Directory instance and registered with Microsoft Entra ID. Microsoft Entra hybrid joined dev boxes require network line of sight to your on-premises domain controllers periodically. Without this connection, devices become unusable. For more information, see [Plan your Microsoft Entra hybrid join deployment](../active-directory/devices/hybrid-join-plan.md).
 
 ### Create a network connection
-
-Follow the steps on the relevant tab to create your network connection.
-
 <a name='azure-ad-join'></a>
 
-#### [**Microsoft Entra join**](#tab/AzureADJoin/)
+# [**Microsoft Entra join**](#tab/AzureADJoin/)
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
 
-1. In the search box, enter **network connections**. In the list of results, select **Network connections**.
+1. In the search box, enter **network connections**. In the list of results, select **Network Connections**.
 
 1. On the **Network Connections** page, select **Create**.
 
-   :::image type="content" source="./media/how-to-manage-network-connection/network-connections-empty.png" alt-text="Screenshot that shows the Create button on the page for network connections.":::
+   :::image type="content" source="./media/how-to-manage-network-connection/network-connections-empty.png" alt-text="Screenshot that shows the Create button on the page for network connections." lightbox="./media/how-to-manage-network-connection/network-connections-empty.png":::
 
 1. On the **Create a network connection** pane, on the **Basics** tab, enter the following values:
 
-   |Name|Value|
-   |----|----|
-   |**Domain join type**|Select **Microsoft Entra join**.|
-   |**Subscription**|Select the subscription in which you want to create the network connection.|
-   |**ResourceGroup**|Select an existing resource group, or select **Create new** and then enter a name for the new resource group.|
-   |**Name**|Enter a descriptive name for the network connection.|
-   |**Virtual network**|Select the virtual network that you want the network connection to use.|
-   |**Subnet**|Select the subnet that you want the network connection to use.|
+   | Setting | Value |
+   |---|---|
+   | **Domain join type** | Select **Microsoft Entra join**. |
+   | **Subscription** | Select the subscription in which you want to create the network connection. |
+   | **Resource group** | Select an existing resource group, or select **Create new** and then enter a name for the new resource group. |
+   | **Name** | Enter a descriptive name for the network connection. |
+   | **Virtual network** | Select the virtual network that you want the network connection to use. |
+   | **Subnet** | Select the subnet that you want the network connection to use. |
 
-   :::image type="content" source="./media/how-to-manage-network-connection/create-native-network-connection-full-blank.png" alt-text="Screenshot that shows the Basics tab on the pane for creating a network connection, with the option for Microsoft Entra join selected.":::
+   :::image type="content" source="./media/how-to-manage-network-connection/create-native-network-connection-full-blank.png" alt-text="Screenshot that shows the Basics tab on the pane for creating a network connection, with the option for Microsoft Entra join selected." lightbox="./media/how-to-manage-network-connection/create-native-network-connection-full-blank.png":::
 
 1. Select **Review + Create**.
 
 1. On the **Review** tab, select **Create**.
 
-1. When the deployment is complete, select **Go to resource**. Confirm that the connection appears on the **Network connections** page.
+1. When the deployment completes, select **Go to resource**. Confirm the connection appears on the **Network Connections** page.
 
 <a name='hybrid-azure-ad-join'></a>
 
-#### [**Microsoft Entra hybrid join**](#tab/HybridAzureADJoin/)
+# [**Microsoft Entra hybrid join**](#tab/HybridAzureADJoin/)
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
 
-1. In the search box, enter **network connections**. In the list of results, select **Network connections**.
+1. In the search box, enter **network connections**. In the list of results, select **Network Connections**.
 
 1. On the **Network Connections** page, select **Create**.
 
-   :::image type="content" source="./media/how-to-manage-network-connection/network-connections-empty.png" alt-text="Screenshot that shows the Create button on the page that lists network connections.":::
+   :::image type="content" source="./media/how-to-manage-network-connection/network-connections-empty.png" alt-text="Screenshot that shows the Create button on the page that lists network connections." lightbox="./media/how-to-manage-network-connection/network-connections-empty.png":::
 
 1. On the **Create a network connection** pane, on the **Basics** tab, enter the following values:
 
-   |Name|Value|
-   |----|----|
-   |**Domain join type**|Select **Microsoft Entra hybrid join**.|
-   |**Subscription**|Select the subscription in which you want to create the network connection.|
-   |**ResourceGroup**|Select an existing resource group, or select **Create new** and then enter a name for the new resource group.|
-   |**Name**|Enter a descriptive name for the network connection.|
-   |**Virtual network**|Select the virtual network that you want the network connection to use.|
-   |**Subnet**|Select the subnet that you want the network connection to use.|
-   |**AD DNS domain name**| Enter the DNS name of the Active Directory domain that you want to use for connecting and provisioning Cloud PCs. For example: `corp.contoso.com`. |
-   |**Organizational unit**| Enter the organizational unit (OU). An OU is a container within an Active Directory domain that can hold users, groups, and computers. |
-   |**AD username UPN**| Enter the username, in user principal name (UPN) format, that you want to use for connecting Cloud PCs to your Active Directory domain. For example: `[email protected]`. This service account must have permission to join computers to the domain and the target OU (if one is set). |
-   |**AD domain password**| Enter the password for the user. |
-
-   :::image type="content" source="./media/how-to-manage-network-connection/create-hybrid-network-connection-full-blank.png" alt-text="Screenshot that shows the Basics tab on the pane for creating a network connection, with the option for Microsoft Entra hybrid join selected.":::
+   | Setting | Value |
+   |---|---|
+   | **Domain join type** | Select **Microsoft Entra hybrid join**. |
+   | **Subscription** | Select the subscription in which you want to create the network connection. |
+   | **ResourceGroup** | Select an existing resource group, or select **Create new** and then enter a name for the new resource group. |
+   | **Name** | Enter a descriptive name for the network connection. |
+   | **Virtual network** | Select the virtual network that you want the network connection to use. |
+   | **Subnet** | Select the subnet that you want the network connection to use. |
+   | **AD DNS domain name**| Enter the DNS name of the Active Directory domain that you want to use for connecting and provisioning Cloud PCs. For example: `corp.contoso.com`. |
+   | **Organizational unit** | Enter the organizational unit (OU). An OU is a container within an Active Directory domain that can hold users, groups, and computers. |
+   | **AD username UPN** | Enter the username, in user principal name (UPN) format, that you want to use for connecting Cloud PCs to your Active Directory domain. For example: `[email protected]`. This service account must have permission to join computers to the domain and the target OU (if one is set). |
+   | **AD domain password** | Enter the password for the user. |
+
+   :::image type="content" source="./media/how-to-manage-network-connection/create-hybrid-network-connection-full-blank.png" alt-text="Screenshot that shows the Basics tab on the pane for creating a network connection, with the option for Microsoft Entra hybrid join selected." lightbox="./media/how-to-manage-network-connection/create-hybrid-network-connection-full-blank.png":::
 
 1. Select **Review + Create**.
 
 1. On the **Review** tab, select **Create**.
 
-1. When the deployment is complete, select **Go to resource**. Confirm that the connection appears on the **Network connections** page.
+1. When the deployment completes, select **Go to resource**. Confirm the connection appears on the **Network connections** page.
 
 ---
 
->[!NOTE]
+> [!NOTE]
 > Microsoft Dev Box automatically creates a resource group for each network connection, which holds the network interface cards (NICs) that use the virtual network assigned to the network connection. The resource group has a fixed name based on the name and region of the network connection. You can't change the name of the resource group, or specify an existing resource group.
 
 ## Attach a network connection to a dev center
@@ -180,13 +175,13 @@ You need to attach a network connection to a dev center before you can use it in
 
 1. On the **Add network connection** pane, select the network connection that you created earlier, and then select **Add**.
 
-   :::image type="content" source="./media/how-to-manage-network-connection/add-network-connection.png" alt-text="Screenshot that shows the pane for adding a network connection.":::
+   :::image type="content" source="./media/how-to-manage-network-connection/add-network-connection.png" alt-text="Screenshot that shows the pane for adding a network connection." lightbox="./media/how-to-manage-network-connection/add-network-connection.png":::
 
 After you attach a network connection, the Azure portal runs several health checks on the network. You can view the status of the checks on the resource overview page.
 
 :::image type="content" source="./media/how-to-manage-network-connection/network-connection-grid-populated.png" alt-text="Screenshot that shows the status of a network connection.":::
 
-You can add network connections that pass all health checks to a dev center and use them to create dev box pools. Dev boxes within dev box pools are created and domain joined in the location of the virtual network that's assigned to the network connection.
+You can add network connections that pass all health checks to a dev center and use them to create dev box pools. Dev boxes within dev box pools are created and domain joined in the location of the virtual network assigned to the network connection.
 
 To resolve any errors, see [Troubleshoot Azure network connections](/windows-365/enterprise/troubleshoot-azure-network-connection).
 
@@ -204,7 +199,7 @@ You can remove a network connection from a dev center if you no longer want to u
 
    :::image type="content" source="./media/how-to-manage-network-connection/remove-network-connection.png" alt-text="Screenshot that shows the Remove button on the network connection page.":::
 
-1. Read the warning message, and then select **OK**.
+1. Review the warning message, and then select **OK**.
 
 The network connection is no longer available for use in the dev center.