Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-aadroles-roles-march

Author: rolyon

articles/active-directory/conditional-access/howto-conditional-access-policy-location.md

@@ -52,7 +52,7 @@ More information about the location condition in Conditional Access can be found
    1. Under **Include**, select **Selected locations**
    1. Select the blocked location you created for your organization.
    1. Click **Select**.
-1. Under **Access controls** > select **Block Access**, and select **Select**.
+1. Under **Access controls** > select **Block Access**, and click **Select**.
 1. Confirm your settings and set **Enable policy** to **Report-only**.
 1. Select **Create** to create to enable your policy.
 

articles/api-management/api-management-advanced-policies.md

@@ -900,7 +900,7 @@ This example shows how to return a 401 response if the authorization token is in
 
 This policy can be used in the following policy [sections](./api-management-howto-policies.md#sections) and [scopes](./api-management-howto-policies.md#scopes).
 
--   **Policy sections:** outbound, backend, on-error
+-   **Policy sections:** inbound, outbound, backend, on-error
 -   **Policy scopes:** all scopes
 
 ## <a name="set-variable"></a> Set variable

articles/azure-netapp-files/create-active-directory-connections.md

@@ -194,13 +194,6 @@ This setting is configured in the **Active Directory Connections** under **NetAp
 
         ![Active Directory AES encryption](../media/azure-netapp-files/active-directory-aes-encryption.png)
 
-
-    * <a name="encrypted-smb-connection"></a>**Encrypted SMB connection to domain controller** 
-
-        Select this checkbox to enable SMB encryption for communication between the Azure NetApp Files service and the domain controller (DC). When you enable this functionality, SMB3 protocol will be used for encrypted DC connections, because encryption is supported only by SMB3. SMB, Kerberos, and LDAP enabled volume creation will fail if the DC doesn't support the SMB3 protocol. 
-
-        ![Snapshot that shows the option for encrypted SMB connection to domain controller.](../media/azure-netapp-files/encrypted-smb-domain-controller.png) 
-
     * **LDAP Signing**   
         Select this checkbox to enable LDAP signing. This functionality enables secure LDAP lookups between the Azure NetApp Files service and the user-specified [Active Directory Domain Services domain controllers](/windows/win32/ad/active-directory-domain-services). For more information, see [ADV190023 | Microsoft Guidance for Enabling LDAP Channel Binding and LDAP Signing](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023).  
 

articles/azure-netapp-files/troubleshoot-volumes.md

@@ -12,19 +12,13 @@ ms.service: azure-netapp-files
 ms.workload: storage
 ms.tgt_pltfrm: na
 ms.topic: troubleshooting
-ms.date: 03/15/2022
+ms.date: 03/17/2022
 ms.author: anfdocs
 ---
 # Troubleshoot volume errors for Azure NetApp Files
 
 This article describes error messages and resolutions that can help you troubleshoot Azure NetApp Files volumes. 
 
-## General errors for volume creation or management 
-
-|     Error conditions    |     Resolutions    |
-|-|-|
-| Error during SMB, LDAP, or Kerberos volume creation: <br> `Failed to create the Active Directory machine account "PAKA-5755". Reason: SecD Error: no server available Details: Error: Machine account creation procedure failed [ 34] Loaded the preliminary configuration. [ 80] Created a machine account in the domain [ 81] Successfully connected to ip 10.193.169.25, port 445 using TCP [ 83] Unable to connect to LSA service on win-2bovaekb44b.harikrb.com (Error: RESULT_ERROR_SPINCLIENT_SOCKET_RECEIVE_ERROR) [ 83] No servers available for MS_LSA, vserver: 251, domain: http://contoso.com/. **[ 83] FAILURE: Unable to make a connection (LSA:CONTOSO.COM), ** result: 6940 [ 85] Could not find Windows SID 'S-1-5-21-192389270-1514950320-2551433173-512' [ 133] Deleted existing account 'CN=PAKA-5755,CN=Computers,DC=contoso,DC=com' .`  | SMB3 is disabled on the domain controller. <br> Enable SMB3 on the domain controller and then try creating the volume. See [How to detect, enable and disable SMBv1, SMBv2, and SMBv3 in Windows](/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3) for details about enabling SMB3. |
-
 ## Errors for SMB and dual-protocol volumes
 
 |     Error conditions    |     Resolutions    |

articles/azure-netapp-files/whats-new.md

@@ -12,7 +12,7 @@ ms.service: azure-netapp-files
 ms.workload: storage
 ms.tgt_pltfrm: na
 ms.topic: overview
-ms.date: 03/15/2022
+ms.date: 03/17/2022
 ms.author: anfdocs
 ---
 
@@ -22,10 +22,6 @@ Azure NetApp Files is updated regularly. This article provides a summary about t
 
 ## March 2022
 
-* [Encrypted SMB connection to domain controller](create-active-directory-connections.md#encrypted-smb-connection)
-
-    You can now enable SMB encryption for communication between the Azure NetApp Files service and the Active Directory Domain Services domain controller (DC). When you enable this functionality, SMB3 protocol will be used for encrypted DC connections.
-
 * Features that are now generally available (GA)   
 
     The following features are now GA. You no longer need to register the features before using them.   

articles/azure-resource-manager/management/tag-resources.md

@@ -12,6 +12,8 @@ You apply tags to your Azure resources, resource groups, and subscriptions to lo
 
 For recommendations on how to implement a tagging strategy, see [Resource naming and tagging decision guide](/azure/cloud-adoption-framework/decision-guides/resource-tagging/?toc=/azure/azure-resource-manager/management/toc.json).
 
+Resource tags support all cost-accruing services. You can use Azure Policy to ensure that cost-accruing services are provisioned with a tag by using one of the many different [tag policies](/azure/azure-resource-manager/management/tag-policies).  
+
 > [!WARNING]
 > Tags are stored as plain text. Never add sensitive values to tags. Sensitive values could be exposed through many methods, including cost reports, tag taxonomies, deployment histories, exported templates, and monitoring logs.
 

articles/azure-resource-manager/templates/copy-outputs.md

@@ -11,6 +11,9 @@ This article shows you how to create more than one value for an output in your A
 
 You can also use copy loop with [resources](copy-resources.md), [properties in a resource](copy-properties.md), and [variables](copy-variables.md).
 
+> [!TIP]
+> We recommend [Bicep](../bicep/overview.md) because it offers the same capabilities as ARM templates and the syntax is easier to use. To learn more, see [loops](../bicep/loops.md).
+
 ## Syntax
 
 Add the `copy` element to the output section of your template to return a number of items. The copy element has the following general format:
@@ -167,4 +170,4 @@ The preceding example returns an array with the following values:
   - [Property iteration in ARM templates](copy-properties.md)
   - [Variable iteration in ARM templates](copy-variables.md)
 - If you want to learn about the sections of a template, see [Understand the structure and syntax of ARM templates](./syntax.md).
-- To learn how to deploy your template, see [Deploy resources with ARM templates and Azure PowerShell](deploy-powershell.md).
+- To learn how to deploy your template, see [Deploy resources with ARM templates and Azure PowerShell](deploy-powershell.md).

articles/azure-resource-manager/templates/copy-properties.md

@@ -13,6 +13,9 @@ You can only use copy loop with top-level resources, even when applying copy loo
 
 You can also use copy loop with [resources](copy-resources.md), [variables](copy-variables.md), and [outputs](copy-outputs.md).
 
+> [!TIP]
+> We recommend [Bicep](../bicep/overview.md) because it offers the same capabilities as ARM templates and the syntax is easier to use. To learn more, see [loops](../bicep/loops.md).
+
 ## Syntax
 
 Add the `copy` element to the resources section of your template to set the number of items for a property. The copy element has the following general format:

articles/azure-resource-manager/templates/copy-resources.md

@@ -13,6 +13,10 @@ You can also use copy loop with [properties](copy-properties.md), [variables](co
 
 If you need to specify whether a resource is deployed at all, see [condition element](conditional-resource-deployment.md).
 
+
+> [!TIP]
+> We recommend [Bicep](../bicep/overview.md) because it offers the same capabilities as ARM templates and the syntax is easier to use. To learn more, see [loops](../bicep/loops.md).
+
 ## Syntax
 
 Add the `copy` element to the resources section of your template to deploy multiple instances of the resource. The `copy` element has the following general format:

articles/azure-resource-manager/templates/copy-variables.md

@@ -10,6 +10,9 @@ This article shows you how to create more than one value for a variable in your
 
 You can also use copy with [resources](copy-resources.md), [properties in a resource](copy-properties.md), and [outputs](copy-outputs.md).
 
+> [!TIP]
+> We recommend [Bicep](../bicep/overview.md) because it offers the same capabilities as ARM templates and the syntax is easier to use. To learn more, see [loops](../bicep/loops.md).
+
 ## Syntax
 
 The copy element has the following general format: