Merge pull request #284492 from dknappettmsft/avd-unidirectional-clipboard-updates

AVD clarified clipboard redirection

Author: Stacyrch140

articles/virtual-desktop/TOC.yml

@@ -464,11 +464,8 @@
       - name: Watermarking
         displayName: security
         href: watermarking.md
-      - name: Configure clipboard transfer direction
-        displayName: security
-        href: clipboard-transfer-direction-data-types.md
-      - name: Configure forensic evidence
-        displayName: security, purview
+      - name: Onboard to Purview forensic evidence
+        displayName: security, purview insider risk management
         href: purview-forensic-evidence.md
   - name: Connect
     items:
@@ -528,6 +525,9 @@
       - name: Clipboard
         displayName: devices, peripherals, redirections, copy, paste
         href: redirection-configure-clipboard.md
+      - name: Clipboard transfer direction and data types
+        displayName: security, unidirectional, copy, paste
+        href: clipboard-transfer-direction-data-types.md
       - name: Drives and storage
         displayName: devices, peripherals, redirections, usb, drives, storage, flash drive
         href: redirection-configure-drives-storage.md

articles/virtual-desktop/administrative-template.md

@@ -1,17 +1,17 @@
 ---
-title: Administrative template for Azure Virtual Desktop
-description: Learn how to use the administrative template (ADMX) for Azure Virtual Desktop with Intune or Group Policy to configure certain settings on your session hosts.
+title: Add the administrative template for Azure Virtual Desktop to Group Policy
+description: Learn how to add the administrative template (ADMX) for Azure Virtual Desktop to Group Policy to configure certain features.
 author: dknappettmsft
 ms.topic: how-to
-ms.date: 04/29/2024
+ms.date: 08/12/2024
 ms.author: daknappe
 ---
 
-# Use the administrative template for Azure Virtual Desktop
+# Add the administrative template for Azure Virtual Desktop to Group Policy
 
-We've created an administrative template for Azure Virtual Desktop to configure some features of Azure Virtual Desktop. You can use the template with:
+We've created an administrative template for Azure Virtual Desktop to configure some features of Azure Virtual Desktop. The template is available for:
 
-- Intune, which enables you to centrally configure session hosts that are enrolled in Intune and joined to Microsoft Entra ID or Microsoft Entra hybrid joined.
+- Microsoft Intune, which enables you to centrally configure session hosts that are enrolled in Intune and joined to Microsoft Entra ID or Microsoft Entra hybrid joined. The administrative template is available in the Intune settings catalog without any further configuration.
 
 - Group Policy with Active Directory (AD), which enables you to centrally configure session hosts that are joined to an AD domain.
 
@@ -28,12 +28,6 @@ You can configure the following features with the administrative template:
 
 Before you can configure the template settings, you need to meet the following prerequisites. Select a tab for your scenario.
 
-# [Intune](#tab/intune)
-
-For Intune device configuration profile, you need the following permission:
-
-- Assigned the [**Policy and Profile manager**](/mem/intune/fundamentals/role-based-access-control-reference#policy-and-profile-manager) built-in role-based access control (RBAC) role.
-
 # [Group Policy (AD)](#tab/group-policy-domain)
 
 For Group Policy in an Active Directory (AD) domain, you need the following permission:
@@ -48,60 +42,60 @@ For local Group Policy on a session host, you need the following permission:
 
 ---
 
-## Configure the administrative template
-
-To configure the administrative template, select a tab for your scenario and follow these steps.
-
-# [Intune](#tab/intune)
-
-1. Sign in to the [Microsoft Intune admin center](https://endpoint.microsoft.com/).
+## Add the administrative template to Group Policy
 
-1. [Create or edit a configuration profile](/mem/intune/configuration/administrative-templates-windows) for **Windows 10 and later** devices, with the **Settings catalog** profile type.
-
-1. In the settings picker, browse to **Administrative templates** > **Windows Components** > **Remote Desktop Services** > **Remote Desktop Session Host** > **Azure Virtual Desktop**. You should see settings in the Azure Virtual Desktop subcategory available for you to configure, as shown in the following screenshot:
-
-   :::image type="content" source="media/administrative-template/azure-virtual-desktop-intune-settings-catalog.png" alt-text="A screenshot of the Intune admin center showing Azure Virtual Desktop settings." lightbox="media/administrative-template/azure-virtual-desktop-intune-settings-catalog.png":::
-
-1. Once you've configured settings, apply the configuration profile to your session hosts, then restart your session hosts for the settings to take effect.
+To add the administrative template to Group Policy, select a tab for your scenario and follow these steps.
 
 # [Group Policy (AD)](#tab/group-policy-domain)
 
-> [!NOTE]
-> These steps assume you're using the [Central Store for Group Policy](/troubleshoot/windows-client/group-policy/create-and-manage-central-store).
+1. Download the latest [Azure Virtual Desktop administrative template files](https://aka.ms/avdgpo) and extract the contents of the `.cab` file and `.zip` archive.
 
-1. Download the latest [Azure Virtual Desktop administrative template files](https://aka.ms/avdgpo) and extract the contents of the .cab file and .zip archive.
+1. On your domain controllers, copy and paste the following files to the relevant location, depending if you store Group Policy templates in the local `PolicyDefinitions` folder or the [Group Policy Central Store](/troubleshoot/windows-client/group-policy/create-and-manage-central-store). Replace `contoso.com` with your domain name, and `en-US` if you're using a different language.
 
-1. Copy and paste the **terminalserver-avd.admx** file to the Group Policy Central Store for your domain, for example `\\contoso.com\SYSVOL\contoso.com\Policies\PolicyDefinitions`, where *contoso.com* is your domain name. Then copy the **terminalserver-avd.adml** file to the `en-us` subfolder.
+   - **Filename**: `terminalserver-avd.admx`
+       - **Local location**: `C:\Windows\PolicyDefinitions\`
+       - **Central Store**: `\\contoso.com\SYSVOL\contoso.com\Policies\PolicyDefinitions`
 
-1. Open the **Group Policy Management Console (GPMC)** and create or edit a policy that targets your session hosts.
+   - **Filename**: `en-US\terminalserver-avd.adml`
+       - **Local location**: `C:\Windows\PolicyDefinitions\en-US\`
+       - **Central Store**: `\\contoso.com\SYSVOL\contoso.com\Policies\PolicyDefinitions\en-US`
+
+1. On a device you use to manage Group Policy, open the **Group Policy Management Console (GPMC)** and create or edit a policy that targets your session hosts.
 
 1. To verify that the Azure Virtual Desktop administrative template is available, browse to **Computer Configuration** > **Policies** > **Administrative Templates** > **Windows Components** > **Remote Desktop Services** > **Remote Desktop Session Host** > **Azure Virtual Desktop**. You should see policy settings for Azure Virtual Desktop available for you to configure, as shown in the following screenshot:
 
    :::image type="content" source="media/administrative-template/azure-virtual-desktop-gpo.png" alt-text="A screenshot of the Group Policy Management Editor showing Azure Virtual Desktop policy settings." lightbox="media/administrative-template/azure-virtual-desktop-gpo.png":::
 
-1. Once you've configured settings, ensure the policy is applied to your session hosts, then refresh Group Policy on the session hosts or restart them for the settings to take effect.
+1. Refer to the feature you want to configure for detailed instructions on how to configure the settings:
+
+   - [Graphics related data logging](connection-latency.md#connection-graphics-data-preview)
+   - [RDP Shortpath for managed networks](rdp-shortpath.md?tabs=managed-networks)
+   - [Screen capture protection](screen-capture-protection.md)
+   - [Watermarking](watermarking.md)
 
 # [Local Group Policy](#tab/local-group-policy)
 
-1. Download the latest [Azure Virtual Desktop administrative template files](https://aka.ms/avdgpo) and extract the contents of the .cab file and .zip archive.
+1. Download the latest [Azure Virtual Desktop administrative template files](https://aka.ms/avdgpo) and extract the contents of the `.cab` file and `.zip` archive.
 
-1. Copy and paste the **terminalserver-avd.admx** file to the PolicyDefinitions folder at `%windir%\PolicyDefinitions`. Then copy the **terminalserver-avd.adml** file to the `en-us` subfolder.
+1. On each session host, copy and paste the following files to the relevant location. Replace `en-US` if you're using a different language.
 
-1. Open the **Local Group Policy Editor** console.
+   - **Filename**: `terminalserver-avd.admx`
+       - **Local location**: `C:\Windows\PolicyDefinitions\`
 
-1. To verify that the Azure Virtual Desktop administrative template is available, browse to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Remote Desktop Services** > **Remote Desktop Session Host** > **Azure Virtual Desktop**. You should see policy settings for Azure Virtual Desktop available for you to configure, as shown in the following screenshot:
+   - **Filename**: `en-US\terminalserver-avd.adml`
+       - **Local location**: `C:\Windows\PolicyDefinitions\en-US\`
 
-   :::image type="content" source="media/administrative-template/azure-virtual-desktop-gpo.png" alt-text="Screenshot of the Local Group Policy Editor showing Azure Virtual Desktop policy settings." lightbox="media/administrative-template/azure-virtual-desktop-gpo.png":::
+1. Open the **Local Group Policy Editor** console on a session host.
 
-1. Once you've configured settings, ensure the policy is applied to your session hosts, then refresh Group Policy on the session hosts or restart them for the settings to take effect.
+1. To verify that the Azure Virtual Desktop administrative template is available, browse to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Remote Desktop Services** > **Remote Desktop Session Host** > **Azure Virtual Desktop**. You should see policy settings for Azure Virtual Desktop available for you to configure, as shown in the following screenshot:
 
----
+   :::image type="content" source="media/administrative-template/azure-virtual-desktop-gpo.png" alt-text="Screenshot of the Local Group Policy Editor showing Azure Virtual Desktop policy settings." lightbox="media/administrative-template/azure-virtual-desktop-gpo.png":::
 
-## Related content
+1. Refer to the feature you want to configure for detailed instructions on how to configure the settings:
 
-Learn how to use the administrative template with the following features:
+   - [Graphics related data logging](connection-latency.md#connection-graphics-data-preview)
+   - [RDP Shortpath for managed networks](rdp-shortpath.md?tabs=managed-networks)
+   - [Screen capture protection](screen-capture-protection.md)
+   - [Watermarking](watermarking.md)
 
-- [Graphics related data logging](connection-latency.md#connection-graphics-data-preview)
-- [Screen capture protection](screen-capture-protection.md)
-- [RDP Shortpath for managed networks](rdp-shortpath.md?tabs=managed-networks)
-- [Watermarking](watermarking.md)
+---