updates

windows/security/identity-protection/hello-for-business/hello-aad-join-cloud-only-deploy.md

@@ -62,7 +62,11 @@ If you don't use Intune in your organization, then you can disable Windows Hello
 
 Intune uses the following registry keys: **`HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\<Tenant-ID>\Device\Policies`**
 
-To look up your Tenant ID, see [How to find your Azure Active Directory tenant ID](/azure/active-directory/fundamentals/active-directory-how-to-find-tenant)
+To look up your Tenant ID, see [How to find your Azure Active Directory tenant ID](/azure/active-directory/fundamentals/active-directory-how-to-find-tenant) or try the following:
+
+```msgraph-interactive
+GET https://graph.microsoft.com/v1.0/organization?$select=id
+```
 
 These registry settings are pushed from Intune for user policies:
 

windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md

@@ -172,7 +172,11 @@ You can configure Windows devices to use the **Microsoft PIN Reset Service** usi
 - Value: **True**
 
 >[!NOTE]
-> You must replace `TenantId` with the identifier of your Azure Active Directory tenant.
+> You must replace `TenantId` with the identifier of your Azure Active Directory tenant. To look up your Tenant ID, see [How to find your Azure Active Directory tenant ID](/azure/active-directory/fundamentals/active-directory-how-to-find-tenant) or try the following:
+
+```msgraph-interactive
+GET https://graph.microsoft.com/v1.0/organization?$select=id
+```
 
 ---
 

windows/security/identity-protection/hello-for-business/toc.yml

@@ -73,7 +73,7 @@
         href: hello-hybrid-cert-whfb-settings.md
       - name: Sign-in and provisioning
         href: hello-hybrid-cert-whfb-provision.md
-  - name: Oon-premises deployments
+  - name: On-premises deployments
     items:
     - name: Key trust deployment
       items: