diff --git a/ur-arch-diagram.png b/windows/deployment/images/ur-arch-diagram.png
similarity index 100%
rename from ur-arch-diagram.png
rename to windows/deployment/images/ur-arch-diagram.png
diff --git a/windows/security/cloud-security/toc.yml b/windows/security/cloud-security/toc.yml
index 87f69eadc0..7eaefc2acd 100644
--- a/windows/security/cloud-security/toc.yml
+++ b/windows/security/cloud-security/toc.yml
@@ -1,6 +1,6 @@
 items:
 - name: Overview
-  href: ../../cloud.md
+  href: ../cloud.md
 - name: Join Active Directory and Azure AD with single sign-on (SSO) ⇒
   href: /azure/active-directory/devices/concept-azure-ad-join
 - name: Security baselines with Intune ⇒
diff --git a/windows/security/operating-system-security/device-management/toc.yml b/windows/security/operating-system-security/device-management/toc.yml
index b52d3b78a7..01419872b2 100644
--- a/windows/security/operating-system-security/device-management/toc.yml
+++ b/windows/security/operating-system-security/device-management/toc.yml
@@ -6,9 +6,9 @@ items:
   - name: Security auditing
     href: ../../threat-protection/auditing/security-auditing-overview.md
   - name: Secured-core configuration lock
-    href: ../../../client-management/config-lock
+    href: /windows/client-management/config-lock
   - name: Assigned Access (kiosk mode)
-    href: ../../../configuration/kiosk-methods
+    href: /windows/configuration/kiosk-methods
 - name: Security baselines
   href: ../../threat-protection/windows-security-configuration-framework/windows-security-baselines.md
   items: