Merge branch 'master' into patch-2

Author: kenwith

exchange/docs-conceptual/exchange-server/recipient-filters/recipientfilter-properties.md

@@ -314,6 +314,6 @@ The recipient properties that have been  *confirmed*  to work with the _Recipien
 
 ## For more information
 
-Exchange 2007 was the first version of Exchange that required OPATH filters instead of LDAP filters. For more information about converting LDAP filters to OPATH filters, see the Microsoft Exchange Team Blog article, [Need help converting your LDAP filters to OPATH?](https://go.microsoft.com/fwlink/p/?LinkId=88854).
+Exchange 2007 was the first version of Exchange that required OPATH filters instead of LDAP filters. For more information about converting LDAP filters to OPATH filters, see the Microsoft Exchange Team Blog article, [Need help converting your LDAP filters to OPATH?](https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Need-help-converting-your-LDAP-filters-to-OPATH/ba-p/595108).
 
 For more information about the syntax that can be used within OPATH filters, see [Exchange cmdlet syntax](../exchange-cmdlet-syntax.md).

exchange/exchange-ps/exchange/database-availability-groups/Set-DatabaseAvailabilityGroup.md

@@ -256,7 +256,7 @@ Accept wildcard characters: False
 ```
 
 ### -AutoDagBitlockerEnabled
-This parameter is reserved for internal Microsoft use.
+The AutoDagBitlockerEnabled parameter ensures that Disk Reclaimer handles spare disks correctly and encrypts them with BitLocker. If Bitlocker is used to encrypt database disks, set the value of this parameter to $true on all Mailbox servers in the DAG after they are all running Exchange 2013 CU13 or later, or Exchange 2016 CU2 or later.
 
 ```yaml
 Type: $true | $false

exchange/exchange-ps/exchange/devices/New-ActiveSyncMailboxPolicy.md

@@ -16,7 +16,7 @@ This cmdlet is available in on-premises Exchange and in the cloud-based service.
 
 Use the New-ActiveSyncMailboxPolicy cmdlet to create a Microsoft Mobile Device mailbox policy object.
 
-Note: In Exchange 2013 or later, use the New-MobileMailboxPolicy cmdlet instead. If you have scripts that use New-ActiveSyncMailboxPolicy, update them to use New-MobileMailboxPolicy.
+Note: In Exchange 2013 or later, use the New-MobileDeviceMailboxPolicy cmdlet instead. If you have scripts that use New-ActiveSyncMailboxPolicy, update them to use New-MobileDeviceMailboxPolicy.
 
 For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax (https://technet.microsoft.com/library/bb123552.aspx).
 

exchange/exchange-ps/exchange/encryption-and-certificates/Set-IRMConfiguration.md

@@ -136,11 +136,11 @@ Accept wildcard characters: False
 ### -ClientAccessServerEnabled
 This parameter is available only in on-premises Exchange.
 
-The ClientAccessServerEnabled parameter specifies whether to enable IRM for Outlook on the web (formerly known as Outlook Web App) and Exchange ActiveSync. Valid values are:
+The ClientAccessServerEnabled parameter specifies whether Exchange Client Access servers are allowed to authenticate clients that do not have direct access to AD RMS (for example, Outlook on the web, Exchange ActiveSync or remote Outlook Anywhere clients). Valid values are:
 
-- $true: IRM is enabled for Outlook on the web and Exchange ActiveSync. This is the default value. Note that enabling IRM in Outlook on the web requires additional configuration on AD RMS servers. For more information, see Information Rights Management in Outlook Web App (https://technet.microsoft.com/library/dd876891.aspx).
+- $true: Client Access servers are allowed to authenticate clients. This is the default value. Note that enabling IRM in Outlook on the web requires additional configuration on AD RMS servers. For more information, see Information Rights Management in Outlook Web App (https://technet.microsoft.com/library/dd876891.aspx).
 
-- $false: IRM is disabled for Outlook on the web and Exchange ActiveSync.
+- $false: Client Access servers aren't allowed to authenticate clients.
 
 ```yaml
 Type: $true | $false

exchange/exchange-ps/exchange/policy-and-compliance-content-search/New-ComplianceSearchAction.md

@@ -91,6 +91,8 @@ In on-premises Exchange, this cmdlet is available in the Mailbox Search role. By
 
 You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see Find the permissions required to run any Exchange cmdlet (https://technet.microsoft.com/library/mt432940.aspx).
 
+In Office 365, the account that you use to run this cmdlet must have a valid Office 365 license assigned.
+
 You need to be assigned permissions in the Office 365 Security & Compliance Center before you can use this cmdlet. For more information, see Permissions in Office 365 Security & Compliance Center (https://go.microsoft.com/fwlink/p/?LinkId=511920).
 
 ## EXAMPLES

exchange/exchange-ps/exchange/policy-and-compliance-dlp/New-DlpComplianceRule.md

@@ -457,6 +457,8 @@ The IncidentReportContent parameter specifies the content to include in the repo
 
 - Default
 
+- DetectionDetails
+
 - Detections
 
 - DocumentAuthor
@@ -465,6 +467,8 @@ The IncidentReportContent parameter specifies the content to include in the repo
 
 - MatchedItem
 
+- OriginalContent
+
 - RulesMatched
 
 - Service

sharepoint/sharepoint-ps/sharepoint-online/Register-SPOHubSite.md

@@ -27,7 +27,7 @@ Register-SPOHubSite
 Use this cmdlet to register an existing site collection as a hub site.
 
 > [!IMPORTANT]
-> A maximum of 100 hub sites may be created per tenant, with 'unlimited' number of site collections associated to a hub site.
+> A maximum of 2000 hub sites may be created per tenant, with 'unlimited' number of site collections associated to a hub site.
 
 > [!NOTE]
 > It can take up to 2-4 hours for the changes to appear.

sharepoint/sharepoint-ps/sharepoint-online/Remove-SPOOrgAssetsLibrary.md

@@ -20,19 +20,28 @@ Removes a library that was designated as a central location for organization ass
 ## SYNTAX
 
 ```powershell
-Remove-SPOOrgAssetsLibrary -LibraryUrl <String> -ShouldRemoveFromCdn <Boolean>
- [<CommonParameters>]
+Remove-SPOOrgAssetsLibrary [-LibraryUrl <String>] [-ListId <Guid>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
 
-The Remove-SPOOrgAssetsLibrary cmdlet removes a library that was designated as a central location for organization assets across the tenant. Once this cmdlet is run, this library will no longer be accessible from the "Your organization" tab in the file picker.
+The Remove-SPOOrgAssetsLibrary cmdlet removes a library that was designated as a central location for organization assets across the tenant. Once this cmdlet is run, this library will no longer be accessible from the "Your organization" tab in the file picker. When running the cmdlet, either the library URL or library ID (not both) needs to be indicated.
+
+Once the library is removed, CDN will still be enabled for this library. To disable CDN for this library, use Remove-SPOTenantCdnOrigin with the server relative URL (example: /sites/branding/assets).
 
 ## EXAMPLES
 
 ### Example 1
 
-This example removes https://contoso.sharepoint.com/sites/branding/Assets as a designated library. Assets within this library will no longer be accessible from the "Your organization" tab in the file picker.
+This example removes https://contoso.sharepoint.com/sites/branding/Assets as a designated library using the library ID. Assets within this library will no longer be accessible from the "Your organization" tab in the file picker.
+
+```powershell
+Remove-SPOOrgAssetsLibrary -ListId 58454454-6546-6466-9769-646464623988
+```
+
+### Example 2
+
+This example removes https://contoso.sharepoint.com/sites/branding/Assets as a designated library using the library URL. Assets within this library will no longer be accessible from the "Your organization" tab in the file picker.
 
 ```powershell
 Remove-SPOOrgAssetsLibrary -LibraryURL sites/branding/Assets
@@ -49,23 +58,23 @@ Type: String
 Parameter Sets: (All)
 Aliases:
 Applicable: SharePoint Online
-Required: True
+Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
-### -ShouldRemoveFromCdn
+### -ListId
 
-Remove CDN from the designated library.
+Indicates the library ID for the library to be removed as a central location for organization assets.
 
 ```yaml
-Type: Boolean
+Type: Guid
 Parameter Sets: (All)
 Aliases:
 Applicable: SharePoint Online
-Required: True
+Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False

sharepoint/sharepoint-ps/sharepoint-online/Set-SPOOrgAssetsLibrary.md

@@ -31,12 +31,20 @@ The Set-SPOOrgAssetsLibrary cmdlet updates information for a library that is des
 
 ### Example 1
 
-This example updates the thumbnail publicly displayed for the library to contosologo2.jpg.
+This example updates the thumbnail URL publicly displayed for the library to contosologo2.jpg.
 
 ```powershell
 Set-SPOOrgAssetsLibrary -LibraryURL sites/branding/Assets -ThumbnailURL https://contoso.sharepoint.com/sites/branding/Assets/contosologo2.jpg
 ```
 
+### Example 2
+
+This example removes the thumbnail URL that was previously set for the library.
+
+```powershell
+Set-SPOOrgAssetsLibrary -LibraryURL sites/branding/Assets -ThumbnailURL ""
+```
+
 ## PARAMETERS
 
 ### -LibraryUrl

sharepoint/sharepoint-ps/sharepoint-server/Set-SPSecurityTokenServiceConfig.md

@@ -96,8 +96,7 @@ This example updates the signing certificate of the SharePoint security token se
 
 ### --------------------EXAMPLE 2---------------------
 ```
-C:\PS>$stsCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 "c:\sts.pfx","a",20
-
+$stsCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 "c:\sts.pfx","a",20
 Set-SPSecurityTokenServiceConfig -ImportSigningCertificate $stsCert
 ```
 
@@ -107,7 +106,7 @@ This example imports the signing certificate for the SharePoint STS identity pro
 ## PARAMETERS
 
 ### -QueueSigningCertificateThumbprint
-{{ Fill QueueSigningCertificateThumbprint Description }}
+Sets the certificate with the provided thumbprint as the queued signing certificate.
 
 ```yaml
 Type: String
@@ -136,7 +135,7 @@ Accept wildcard characters: False
 ```
 
 ### -RevokeSigningCertificateThumbprint
-{{ Fill RevokeSigningCertificateThumbprint Description }}
+Revoke the signing certificate with the provided thumbprint.
 
 ```yaml
 Type: String
@@ -247,7 +246,7 @@ Accept wildcard characters: False
 
 ### -MaxLogonTokenCacheItems
 Specifies the maximum number of entries for the in-memory logon token cache.
-The default value is 10000 entries.
+The default value is 250 entries.
 
 The type must be a valid integer.
 
@@ -266,7 +265,7 @@ Accept wildcard characters: False
 
 ### -MaxServiceTokenCacheItems
 Specifies the maximum number of entries for the in-memory service token cache.
-The default value is 10000 entries.
+The default value is 250 entries.
 
 The type must be a valid integer.
 
@@ -284,7 +283,7 @@ Accept wildcard characters: False
 ```
 
 ### -QueueSigningCertificate
-{{ Fill QueueSigningCertificate Description }}
+Sets the provided certificate as the queued signing certificate.
 
 ```yaml
 Type: X509Certificate2
@@ -300,7 +299,7 @@ Accept wildcard characters: False
 ```
 
 ### -QueueSigningCertificateStoreName
-{{ Fill QueueSigningCertificateStoreName Description }}
+The store to search in when looking up a certificate to be set as the queued signing certificate by its thumbprint. Required if QueueSigningCertificateThumbprint was specified.
 
 ```yaml
 Type: String
@@ -316,7 +315,7 @@ Accept wildcard characters: False
 ```
 
 ### -RevokeSigningCertificate
-{{ Fill RevokeSigningCertificate Description }}
+Revokes the signing certificate that matches the provided certificate.
 
 ```yaml
 Type: X509Certificate2
@@ -332,7 +331,7 @@ Accept wildcard characters: False
 ```
 
 ### -RevokeSigningCertificateStoreName
-{{ Fill RevokeSigningCertificateStoreName Description }}
+The store to search when looking up a certificate to be revoked by its thumbprint. Required if the QueueSigningCertificateThumbprint was specified.
 
 ```yaml
 Type: String

sharepoint/sharepoint-ps/sharepoint-server/Set-SPSiteSubscriptionConfig.md

@@ -32,10 +32,10 @@ For permissions and the most current information about Windows PowerShell for Sh
 
 ### --------------------EXAMPLE---------------------
 ```
-Set-SPSiteSubscription https://contoso.com -FeatureSet 12345678-90ab-cdef-1234-567890abcdef
+Set-SPSiteSubscriptionConfig https://contoso.com -FeaturePack 12345678-90ab-cdef-1234-567890abcdef
 ```
 
-This example sets the Feature set of the entire site subscription that contains https://contoso.com with a Feature set GUID.
+This example sets the Feature set of the entire site subscription that contains https://contoso.com with a Feature pack GUID.
 
 
 ## PARAMETERS

skype/skype-ps/skype/Get-CsClientPolicy.md

@@ -120,8 +120,8 @@ Accept wildcard characters: False
 
 ### -Filter
 Enables you to use wildcard characters when indicating the policy (or policies) to be returned.
-For example, to return all the policies configured at the site scope use this syntax: -Filter "site:*".
-To return a collection of all the per-user policies, use this syntax: -Filter "tag:*".
+For example, to return all the policies configured at the site scope use this syntax: -Filter "site:\*".
+To return a collection of all the per-user policies, use this syntax: -Filter "tag:\*".
 
 ```yaml
 Type: String

skype/skype-ps/skype/Move-CsUser.md

@@ -20,7 +20,7 @@ Moves one or more user accounts enabled for Skype for Business Server to a new R
 ### (Default)
 
 ```
-Move-CsUser [-Identity] <UserIdParameter> [-Target] <Fqdn> [-Credential <PSCredential>] [-MoveToTeams] [-HostedMigrationOverrideUrl <String>] [-BypassEnterpriseVoiceCheck] [-BypassAudioConferencingCheck] [-TenantAdminUserName] [-MoveConferenceData] [-Confirm] [-Force] [-PassThru] [-WhatIf]  [<CommonParameters>]
+Move-CsUser [-Identity] <UserIdParameter> [-Target] <Fqdn> [-Credential <PSCredential>] [-MoveToTeams] [-HostedMigrationOverrideUrl <String>] [-UseOAuth] [-BypassEnterpriseVoiceCheck] [-BypassAudioConferencingCheck] [-TenantAdminUserName] [-MoveConferenceData] [-Confirm] [-Force] [-PassThru] [-WhatIf]  [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -46,7 +46,10 @@ When moving a user to or from Office 365 (either Skype for Business Online or Te
 - Contacts are moved in all cases, unless -force is specified.
 
 > [!NOTE]
-> The MoveToTeams switch is only available on Skype for Business Server 2019 and CU8 for Skype for Business Server 2015. Organizations using other versions of Skype for Business Server must first move the user to Skype for Business Online, and then apply TeamsUpgradePolicy.
+> <ul><li>The MoveToTeams switch is only available on Skype for Business Server 2019 and CU8 for Skype for Business Server 2015. Organizations using other versions of Skype for Business Server must first move the user to Skype for Business Online, and then apply TeamsUpgradePolicy.</li><li>If you are using Skype for Business Server 2015 with CU8 or later, we recommend you pass the `-UseOAuth` switch, which ensures the on-premises code authenticates using OAuth, instead of Legacy LiveID authentication. In Skype for Business Server 2019 and later versions, OAuth is always used hence the switch is not relevant on those versions.</li></ul>
+
+
+
 
 ## EXAMPLES
 
@@ -178,6 +181,22 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -UseOAuth
+
+If specified, authentication between on-premises and the host migration service is based on OAuth protocol. Otherwise, authentication is based on legacy LiveID authentication.  This parameter is only available with Skype for Business Server 2015 with CU8 or later. In Skype for Business Server 2019 and later versions, OAuth is always used hence the switch is not relevant on those versions.
+
+```yaml
+Type: SwitchParameter
+Parameter Sets: (All)
+Aliases:
+Applicable: Skype for Business Server 2015
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -BypassAudioConferencingCheck
 
 By default, if the on-premise user is configured for dial in conferencing, moving the user to Office 365 will provision the user for Audio Conferencing, for an additional license is required.  If you want to move such a user to Office 365 but do not want to configure them for Audio Conferencing, specify this switch to by-pass the license check. This parameter is only available with Skype for Business Server 2019 and CU8 for Skype for Business Server 2015.

teams/teams-ps/teams/Get-TeamPolicyPackage.md renamed to teams/teams-ps/teams/Get-CsPolicyPackage.md

@@ -2,7 +2,7 @@
 external help file: Microsoft.TeamsCmdlets.PowerShell.Custom.dll-Help.xml
 Module Name: MicrosoftTeams
 applicable: Microsoft Teams
-title: Get-TeamPolicyPackage
+title: Get-CsPolicyPackage
 author: etgottli
 ms.author: etgottli
 ms.reviewer: icchan
@@ -11,7 +11,7 @@ online version:
 schema: 2.0.0
 ---
 
-# Get-TeamPolicyPackage
+# Get-CsPolicyPackage
 
 ## SYNOPSIS
 
@@ -20,7 +20,7 @@ This cmdlet supports retrieving all the policy packages available on a tenant.
 ## SYNTAX
 
 ```
-Get-TeamPolicyPackage [[-Identity] <String>] [<CommonParameters>]
+Get-CsPolicyPackage [[-Identity] <String>] [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -32,14 +32,14 @@ For more information on policy packages, please review https://docs.microsoft.co
 
 ### Example 1
 ```powershell
-PS C:\> Get-TeamPolicyPackage
+PS C:\> Get-CsPolicyPackage
 ```
 
 Returns all policy packages available on the tenant.
 
 ### Example 2
 ```powershell
-PS C:\> Get-TeamPolicyPackage -Identity Education_PrimaryStudent
+PS C:\> Get-CsPolicyPackage -Identity Education_PrimaryStudent
 ```
 
 Returns the definition of the Education_PrimaryStudent policy package, including the policies applied with the package.
@@ -48,7 +48,7 @@ Returns the definition of the Education_PrimaryStudent policy package, including
 
 ### -Identity
 
-The name of a specific policy package. All possible policy package names can be found by running Get-TeamPolicyPackage.
+The name of a specific policy package. All possible policy package names can be found by running Get-CsPolicyPackage.
 
 ```yaml
 Type: String
@@ -73,8 +73,8 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 
 ## RELATED LINKS
 
-[Get-TeamUserPolicyPackageRecommendation](Get-TeamUserPolicyPackageRecommendation.md)
+[Get-CsUserPolicyPackageRecommendation](Get-CsUserPolicyPackageRecommendation.md)
 
-[Get-TeamUserPolicyPackage](Get-TeamUserPolicyPackage.md)
+[Get-CsUserPolicyPackage](Get-CsUserPolicyPackage.md)
 
-[Grant-TeamUserPolicyPackage](Grant-TeamUserPolicyPackage.md)
+[Grant-CsUserPolicyPackage](Grant-CsUserPolicyPackage.md)