diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md
index 09655f64f2..0aebce483d 100644
--- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md
+++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md
@@ -57,7 +57,8 @@ If the **OnboardingState** value is not set to **1**, you can use Event Viewer t
If you configured your endpoints with a deployment tool that required a script, you can check the event viewer for the onboarding script results.
-**Check the result of the script**:
+**Check the result of the script**:
+
1. Click **Start**, type **Event Viewer**, and press **Enter**.
2. Go to **Windows Logs** > **Application**.