diff --git a/windows/security/identity-protection/access-control/active-directory-security-groups.md b/windows/security/identity-protection/access-control/active-directory-security-groups.md
index 3285407800..5ac3dcc651 100644
--- a/windows/security/identity-protection/access-control/active-directory-security-groups.md
+++ b/windows/security/identity-protection/access-control/active-directory-security-groups.md
@@ -2436,8 +2436,8 @@ Members of the Performance Log Users group can manage performance counters, logs
     > If you are a member of the Performance Log Users group, you must configure Data Collector Sets that you create to run under your credentials.
 
     > [!NOTE]
-    > Windows Server 2016 or later, you cannot create Data Collector Sets by a member of the Performance Log Users group.
-    > If a member of the Performance Log Users group tries to create Data Collector Sets, they cannot complete creation because of Access Denied. 
+    > In Windows Server 2016 or later, Data Collector Sets cannot be created by a member of the Performance Log Users group.
+    > If a member of the Performance Log Users group tries to create Data Collector Sets, they cannot complete creation because access will be denied. 
 
 -   Cannot use the Windows Kernel Trace event provider in Data Collector Sets.