From 438ca19289fbd5c32d63b6e20d3fecee78da8736 Mon Sep 17 00:00:00 2001
From: amirsc3 <42802974+amirsc3@users.noreply.github.com>
Date: Mon, 6 Jul 2020 14:03:38 +0300
Subject: [PATCH] Update troubleshoot-onboarding.md

---
 .../microsoft-defender-atp/troubleshoot-onboarding.md         | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md
index 2b67507cb7..445718afae 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding.md
@@ -282,6 +282,10 @@ If the verification fails and your environment is using a proxy to connect to th
 
     ![Image of registry key for Microsoft Defender Antivirus](images/atp-disableantispyware-regkey.png)
 
+   > [!NOTE]
+   > In addition, you must ensure that wdfilter.sys and wdboot.sys are set to their default start values of "0".
+   >  - `<Key Path="SYSTEM\CurrentControlSet\Services\WdBoot"><KeyValue Value="0" ValueKind="DWord" Name="Start"/></Key>`
+   >  - `<Key Path="SYSTEM\CurrentControlSet\Services\WdFilter"><KeyValue Value="0" ValueKind="DWord" Name="Start"/></Key>`
 
 ## Troubleshoot onboarding issues on a server