diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md
index d501140113..7e64879acd 100644
--- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md
+++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md
@@ -254,7 +254,7 @@ Windows Hello for Business cloud Kerberos trust looks for a writeable DC to exch
 
 Windows Hello for Business cloud Kerberos trust requires line of sight to a domain controller for some scenarios:
 - The first sign-in or unlock with Windows Hello for Business after provisioning
-- When attempting to access an on-premises resource on a Hybrid Azure AD joined
+- When attempting to access an on-premises resource from a Hybrid Azure AD joined device
 
 ### Can I use RDP/VDI with Windows Hello for Business cloud Kerberos trust?