Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into release-notes-plus

Author: batamig

.openpublishing.redirection.azure-monitor.json

@@ -19,6 +19,11 @@
             "source_path_from_root": "/articles/azure-monitor/insights/service-bus-insights.md",
             "redirect_url": "/azure/service-bus-messaging/service-bus-insights",
             "redirect_document_id": false
+        },
+        {
+            "source_path_from_root": "/articles/azure-monitor/agents/data-collection-rule-overview.md",
+            "redirect_url": "/azure/azure-monitor/essentials/data-collection-rule-overview",
+            "redirect_document_id": false
         }
     ]
 }

.openpublishing.redirection.json

@@ -19830,9 +19830,9 @@
       "redirect_document_id": false
     },
     {
-      "source_path_from_root": "/articles/machine-learning/service/how-to-deploy-app-service.md",
-      "redirect_url": "/azure/machine-learning/how-to-deploy-app-service",
-      "redirect_document_id": true
+      "source_path_from_root": "/articles/machine-learning/how-to-deploy-app-service.md",
+      "redirect_url": "/azure/machine-learning/how-to-deploy-managed-online-endpoints",
+      "redirect_document_id": false
     },
     {
       "source_path_from_root": "/articles/machine-learning/service/how-to-deploy-azure-container-instance.md",
@@ -19859,6 +19859,11 @@
       "redirect_url": "/azure/machine-learning/how-to-deploy-and-where",
       "redirect_document_id": false
     },
+    {
+      "source_path_from_root": "/articles/machine-learning/how-to-homomorphic-encryption-seal.md",
+      "redirect_url": "/azure/machine-learning/",
+      "redirect_document_id": false
+    },
     {
       "source_path_from_root": "/articles/machine-learning/service/concept-accelerate-with-fpgas.md",
       "redirect_url": "/azure/machine-learning/how-to-deploy-fpga-web-service",
@@ -19870,9 +19875,14 @@
       "redirect_document_id": true
     },
     {
-      "source_path_from_root": "/articles/machine-learning/service/how-to-deploy-functions.md",
-      "redirect_url": "/azure/machine-learning/how-to-deploy-functions",
-      "redirect_document_id": true
+      "source_path_from_root": "/articles/machine-learning/how-to-deploy-functions.md",
+      "redirect_url": "/azure/machine-learning/how-to-deploy-managed-online-endpoints",
+      "redirect_document_id": false
+    },
+    {
+      "source_path_from_root": "/articles/machine-learning/how-to-deploy-no-code-deployment.md",
+      "redirect_url": "/azure/machine-learning/how-to-deploy-mlflow-models-online-endpoints",
+      "redirect_document_id": false
     },
     {
       "source_path_from_root": "/articles/machine-learning/service/concept-accelerate-inferencing-with-gpus.md",
@@ -39484,11 +39494,6 @@
       "redirect_url": "/azure/azure-monitor/agents/data-sources-windows-events",
       "redirect_document_id": false
     },
-    {
-      "source_path_from_root": "/articles/azure-monitor/platform/data-collection-rule-overview.md",
-      "redirect_url": "/azure/azure-monitor/agents/data-collection-rule-overview",
-      "redirect_document_id": false
-    },
     {
       "source_path_from_root": "/articles/azure-monitor/platform/data-sources.md",
       "redirect_url": "/azure/azure-monitor/agents/data-sources",

.openpublishing.redirection.media-services.json

@@ -629,6 +629,11 @@
             "source_path_from_root": "/articles/media-services/latest/asset-create-asset-upload-portal-quickstart.md",
             "redirect_url": "/azure/media-services/latest/video-on-demand-simple-portal-quickstart",
             "redirect_document_id": true
+          },
+          {
+            "source_path_from_root": "/articles/media-services/latest/architecture-design-multi-drm-system.md",
+            "redirect_url": "/azure/media-services/latest/drm-content-protection-concept",
+            "redirect_document_id": true
           },     
         {
             "source_path_from_root": "/articles/media-services/latest/latest/questions-collection.md",

articles/active-directory-b2c/partner-dynamics-365-fraud-protection.md

@@ -168,7 +168,7 @@ In the provided [custom policies](https://github.com/azure-ad-b2c/partner-integr
 
 For additional information, review the following articles:
 
-- [Microsoft DFP samples](https://github.com/Microsoft/Dynamics-365-Fraud-Protection-Samples)
+- [Microsoft DFP samples](https://github.com/azure-ad-b2c/partner-integrations/tree/master/samples/Dynamics-Fraud-Protection)
 
 - [Custom policies in Azure AD B2C](./custom-policy-overview.md)
 

articles/active-directory-b2c/partner-f5.md

@@ -379,7 +379,7 @@ The next attempt at connecting to the application should take you straight to th
 
 Failure to access the protected application could be down to any number of potential factors, including a misconfiguration.
 
-- BIG-IP logs are a great source of information for isolating all authentication and SSO issues. If troubleshooting you should increase the log verbosity level.
+BIG-IP logs are a great source of information for isolating all authentication and SSO issues. If troubleshooting you should increase the log verbosity level.
 
   1. Go to **Access Policy** > **Overview** > **Event Logs** > **Settings**.
 
@@ -424,6 +424,6 @@ Exact root cause is still being investigated by F5 engineering, but issue appear
 
 You should now see the Key (JWT) field populated with the key ID (KID) of the token signing certificate provided through the OpenID URI metadata.
 
-  5. Finally, select the yellow **Apply Access Policy** option in the top left-hand corner, located next to the F5 logo. Apply those settings and select **Apply** again to refresh the access profile list.
+  5. Finally, select the yellow **Apply Access Policy** option in the top left-hand corner, located next to the F5 logo. Then select **Apply** again to refresh the access profile list.
 
 See F5’s guidance for more [OAuth client and resource server troubleshooting tips](https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-sso-13-0-0/37.html#GUID-774384BC-CF63-469D-A589-1595D0DDFBA2)

articles/active-directory-domain-services/faqs.yml

@@ -85,9 +85,9 @@ sections:
           No. A managed domain resource forest supports up to five one-way outbound forest trusts to on-premises forests. 
 
       - question: |
-          Why can't I see the **Trusts** menu?
+          Why can't I see the Trusts menu?
         answer: |
-          If you don't see the **Trusts** menu option, check under **Properties** for the *Forest type*. Only *Resource* forests can create trusts. If the forest type is *User*, you can't create trusts. There's currently no way to change the forest type of a managed domain. You need to delete and recreate the managed domain as a resource forest. 
+          If you don't see the **Trusts** menu option, check under **Properties** for the **Forest type**. Only **Resource** forests can create trusts. If the forest type is **User**, you can't create trusts. There's currently no way to change the forest type of a managed domain. You need to delete and recreate the managed domain as a resource forest. 
 
       - question: |
           Can I move a managed domain?

articles/active-directory/authentication/how-to-mfa-microsoft-managed.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: conceptual
-ms.date: 11/11/2021
+ms.date: 02/22/2022
 
 ms.author: justinha
 author: mjsantani
@@ -26,7 +26,7 @@ The option to let Azure AD manage the setting is a convenient way for an organiz
 
 ## Settings that can be Microsoft managed
 
-The following table lists settings that can be set to Microsoft managed and whether it is enabled or disabled. 
+The following table list each setting that can be set to Microsoft managed and whether that setting is enabled or disabled by default. 
 
 | Setting                                                                                                                         | Configuration |
 |---------------------------------------------------------------------------------------------------------------------------------|---------------|

articles/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: how-to
-ms.date: 02/22/2021
+ms.date: 02/22/2022
 
 ms.author: justinha
 author: justinha
@@ -25,7 +25,7 @@ Azure AD can issue Kerberos ticket-granting tickets (TGTs) for one or more of yo
 
 An Azure AD Kerberos Server object is created in your on-premises Active Directory instance and then securely published to Azure Active Directory. The object isn't associated with any physical servers. It's simply a resource that can be used by Azure Active Directory to generate Kerberos TGTs for your Active Directory domain.
 
-:::image type="Image" source="./media/howto-authentication-passwordless-on-premises/fido2-ticket-granting-ticket-exchange-process.png" alt-text="Diagram showing how to get a T G T from Azure AD and Active Directory Domain Services." lightbox="./media/howto-authentication-passwordless-on-premises/fido2-ticket-granting-ticket-exchange-process.png":::
+:::image type="Image" source="./media/howto-authentication-passwordless-on-premises/fido2-ticket-granting-ticket-exchange-process.png" alt-text="Diagram showing how to get a TGT from Azure AD and Active Directory Domain Services." lightbox="./media/howto-authentication-passwordless-on-premises/fido2-ticket-granting-ticket-exchange-process.png":::
 
 1. A user signs in to a Windows 10 device with an FIDO2 security key and authenticates to Azure AD.
 1. Azure AD checks the directory for a Kerberos Server key that matches the user's on-premises Active Directory domain.
@@ -107,7 +107,7 @@ Run the following steps in each domain and forest in your organization that cont
    $domain = "contoso.corp.com"
 
    # Enter an Azure Active Directory global administrator username and password.
-   $cloudCred = Get-Credential -Message 'An Active Directory user who is a member of the Domain Admins group for a domain and a member of the Enterprise Admins group for a forest.'
+   $cloudCred = Get-Credential -Message 'An Active Directory user who is a member of the Global Administrators group for Azure AD.'
 
    # Enter a domain administrator username and password.
    $domainCred = Get-Credential -Message 'An Active Directory user who is a member of the Domain Admins group.'

articles/active-directory/authentication/howto-password-ban-bad-on-premises-faq.yml

@@ -6,8 +6,8 @@ metadata:
   services: active-directory
   ms.service: active-directory
   ms.subservice: authentication
-  ms.topic: faq
-  ms.date: 11/21/2019
+  ms.topic: how-to
+  ms.date: 02/16/2022
   ms.author: justinha
   author: justinha
   manager: karenhoran
@@ -31,7 +31,7 @@ sections:
           
           ### Is on-premises Azure AD Password Protection supported in non-public clouds?
           
-          On-premises Azure AD Password Protection is supported in the public cloud and the Arlington cloud. No date has been announced for availability in other clouds.
+          On-premises Azure AD Password Protection is supported in both Azure Global and Azure Government clouds.
           
           The Azure AD portal does allow modification of the on-premises-specific "Password protection for Windows Server Active Directory" configuration even in non-supported clouds; such changes will be persisted but otherwise will never take effect. Registration of on-premises proxy agents or forests is unsupported in non-supported clouds, and any such registration attempts will always fail.
           

articles/active-directory/authentication/troubleshoot-sspr-writeback.md

@@ -6,7 +6,7 @@ services: active-directory
 ms.service: active-directory
 ms.subservice: authentication
 ms.topic: troubleshooting
-ms.date: 08/25/2021
+ms.date: 02/22/2022
 
 ms.author: justinha
 author: justinha
@@ -17,7 +17,7 @@ ms.collection: M365-identity-device-management
 ---
 # Troubleshoot self-service password reset writeback in Azure Active Directory
 
-Azure Active Directory (Azure AD) self-service password reset (SSPR) lets users reset their passwords in the cloud. Password writeback is a feature enabled with [Azure AD Connect](../hybrid/whatis-hybrid-identity.md) that allows password changes in the cloud to be written back to an existing on-premises directory in real time.
+Azure Active Directory (Azure AD) self-service password reset (SSPR) lets users reset their passwords in the cloud. Password writeback is a feature enabled with [Azure AD Connect](../hybrid/whatis-hybrid-identity.md) or [cloud sync](tutorial-enable-cloud-sync-sspr-writeback.md) that allows password changes in the cloud to be written back to an existing on-premises directory in real time.
 
 If you have problems with SSPR writeback, the following troubleshooting steps and common errors may help. If you can't find the answer to your problem, [our support teams are always available](#contact-microsoft-support) to assist you further.