diff --git a/windows/security/information-protection/bitlocker/bitlocker-deployment-comparison.md b/windows/security/information-protection/bitlocker/bitlocker-deployment-comparison.md
index d3e5e2f766..f4d29550e4 100644
--- a/windows/security/information-protection/bitlocker/bitlocker-deployment-comparison.md
+++ b/windows/security/information-protection/bitlocker/bitlocker-deployment-comparison.md
@@ -35,32 +35,32 @@ This article depicts the BitLocker deployment comparison chart.
 |Supported domain-joined status     |     Microsoft Azure Active Directory (Azure AD) joined, hybrid Azure AD joined    |   Active Directory joined, hybrid Azure AD joined      |     Active Directory joined    |
 |Permissions required to manage policies     |    Endpoint security manager or custom     |   Full administrator or custom      |     Domain Admin or Delegated GPO access    |
 |Cloud or on premises      |     Cloud    |  On premises     |    On premises     |
-|Server components required?      |         |  :::image type="content" source="images/dot_new.png" alt-text="dots":::    |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
+|Server components required?      |         |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
 |Additional agent required?     |     No (device enrollment only)    |   Configuration Manager client      |     MBAM client    |
 |Administrative plane     | Microsoft Endpoint Manager admin center        |    Configuration Manager console     |    Group Policy Management Console and MBAM sites     |
-|Administrative portal installation required     |         |   :::image type="content" source="images/dot1.png" alt-text="dot":::    |    :::image type="content" source="images/dot1.png" alt-text="dot":::     |
-|Compliance reporting capabilities     |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Force encryption     |    :::image type="content" source="images/dot1.png" alt-text="dot":::   |  :::image type="content" source="images/dot1.png" alt-text="dot":::   | :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Encryption for storage cards (mobile)      |   :::image type="content" source="images/dot1.png" alt-text="dot":::     |  :::image type="content" source="images/dot1.png" alt-text="dot":::      |         |
-|Allow recovery password      |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |   :::image type="content" source="images/dot1.png" alt-text="dot":::    |    :::image type="content" source="images/dot1.png" alt-text="dot":::     |
-|Manage startup authentication     |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |     :::image type="content" source="images/dot1.png" alt-text="dot":::    |     :::image type="content" source="images/dot1.png" alt-text="dot":::    |
-|Select cipher strength and algorithms for fixed drives      |    :::image type="content" source="images/dot1.png" alt-text="dot":::     | :::image type="content" source="images/dot1.png" alt-text="dot":::      |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |
-|Select cipher strength and algorithms for removable drives     |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Select cipher strength and algorithms for operating environment drives     |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |   :::image type="content" source="images/dot1.png" alt-text="dot":::    |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |
+|Administrative portal installation required     |         |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |
+|Compliance reporting capabilities     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Force encryption     |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::   |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::   | :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Encryption for storage cards (mobile)      |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |         |
+|Allow recovery password      |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |
+|Manage startup authentication     |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |     :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |     :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |
+|Select cipher strength and algorithms for fixed drives      |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::     | :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |
+|Select cipher strength and algorithms for removable drives     |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Select cipher strength and algorithms for operating environment drives     |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |
 |Standard recovery password storage location     |     Azure AD or 
 Active Directory    |     Configuration Manager site database    |    MBAM database     |
 |Store recovery password for operating system and fixed drives to Azure AD or Active Directory     |    Yes (Active Directory and Azure AD)     | Yes (Active Directory only)      |   Yes (Active Directory only)      |
-|Customize preboot message and recovery link     | :::image type="content" source="images/dot1.png" alt-text="dot":::         | :::image type="content" source="images/dot1.png" alt-text="dot":::        |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |
-|Allow/deny key file creation     |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::     |   :::image type="content" source="images/dot1.png" alt-text="dot":::      |
-|Deny Write permission to unprotected drives     |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Can be administered outside company network     |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::     |         |
-|Support for organization unique IDs     |         |      :::image type="content" source="images/dot1.png" alt-text="dot":::   |     :::image type="content" source="images/dot1.png" alt-text="dot":::    |
-|Self-service recovery      |    Yes (through Azure AD or Company Portal app)     |   :::image type="content" source="images/dot1.png" alt-text="dot":::    |    :::image type="content" source="images/dot1.png" alt-text="dot":::     |
-|Recovery password rotation for fixed and operating environment drives     |   Yes (Windows 10, version 1909 and later)     |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Wait to complete encryption until recovery information is backed up to Azure AD      |     :::image type="content" source="images/dot1.png" alt-text="dot":::    |       |        |
-|Wait to complete encryption until recovery information is backed up to Active Directory      |         |  :::image type="content" source="images/dot1.png" alt-text="dot":::     |    :::image type="content" source="images/dot1.png" alt-text="dot":::     |
-|Allow or deny Data Recovery Agent     |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Unlock a volume using certificate with custom object identifier     |         |   :::image type="content" source="images/dot1.png" alt-text="dot":::    |     :::image type="content" source="images/dot1.png" alt-text="dot":::    |
-|Prevent memory overwrite on restart     |         |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |  :::image type="content" source="images/dot1.png" alt-text="dot":::       |
-|Configure custom Trusted Platform Module Platform Configuration Register profiles     |         |       | :::image type="content" source="images/dot1.png" alt-text="dot":::        |
-|Manage auto-unlock functionality     |         |    :::image type="content" source="images/dot1.png" alt-text="dot":::     | :::image type="content" source="images/dot1.png" alt-text="dot":::        |
+|Customize preboot message and recovery link     | :::image type="content" source="images/yes-icon.png" alt-text="supported":::         | :::image type="content" source="images/yes-icon.png" alt-text="supported":::        |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |
+|Allow/deny key file creation     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::      |
+|Deny Write permission to unprotected drives     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Can be administered outside company network     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |         |
+|Support for organization unique IDs     |         |      :::image type="content" source="images/yes-icon.png" alt-text="supported":::   |     :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |
+|Self-service recovery      |    Yes (through Azure AD or Company Portal app)     |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |
+|Recovery password rotation for fixed and operating environment drives     |   Yes (Windows 10, version 1909 and later)     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Wait to complete encryption until recovery information is backed up to Azure AD      |     :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |       |        |
+|Wait to complete encryption until recovery information is backed up to Active Directory      |         |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::     |
+|Allow or deny Data Recovery Agent     |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Unlock a volume using certificate with custom object identifier     |         |   :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |     :::image type="content" source="images/yes-icon.png" alt-text="supported":::    |
+|Prevent memory overwrite on restart     |         |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |  :::image type="content" source="images/yes-icon.png" alt-text="supported":::       |
+|Configure custom Trusted Platform Module Platform Configuration Register profiles     |         |       | :::image type="content" source="images/yes-icon.png" alt-text="supported":::        |
+|Manage auto-unlock functionality     |         |    :::image type="content" source="images/yes-icon.png" alt-text="supported":::     | :::image type="content" source="images/yes-icon.png" alt-text="supported":::        |