diff --git a/education/windows/edu-themes.md b/education/windows/edu-themes.md
index 1d00d1e8a9..f76298ef68 100644
--- a/education/windows/edu-themes.md
+++ b/education/windows/edu-themes.md
@@ -22,13 +22,14 @@ Education themes aren't enabled by default. Follow the instructions below to con
 
 #### [:::image type="icon" source="images/icons/intune.svg"::: **Intune**](#tab/intune)
 
-To configure devices using Microsoft Intune, create a [custom policy][MEM-1] with the following settings:
+[!INCLUDE [intune-custom-settings-1](includes/intune-custom-settings-1.md)]
 
 | Setting |
 |--------|
 | <li> OMA-URI: **`./Vendor/MSFT/Policy/Config/Education/EnableEduThemes`** </li><li>Data type: **Integer** </li><li>Value: **1**</li>|
 
-Assign the policy to a security group that contains as members the devices or users that you want to configure.
+[!INCLUDE [intune-custom-settings-2](includes/intune-custom-settings-2.md)]
+[!INCLUDE [intune-custom-settings-info](includes/intune-custom-settings-info.md)]
 
 #### [:::image type="icon" source="images/icons/provisioning-package.svg"::: **PPKG**](#tab/ppkg)
 
diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md
index b8d6962e48..3645d9ada1 100644
--- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md
+++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust.md
@@ -18,11 +18,11 @@ ms.technology: itpro-security
 ---
 # Hybrid cloud Kerberos trust deployment
 
-✅ **Deployment type:** [hybrid](hello-how-it-works-technology#hybrid-deployment)\
-✅ **Trust type:** [key trust](hello-hybrid-key-trust)\
-✅ **Trust type:** [cloud Kerberos trust](hello-hybrid-cloud-kerberos-trust)\
-✅ **Trust type:** [certificate trust](hello-hybrid-cert-trust)\
-✅ **Device registration type:** [Azure AD join](hello-how-it-works-technology#azure-active-directory-join), [Hybrid Azure AD join](hello-how-it-works-technology#hybrid-azure-ad-join)
+✅ **Deployment type:** [hybrid](./hello-how-it-works-technology#hybrid-deployment)\
+✅ **Trust type:** [key trust](./hello-hybrid-key-trust)\
+✅ **Trust type:** [cloud Kerberos trust](./hello-hybrid-cloud-kerberos-trust)\
+✅ **Trust type:** [certificate trust](./hello-hybrid-cert-trust)\
+✅ **Device registration type:** [Azure AD join](./hello-how-it-works-technology#azure-active-directory-join), [Hybrid Azure AD join](./hello-how-it-works-technology#hybrid-azure-ad-join)
 
 Windows Hello for Business replaces password sign-in with strong authentication, using an asymmetric key pair. This deployment guide provides the information to successfully deploy Windows Hello for Business in a hybrid cloud Kerberos trust scenario.