From 73dae35e6d551cc6bb4f77935518b8bc2c5a9ac3 Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <iaan.wiltshire@microsoft.com>
Date: Thu, 6 Jul 2017 12:20:56 -0700
Subject: [PATCH 01/12] update table in events

---
 .../troubleshoot-windows-defender-antivirus.md              | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 4e7c275117..27f48d105f 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -49,7 +49,11 @@ The table in this section lists the main Windows Defender Antivirus client event
 4.  In the details pane, view the list of individual events to find your event.
 5.  Click the event to see specific details about an event in the lower pane, under the **General** and **Details** tabs.
 
-
+<style>
+td {
+    vertical-align:top;
+}
+</style>
 
 <table>
 <tr>

From c25079a0c997ec109f018b6949f515311886ff90 Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <iaan.wiltshire@microsoft.com>
Date: Thu, 6 Jul 2017 12:44:54 -0700
Subject: [PATCH 02/12] table layout

---
 .../troubleshoot-windows-defender-antivirus.md                | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 27f48d105f..7c2cea1ee2 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -57,7 +57,7 @@ td {
 
 <table>
 <tr>
-<th rowspan="3">Event ID: 1000</th>
+<th rowspan="3" style="vertical-align:top;" >Event ID: 1000</th>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -101,7 +101,7 @@ td {
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1001</th>
+<th rowspan="3" valign="top">Event ID: 1001</th>
 <td>
 <p>Symbolic name:</p>
 </td>

From b06aae53ccfa1a62be7b9cbdfc7cf0c1c2b45dc6 Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <iaan.wiltshire@microsoft.com>
Date: Thu, 6 Jul 2017 13:04:39 -0700
Subject: [PATCH 03/12] table layout

---
 .../troubleshoot-windows-defender-antivirus.md                | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 7c2cea1ee2..db6ec62930 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -56,8 +56,8 @@ td {
 </style>
 
 <table>
-<tr>
-<th rowspan="3" style="vertical-align:top;" >Event ID: 1000</th>
+<tr valign="top">
+<th rowspan="3" >Event ID: 1000</th>
 <td>
 <p>Symbolic name:</p>
 </td>

From ee2deab98f461419b4c6bd8fe02f04b5de0e338c Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <iaan.wiltshire@microsoft.com>
Date: Thu, 6 Jul 2017 15:08:11 -0700
Subject: [PATCH 04/12] table layout and bafs video move

---
 ...figure-block-at-first-sight-windows-defender-antivirus.md | 5 ++---
 .../troubleshoot-windows-defender-antivirus.md               | 2 +-
 ...-microsoft-cloud-protection-windows-defender-antivirus.md | 5 +++++
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md
index 0321537068..9e5993ed22 100644
--- a/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md
@@ -43,12 +43,11 @@ You can also [specify how long the file should be prevented from running](config
 
 ## How it works
 
-When a Windows Defender Antivirus client encounters a suspicious but undetected file, it queries our cloud protection backend. The cloud backend will apply heuristics, machine learning, and automated analysis of the file to determine the files as malicious or clean. The following video describes how this feature works.
+When a Windows Defender Antivirus client encounters a suspicious but undetected file, it queries our cloud protection backend. The cloud backend will apply heuristics, machine learning, and automated analysis of the file to determine the files as malicious or clean. 
 
 The Block at first sight feature only uses the cloud protection backend for executable files that are downloaded from the Internet, or originating from the Internet zone. A hash value of the EXE file is checked via the cloud backend to determine if this is a previously undetected file.
 
-<iframe 
-src="https://videoplayercdn.osi.office.net/embed/c2f20f59-ca56-4a7b-ba23-44c60bc62c59" width="768" height="432" allowFullScreen="true" frameBorder="0" scrolling="no"></iframe> 
+ 
 
 If the cloud backend is unable to make a determination, the file will be locked by Windows Defender AV while a copy is uploaded to the cloud. The cloud will perform additional analysis to reach a determination before it allows the file to run or blocks it in all future encounters, depending on whether the file is determined to be malicious or safe. 
 
diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index db6ec62930..855cf855ca 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -57,7 +57,7 @@ td {
 
 <table>
 <tr valign="top">
-<th rowspan="3" >Event ID: 1000</th>
+<td rowspan="3" >Event ID: 1000</td>
 <td>
 <p>Symbolic name:</p>
 </td>
diff --git a/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md
index 5a534796e0..354b545edb 100644
--- a/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/utilize-microsoft-cloud-protection-windows-defender-antivirus.md
@@ -31,6 +31,11 @@ Cloud-delivered protection for Windows Defender Antivirus, also referred to as M
 
 Enabling cloud-delivered protection helps detect and block new malware - even if the malware has never been seen before - without needing to wait for a traditionally delivered definition update to block it. Definition updates can take hours to prepare and deliver, while our cloud service can deliver updated protection in seconds. 
 
+The following video describes how it works:
+
+<iframe 
+src="https://videoplayercdn.osi.office.net/embed/c2f20f59-ca56-4a7b-ba23-44c60bc62c59" width="768" height="432" allowFullScreen="true" frameBorder="0" scrolling="no"></iframe>
+
 Cloud-delivered protection is enabled by default, however you may need to re-enable it if it has been disabled as part of previous organizational policies.
 
 The following table describes the differences in cloud-delivered protection between recent versions of Windows and System Center Configuration Manager.

From 4fc6aaadb9e5712a4a7e1c1284593dc53940361a Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <iaan.wiltshire@microsoft.com>
Date: Thu, 6 Jul 2017 16:07:52 -0700
Subject: [PATCH 05/12] table layout

---
 ...troubleshoot-windows-defender-antivirus.md | 132 +++++++++---------
 1 file changed, 64 insertions(+), 68 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 855cf855ca..49b904ed40 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -49,15 +49,11 @@ The table in this section lists the main Windows Defender Antivirus client event
 4.  In the details pane, view the list of individual events to find your event.
 5.  Click the event to see specific details about an event in the lower pane, under the **General** and **Details** tabs.
 
-<style>
-td {
-    vertical-align:top;
-}
-</style>
+
 
 <table>
 <tr valign="top">
-<td rowspan="3" >Event ID: 1000</td>
+<td valign="top" rowspan="3" ><b>Event ID: 1000</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -101,7 +97,7 @@ td {
 </td>
 </tr>
 <tr>
-<th rowspan="3" valign="top">Event ID: 1001</th>
+<td valign="top" rowspan="3"><b>Event ID: 1001</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -144,7 +140,7 @@ td {
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1002</th>
+<td valign="top" rowspan="3"><b>Event ID: 1002</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -189,7 +185,7 @@ td {
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1003</th>
+<td valign="top" rowspan="3"><b>%2</td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -233,7 +229,7 @@ td {
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1004</th>
+<td valign="top" rowspan="3"><b>Event ID: 1004</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -277,7 +273,7 @@ td {
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1005</th>
+<td valign="top" rowspan="4"><b>Event ID: 1005</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -342,7 +338,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1006</th>
+<td valign="top" rowspan="3"><b>Event ID: 1006</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -416,7 +412,7 @@ UAC</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1007</th>
+<td valign="top" rowspan="3"><b>Event ID: 1007</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -471,7 +467,7 @@ UAC</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1008</th>
+<td valign="top" rowspan="3"><b>Event ID: 1008</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -529,7 +525,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1009</th>
+<td valign="top" rowspan="3"><b>Event ID: 1009</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -574,7 +570,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1010</th>
+<td valign="top" rowspan="3"><b>Event ID: 1010</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -623,7 +619,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1011</th>
+<td valign="top" rowspan="3"><b>Event ID: 1011</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -668,7 +664,7 @@ For more information please see the following:</p>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1012</th>
+<td valign="top" rowspan="3"><b>Event ID: 1012</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -717,7 +713,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1013</th>
+<td valign="top" rowspan="3"><b>Event ID: 1013</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -749,7 +745,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1014</th>
+<td valign="top" rowspan="3"><b>Event ID: 1014</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -785,7 +781,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 1015</th>
+<td valign="top" rowspan="3"><b>Event ID: 1015</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -864,7 +860,7 @@ Name of the file.</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1116</th>
+<td valign="top" rowspan="4"><b>Event ID: 1116</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -946,7 +942,7 @@ UAC</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1117</th>
+<td valign="top" rowspan="4"><b>Event ID: 1117</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1076,7 +1072,7 @@ The above context applies to the following client and server versions:
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1118</th>
+<td valign="top" rowspan="4"><b>Event ID: 1118</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1173,7 +1169,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1119</th>
+<td valign="top" rowspan="4"><b>Event ID: 1119</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1316,7 +1312,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1120</th>
+<td valign="top" rowspan="4"><b>Event ID: 1120</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1355,7 +1351,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 1150</th>
+<td valign="top" rowspan="4"><b>Event ID: 1150</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1396,7 +1392,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2000</th>
+<td valign="top" rowspan="4"><b>Event ID: 2000</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1448,7 +1444,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2001</th>
+<td valign="top" rowspan="4"><b>Event ID: 2001</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1535,7 +1531,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2002</th>
+<td valign="top" rowspan="4"><b>Event ID: 2002</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1577,7 +1573,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2003</th>
+<td valign="top" rowspan="4"><b>Event ID: 2003</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1637,7 +1633,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2004</th>
+<td valign="top" rowspan="4"><b>Event ID: 2004</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1691,7 +1687,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2005</th>
+<td valign="top" rowspan="3"><b>Event ID: 2005</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1721,7 +1717,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2006</th>
+<td valign="top" rowspan="3"><b>Event ID: 2006</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1757,7 +1753,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2007</th>
+<td valign="top" rowspan="3"><b>Event ID: 2007</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1787,7 +1783,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2010</th>
+<td valign="top" rowspan="3"><b>Event ID: 2010</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1846,7 +1842,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2011</th>
+<td valign="top" rowspan="4"><b>Event ID: 2011</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1914,7 +1910,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2012</th>
+<td valign="top" rowspan="4"><b>Event ID: 2012</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1985,7 +1981,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2013</th>
+<td valign="top" rowspan="3"><b>Event ID: 2013</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2017,7 +2013,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2020</th>
+<td valign="top" rowspan="3"><b>Event ID: 2020</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2052,7 +2048,7 @@ Name of the file.</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 2021</th>
+<td valign="top" rowspan="4"><b>Event ID: 2021</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2101,7 +2097,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2030</th>
+<td valign="top" rowspan="3"><b>Event ID: 2030</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2126,7 +2122,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2031</th>
+<td valign="top" rowspan="3"><b>Event ID: 2031</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2160,7 +2156,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2040</th>
+<td valign="top" rowspan="3"><b>Event ID: 2040</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2187,7 +2183,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2041</th>
+<td valign="top" rowspan="3"><b>Event ID: 2041</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2214,7 +2210,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 2042</th>
+<td valign="top" rowspan="3"><b>Event ID: 2042</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2241,7 +2237,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 3002</th>
+<td valign="top" rowspan="4"><b>Event ID: 3002</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2297,7 +2293,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="4">Event ID: 3007</th>
+<td valign="top" rowspan="4"><b>Event ID: 3007</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2344,7 +2340,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5000</th>
+<td valign="top" rowspan="3"><b>Event ID: 5000</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2371,7 +2367,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5001</th>
+<td valign="top" rowspan="3"><b>Event ID: 5001</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2397,7 +2393,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5004</th>
+<td valign="top" rowspan="3"><b>Event ID: 5004</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2437,7 +2433,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5007</th>
+<td valign="top" rowspan="3"><b>Event ID: 5007</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2471,7 +2467,7 @@ New Windows Defender configuration value.</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="5">Event ID: 5008</th>
+<td valign="top" rowspan="5"><b>Event ID: 5008</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2538,7 +2534,7 @@ or Hang</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5009</th>
+<td valign="top" rowspan="3"><b>Event ID: 5009</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2565,7 +2561,7 @@ or Hang</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5010</th>
+<td valign="top" rowspan="3"><b>Event ID: 5010</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2591,7 +2587,7 @@ or Hang</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5011</th>
+<td valign="top" rowspan="3"><b>Event ID: 5011</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2616,7 +2612,7 @@ or Hang</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5012</th>
+<td valign="top" rowspan="3"><b>Event ID: 5012</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2643,7 +2639,7 @@ or Hang</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5100</th>
+<td valign="top" rowspan="3"><b>Event ID: 5100</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2676,7 +2672,7 @@ or Hang</dt>
 </td>
 </tr>
 <tr>
-<th rowspan="3">Event ID: 5101</th>
+<td valign="top" rowspan="3"><b>Event ID: 5101</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2725,7 +2721,7 @@ This section provides the following information about Windows Defender Antivirus
 Use the information in these tables to help troubleshoot Windows Defender Antivirus error codes.
 <table>
 <tr>
-<th colspan="4">External error codes</th>
+<td colspan="4"><b>External error codes</b></td>
 </tr>
 <tr>
 <th>Error code</th>
@@ -2767,7 +2763,7 @@ Use the information in these tables to help troubleshoot Windows Defender Antivi
 <td>
 <p>This error indicates that there might be a problem with your security product.</p>
 </td>
-<td rowspan="4">
+<td valign="top" rowspan="4">
 <p>
 <ol>
 <li>Update the definitions. Either:<ol>
@@ -2828,7 +2824,7 @@ data that does not allow the engine to function properly.
 </td>
 </tr>
 <tr>
-<td rowspan="2">
+<td valign="top" rowspan="2">
 <p>0x80508023 
 </p>
 </td>
@@ -2846,15 +2842,15 @@ data that does not allow the engine to function properly.
 </td>
 </tr>
 <tr>
-<td rowspan="2">
+<td valign="top" rowspan="2">
 <p><b>ERR_MP_FULL_SCAN_REQUIRED 
 </b></p>
 </td>
-<td rowspan="2">
+<td valign="top" rowspan="2">
 <p>This error indicates that a full system scan might be required. 
 </p>
 </td>
-<td rowspan="2">
+<td valign="top" rowspan="2">
 <p>Run a full system scan. 
 </p>
 </td>
@@ -2980,7 +2976,7 @@ The following error codes are used during internal testing of Windows Defender A
 
 <table>
 <tr>
-<th colspan="4">Internal error codes</th>
+<td colspan="4"><b>Internal error codes</b></td>
 </tr>
 <tr>
 <th>Error code</th>
@@ -3010,10 +3006,10 @@ The following error codes are used during internal testing of Windows Defender A
 <td>
 <p><b>ERROR_MP_UI_CONSOLIDATION_BAS</b>E</p>
 </td>
-<td rowspan="34">
+<td valign="top" rowspan="34">
 <p>This is an internal error. The cause is not clearly defined.</p>
 </td>
-<td rowspan="36">
+<td valign="top" rowspan="36">
 <p>
 <ol>
 <li>Update the definitions. Either:<ol>

From 9d9676875feee2afb7f8a58068f57c6ef756929c Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <Iaan.Wiltshire@microsoft.com>
Date: Wed, 6 Sep 2017 17:28:24 +0000
Subject: [PATCH 06/12] Updated
 configure-block-at-first-sight-windows-defender-antivirus.md

---
 ...configure-block-at-first-sight-windows-defender-antivirus.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md
index 9e5993ed22..c0c0237884 100644
--- a/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/configure-block-at-first-sight-windows-defender-antivirus.md
@@ -45,7 +45,7 @@ You can also [specify how long the file should be prevented from running](config
 
 When a Windows Defender Antivirus client encounters a suspicious but undetected file, it queries our cloud protection backend. The cloud backend will apply heuristics, machine learning, and automated analysis of the file to determine the files as malicious or clean. 
 
-The Block at first sight feature only uses the cloud protection backend for executable files that are downloaded from the Internet, or originating from the Internet zone. A hash value of the EXE file is checked via the cloud backend to determine if this is a previously undetected file.
+The Block at First Sight feature only uses the cloud protection backend for executable files that are downloaded from the Internet, or originating from the Internet zone. A hash value of the .exe file is checked via the cloud backend to determine if this is a previously undetected file.
 
  
 

From 2b35168498f2a51b132f8974b17f899ab0477a8a Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <Iaan.Wiltshire@microsoft.com>
Date: Wed, 6 Sep 2017 17:49:13 +0000
Subject: [PATCH 07/12] Updated troubleshoot-windows-defender-antivirus.md

---
 ...troubleshoot-windows-defender-antivirus.md | 109 +++++++++---------
 1 file changed, 54 insertions(+), 55 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 49b904ed40..93dd05c241 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -185,7 +185,7 @@ The table in this section lists the main Windows Defender Antivirus client event
 </td>
 </tr>
 <tr>
-<td valign="top" rowspan="3"><b>%2</td>
+<td valign="top" rowspan="3"><b>Event ID: 1003</td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -1341,13 +1341,7 @@ Description of the error. </dt>
 <dt>Hashes: &lt;Hashes&gt;</dt>
 </dl>
 </p>
-</td>
-</tr>
-<tr>
-<td></td>
-<td colspan="2">
 <div class="alert"><b>Note</b>  This event will only be logged if the following policy is set: <b>ThreatFileHashLogging 	unsigned</b>.</div>
-<div> </div>
 </td>
 </tr>
 <tr>
@@ -2711,7 +2705,7 @@ Description of the error. </dt>
 </table>
 
 <a id="error-codes"></a>
-## Windows Defender client error codes
+## Windows Defender Antivirus client error codes
 If Windows Defender Antivirus experiences any issues it will usually give you an error code to help you troubleshoot the issue. Most often an error means there was a problem installing an update.
 This section provides the following information about Windows Defender Antivirus client errors.
 -   The error code
@@ -2719,6 +2713,8 @@ This section provides the following information about Windows Defender Antivirus
 -   Advice on what to do now
 
 Use the information in these tables to help troubleshoot Windows Defender Antivirus error codes.
+  
+
 <table>
 <tr>
 <td colspan="4"><b>External error codes</b></td>
@@ -2741,8 +2737,7 @@ Use the information in these tables to help troubleshoot Windows Defender Antivi
 <td>
 <p>This error indicates that you might have run out of memory. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>
 <ol>
 <li>Check the available memory on your device.</li>
@@ -2762,20 +2757,11 @@ Use the information in these tables to help troubleshoot Windows Defender Antivi
 </td>
 <td>
 <p>This error indicates that there might be a problem with your security product.</p>
-</td>
-<td valign="top" rowspan="4">
+<p><b>What to do now</b></p>
 <p>
 <ol>
-<li>Update the definitions. Either:<ol>
-<li>Click the <b>Update definitions</b> button on the <b>Update</b> tab in Windows Defender. <img src="images/defender-updatedefs2.png" alt="Update definitions in Windows Defender"/><p>Or,</p>
-</li>
-<li>Download the latest definitions from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a>.
-<p>Note: The size of the definitions file downloaded from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a> can exceed 60 MB and should not be used as a long-term solution for updating definitions.</p>
-</li>
-</ol>
-</li>
-<li>Run a full scan.
-</li>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
 <li>Restart the device and try again.</li>
 </ol>
 </p>
@@ -2807,6 +2793,14 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that Windows Defender failed to quarantine a threat. 
 </p>
+<p><b>What to do now</b></p>
+<p>
+<ol>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
+<li>Restart the device and try again.</li>
+</ol>
+</p>
 </td>
 </tr>
 <tr>
@@ -2821,6 +2815,14 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that a reboot is required to complete threat removal. 
 </p>
+<p><b>What to do now</b></p>
+<p>
+<ol>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
+<li>Restart the device and try again.</li>
+</ol>
+</p>
 </td>
 </tr>
 <tr>
@@ -2835,8 +2837,7 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that the threat might no longer be present on the media, or malware might be stopping you from scanning your device. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>Run the <a href="https://www.microsoft.com/security/scanner/default.aspx">Microsoft Safety Scanner</a> then update your security software and try again. 
 </p>
 </td>
@@ -2849,8 +2850,7 @@ data that does not allow the engine to function properly.
 <td valign="top" rowspan="2">
 <p>This error indicates that a full system scan might be required. 
 </p>
-</td>
-<td valign="top" rowspan="2">
+<p><b>What to do now</b></p>
 <p>Run a full system scan. 
 </p>
 </td>
@@ -2873,8 +2873,7 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that manual steps are required to complete threat removal. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>Follow the manual remediation steps outlined in the <a href="https://www.microsoft.com/security/portal/threat/Threats.aspx">Microsoft Malware Protection Encyclopedia</a>. You can find a threat-specific link in the event history.  
 </p>
 </td>
@@ -2891,8 +2890,7 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that removal inside the container type might not be not supported. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>Windows Defender is not able to remediate threats detected inside the archive. Consider manually removing the detected resources. 
 </p>
 </td>
@@ -2909,8 +2907,7 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that removal of low and medium threats might be disabled. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>Check the detected threats and resolve them as required. 
 </p>
 </td>
@@ -2927,8 +2924,7 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates a rescan of the threat is required. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>Run a full system scan. 
 </p>
 </td>
@@ -2945,10 +2941,8 @@ data that does not allow the engine to function properly.
 <td>
 <p>This error indicates that an offline scan is required. 
 </p>
-</td>
-<td>
-<p>Run Windows Defender Offline. You can read about how to do this in the <a href="http://windows.microsoft.com/windows/what-is-windows-defender-offline">Windows Defender Offline 
-article</a>.</p>
+<p><b>What to do now</b></p>
+<p>Run [Windows Defender Offline](windows-defender-offline.md).</p>
 </td>
 </tr>
 <tr>
@@ -2963,8 +2957,7 @@ article</a>.</p>
 <td>
 <p>This error indicates that Windows Defender does not support the current version of the platform and requires a new version of the platform. 
 </p>
-</td>
-<td>
+<p><b>What to do now</b></p>
 <p>You can only use Windows Defender in Windows 10. For Windows 8, Windows 7 and Windows Vista, you can use <a href="https://www.microsoft.com/server-cloud/system-center/endpoint-protection-2012.aspx">System Center Endpoint Protection</a>.  
 </p>
 </td>
@@ -2993,9 +2986,8 @@ The following error codes are used during internal testing of Windows Defender A
 </b></p>
 </td>
 <td>
-<p>Check your Internet connection, then run the scan again.</p>
-</td>
-<td>
+<p>Windows Defender Antivirus can't access the Internet.</p>
+<p><b>What to do now</b></p>
 <p>Check your Internet connection, then run the scan again.</p>
 </td>
 </tr>
@@ -3008,20 +3000,11 @@ The following error codes are used during internal testing of Windows Defender A
 </td>
 <td valign="top" rowspan="34">
 <p>This is an internal error. The cause is not clearly defined.</p>
-</td>
-<td valign="top" rowspan="36">
+<p><b>What to do now</b></p>
 <p>
 <ol>
-<li>Update the definitions. Either:<ol>
-<li>Click the <b>Update definitions</b> button on the <b>Update</b> tab in Windows Defender. <img src="images/defender-updatedefs2.png" alt="Update definitions in Windows Defender"/><p>Or,</p>
-</li>
-<li>Download the latest definitions from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a>.
-<p>Note: The size of the definitions file downloaded from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a> can exceed 60 MB and should not be used as a long-term solution for updating definitions.</p>
-</li>
-</ol>
-</li>
-<li>Run a full scan.
-</li>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
 <li>Restart the device and try again.</li>
 </ol>
 </p>
@@ -3303,6 +3286,14 @@ The following error codes are used during internal testing of Windows Defender A
 <td>
 <p>This is an internal error. It might be triggered when malware removal is not successful. 
 </p>
+<p><b>What to do now</b></p>
+<p>
+<ol>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
+<li>Restart the device and try again.</li>
+</ol>
+</p>
 </td>
 </tr>
 <tr>
@@ -3317,6 +3308,14 @@ The following error codes are used during internal testing of Windows Defender A
 <td>
 <p>This is an internal error. It might have triggered when a scan fails to complete. 
 </p>
+<p><b>What to do now</b></p>
+<p>
+<ol>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
+<li>Restart the device and try again.</li>
+</ol>
+</p>
 </td>
 </tr>
 </table>

From 877e78ca6e014cb150749b244be81897fd2137f7 Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <Iaan.Wiltshire@microsoft.com>
Date: Wed, 6 Sep 2017 18:11:50 +0000
Subject: [PATCH 08/12] Updated troubleshoot-windows-defender-antivirus.md

---
 ...troubleshoot-windows-defender-antivirus.md | 194 +++++++++---------
 1 file changed, 94 insertions(+), 100 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 93dd05c241..997073d317 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -37,11 +37,11 @@ The tables list:
 
 Windows Defender AV records event IDs in the Windows event log.
 
-You can directly view the event log, or if you have a third-party security information and event management (SIEM) tool, you can also consume [Windows Defender client event IDs](troubleshoot-windows-defender-antivirus.md#windows-defender-av-ids) to review specific events and errors from your endpoints.
+You can directly view the event log, or if you have a third-party security information and event management (SIEM) tool, you can also consume the events to review specific events and errors from your endpoints.
 
-The table in this section lists the main Windows Defender Antivirus client event IDs and, where possible, provides suggested solutions to fix or resolve the error. 
+The table in this section lists the main Windows Defender AV client event IDs and, where possible, provides suggested solutions to fix or resolve the error. 
 
-**To view a Windows Defender client event**
+**View a Windows Defender AV client event**
 
 1.  Open **Event Viewer**.
 2.  In the console tree, expand **Applications and Services Logs**, then **Microsoft**, then **Windows**, then **Windows Defender**.
@@ -325,7 +325,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>The Windows Defender client encountered an error, and the current scan has stopped. The scan might fail due to a client-side issue. This event record includes the scan ID, type of scan (antivirus, antispyware, antimalware), scan parameters, the user that started the scan, the error code, and a description of the error.
+<p>The Windows Defender AV client encountered an error, and the current scan has stopped. The scan might fail due to a client-side issue. This event record includes the scan ID, type of scan (antivirus, antispyware, antimalware), scan parameters, the user that started the scan, the error code, and a description of the error.
 </p>
 <p>To troubleshoot this event:
 <ol>
@@ -436,7 +436,7 @@ UAC</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has taken action to protect this machine from malware or other potentially unwanted software. For more information please see the following:</p>
+<p>Windows Defender AV has taken action to protect this machine from malware or other potentially unwanted software. For more information please see the following:</p>
 <dl>
 <dt>User: &lt;Domain&gt;\\&lt;User&gt;</dt>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -489,7 +489,7 @@ UAC</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error when taking action on malware or other potentially unwanted software. For more information please see the following:</p>
+<p>Windows Defender AV has encountered an error when taking action on malware or other potentially unwanted software. For more information please see the following:</p>
 <dl>
 <dt>User: &lt;Domain&gt;\\&lt;User&gt;</dt>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -549,7 +549,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has restored an item from quarantine. For more information please see the following:</p>
+<p>Windows Defender AV has restored an item from quarantine. For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
 <dt>ID: &lt;Threat ID&gt;</dt>
@@ -594,7 +594,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to restore an item from quarantine. For more information please see the following:</p>
+<p>Windows Defender AV has encountered an error trying to restore an item from quarantine. For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
 <dt>ID: &lt;Threat ID&gt;</dt>
@@ -642,7 +642,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has deleted an item from quarantine.  
+<p>Windows Defender AV has deleted an item from quarantine.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -687,7 +687,7 @@ For more information please see the following:</p>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to delete an item from quarantine.  
+<p>Windows Defender AV has encountered an error trying to delete an item from quarantine.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -736,7 +736,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has removed history of malware and other potentially unwanted software.</p>
+<p>Windows Defender AV has removed history of malware and other potentially unwanted software.</p>
 <dl>
 <dt>Time: The time when the event occurred, for example when the history is purged. Note that this parameter is not used in threat events so that there is no confusion regarding whether it is remediation time or infection time. For those, we specifically call them as Action Time or Detection Time.</dt>
 <dt>User: &lt;Domain&gt;\\&lt;User&gt;</dt>
@@ -768,7 +768,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to remove history of malware and other potentially unwanted software.</p>
+<p>Windows Defender AV has encountered an error trying to remove history of malware and other potentially unwanted software.</p>
 <dl>
 <dt>Time: The time when the event occurred, for example when the history is purged. Note that this parameter is not used in threat events so that there is no confusion regarding whether it is remediation time or infection time. For those, we specifically call them as Action Time or Detection Time.</dt>
 <dt>User: &lt;Domain&gt;\\&lt;User&gt;</dt>
@@ -804,7 +804,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has detected a suspicious behavior.  
+<p>Windows Defender AV has detected a suspicious behavior.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -883,7 +883,7 @@ Name of the file.</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has detected malware or other potentially unwanted software.  
+<p>Windows Defender AV has detected malware or other potentially unwanted software.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -938,7 +938,7 @@ UAC</dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is required. Windows Defender can suspend and take routine action on this threat. If you want to remove the threat manually, in the Windows Defender interface, click <b>Clean Computer</b>.</p>
+<p>No action is required. Windows Defender AV can suspend and take routine action on this threat. If you want to remove the threat manually, in the Windows Defender AV interface, click <b>Clean Computer</b>.</p>
 </td>
 </tr>
 <tr>
@@ -966,7 +966,7 @@ UAC</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has taken action to protect this machine from malware or other potentially unwanted software.  
+<p>Windows Defender AV has taken action to protect this machine from malware or other potentially unwanted software.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -1028,7 +1028,7 @@ Description of the error. </dt>
 <dt>Signature Version: &lt;Definition version&gt;</dt>
 <dt>Engine Version: &lt;Antimalware Engine version&gt;</dt>
 <p>NOTE:
-<p>Whenever Windows Defender, Microsoft Security Essentials, Malicious Software Removal Tool, or System Center Endpoint Protection detects a malware, it will restore the following system settings and services which the malware might have changed:<ul>
+<p>Whenever Windows Defender AV, Microsoft Security Essentials, Malicious Software Removal Tool, or System Center Endpoint Protection detects a malware, it will restore the following system settings and services which the malware might have changed:<ul>
 <li>Default Internet Explorer or Microsoft Edge setting</li>
 <li>User Access Control settings</li>
 <li>Chrome settings</li>
@@ -1068,7 +1068,7 @@ The above context applies to the following client and server versions:
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is necessary. Windows Defender removed or quarantined a threat. </p>
+<p>No action is necessary. Windows Defender AV removed or quarantined a threat. </p>
 </td>
 </tr>
 <tr>
@@ -1095,7 +1095,7 @@ The above context applies to the following client and server versions:
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered a non-critical error when taking action on malware or other potentially unwanted software.  
+<p>Windows Defender AV has encountered a non-critical error when taking action on malware or other potentially unwanted software.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -1165,7 +1165,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is necessary. Windows Defender failed to complete a task related to the malware remediation. This is not a critical failure.</p>
+<p>No action is necessary. Windows Defender AV failed to complete a task related to the malware remediation. This is not a critical failure.</p>
 </td>
 </tr>
 <tr>
@@ -1192,7 +1192,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered a critical error when taking action on malware or other potentially unwanted software.  
+<p>Windows Defender AV has encountered a critical error when taking action on malware or other potentially unwanted software.  
 For more information please see the following:</p>
 <dl>
 <dt>Name: &lt;Threat name&gt;</dt>
@@ -1262,7 +1262,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>The Windows Defender client encountered this error due to critical issues. The endpoint might not be protected. Review the error description then follow the relevant <b>User action</b> steps below.</p>
+<p>The Windows Defender AV client encountered this error due to critical issues. The endpoint might not be protected. Review the error description then follow the relevant <b>User action</b> steps below.</p>
 <table>
 <tr>
 <th>Action</th>
@@ -1325,7 +1325,7 @@ Description of the error. </dt>
 <p>Message:</p>
 </td>
 <td colspan="2">
-<p><b>Windows Defender has deduced the hashes for a threat resource.</b></p>
+<p><b>Windows Defender AV has deduced the hashes for a threat resource.</b></p>
 </td>
 </tr>
 <tr>
@@ -1334,7 +1334,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender client is up and running in a healthy state.</p>
+<p>Windows Defender AV client is up and running in a healthy state.</p>
 <dl>
 <dt>Current Platform Version: &lt;Current platform version&gt;</dt>
 <dt>Threat Resource Path: &lt;Path&gt;</dt>
@@ -1368,7 +1368,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender client is up and running in a healthy state.</p>
+<p>Windows Defender AV client is up and running in a healthy state.</p>
 <dl>
 <dt>Platform Version: &lt;Current platform version&gt;</dt>
 <dt>Signature Version: &lt;Definition version&gt;</dt>
@@ -1382,7 +1382,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is necessary. The Windows Defender Antivirus client is in a healthy state. This event is reported on an hourly basis.</p>
+<p>No action is necessary. The Windows Defender AV Antivirus client is in a healthy state. This event is reported on an hourly basis.</p>
 </td>
 </tr>
 <tr>
@@ -1410,7 +1410,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender signature version has been updated.</p>
+<p>Windows Defender AV signature version has been updated.</p>
 <dl>
 <dt>Current Signature Version: &lt;Current signature version&gt;</dt>
 <dt>Previous Signature Version: &lt;Previous signature version&gt;</dt>
@@ -1434,7 +1434,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is necessary. The Windows Defender client is in a healthy state. This event is reported when signatures are successfully updated.</p>
+<p>No action is necessary. The Windows Defender AV client is in a healthy state. This event is reported when signatures are successfully updated.</p>
 </td>
 </tr>
 <tr>
@@ -1461,7 +1461,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to update signatures.</p>
+<p>Windows Defender AV has encountered an error trying to update signatures.</p>
 <dl>
 <dt>New Signature Version: &lt;New version number&gt;</dt>
 <dt>Previous Signature Version: &lt;Previous signature version&gt;</dt>
@@ -1509,14 +1509,7 @@ Description of the error. </dt>
 <p>This error occurs when there is a problem updating definitions.</p>
 <p>To troubleshoot this event:
 <ol>
-<li>Update the definitions. Either:<ol>
-<li>Click the <b>Update definitions</b> button on the <b>Update</b> tab in Windows Defender. <img src="images/defender-updatedefs2.png" alt="Update definitions in Windows Defender"/><p>Or,</p>
-</li>
-<li>Download the latest definitions from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a>.
-<p>Note: The size of the definitions file downloaded from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a> can exceed 60 MB and should not be used as a long-term solution for updating definitions.</p>
-</li>
-</ol>
-</li>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
 <li>Review the entries in the %Windir%\WindowsUpdate.log file for more information about this error.</li>
 <li>Contact <a href="https://go.microsoft.com/fwlink/?LinkId=215491">Microsoft Technical Support</a>.
 </li>
@@ -1548,7 +1541,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender engine version has been updated.</p>
+<p>Windows Defender AV engine version has been updated.</p>
 <dl>
 <dt>Current Engine Version: &lt;Current engine version&gt;</dt>
 <dt>Previous Engine Version: &lt;Previous engine version&gt;</dt>
@@ -1563,7 +1556,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is necessary. The Windows Defender client is in a healthy state. This event is reported when the antimalware engine is successfully updated.</p>
+<p>No action is necessary. The Windows Defender AV client is in a healthy state. This event is reported when the antimalware engine is successfully updated.</p>
 </td>
 </tr>
 <tr>
@@ -1590,7 +1583,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to update the engine.</p>
+<p>Windows Defender AV has encountered an error trying to update the engine.</p>
 <dl>
 <dt>New Engine Version:</dt>
 <dt>Previous Engine Version: &lt;Previous engine version&gt;</dt>
@@ -1609,19 +1602,14 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>The Windows Defender client update failed. This event occurs when the client fails to update itself. This event is usually due to an interruption in network connectivity during an update.</p>
+<p>The Windows Defender AV client update failed. This event occurs when the client fails to update itself. This event is usually due to an interruption in network connectivity during an update.</p>
 <p>To troubleshoot this event:
+<p>
 <ol>
-<li>Update the definitions. Either:<ol>
-<li>Click the <b>Update definitions</b> button on the <b>Update</b> tab in Windows Defender. <img src="images/defender-updatedefs2.png" alt="Update definitions in Windows Defender"/><p>Or,</p>
-</li>
-<li>Download the latest definitions from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a>.
-<p>Note: The size of the definitions file downloaded from the <a href="https://go.microsoft.com/fwlink/?LinkID=200965">Microsoft Malware Protection Center</a> can exceed 60 MB and should not be used as a long-term solution for updating definitions.</p>
-</li>
-</ol>
-</li>
-<li>Contact <a href="https://go.microsoft.com/fwlink/?LinkId=215491">Microsoft Technical Support</a>.
-</li>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
+<li>Restart the device and try again.</li>
+<li>Contact <a href="https://go.microsoft.com/fwlink/?LinkId=215491">Microsoft Technical Support</a>
 </ol>
 </p>
 </td>
@@ -1649,7 +1637,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.</p>
+<p>Windows Defender AV has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.</p>
 <dl>
 <dt>Signatures Attempted:</dt>
 <dt>Error Code: &lt;Error code&gt;
@@ -1667,7 +1655,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>The Windows Defender client attempted to download and install the latest definitions file and failed. This error can occur when the client encounters an error while trying to load the definitions, or if the file is corrupt. Windows Defender will attempt to revert back to a known-good set of definitions.</p>
+<p>The Windows Defender AV client attempted to download and install the latest definitions file and failed. This error can occur when the client encounters an error while trying to load the definitions, or if the file is corrupt. Windows Defender AV will attempt to revert back to a known-good set of definitions.</p>
 <p>To troubleshoot this event:
 <ol>
 <li>Restart the computer and try again.</li>
@@ -1703,7 +1691,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender could not load antimalware engine because current platform version is not supported. Windows Defender will revert back to the last known-good engine and a platform update will be attempted.</p>
+<p>Windows Defender AV could not load antimalware engine because current platform version is not supported. Windows Defender AV will revert back to the last known-good engine and a platform update will be attempted.</p>
 <dl>
 <dt>Current Platform Version: &lt;Current platform version&gt;</dt>
 </dl>
@@ -1735,7 +1723,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to update the platform.</p>
+<p>Windows Defender AV has encountered an error trying to update the platform.</p>
 <dl>
 <dt>Current Platform Version: &lt;Current platform version&gt;</dt>
 <dt>Error Code: &lt;Error code&gt;
@@ -1769,7 +1757,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender will soon require a newer platform version to support future versions of the antimalware engine. Download the latest Windows Defender platform to maintain the best level of protection available.</p>
+<p>Windows Defender AV will soon require a newer platform version to support future versions of the antimalware engine. Download the latest Windows Defender AV platform to maintain the best level of protection available.</p>
 <dl>
 <dt>Current Platform Version: &lt;Current platform version&gt;</dt>
 </dl>
@@ -1801,7 +1789,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender used <i>Dynamic Signature Service</i> to retrieve additional signatures to help protect your machine.</p>
+<p>Windows Defender AV used <i>Dynamic Signature Service</i> to retrieve additional signatures to help protect your machine.</p>
 <dl>
 <dt>Current Signature Version: &lt;Current signature version&gt;</dt>
 <dt>Signature Type: &lt;Signature type&gt;, for example: <ul>
@@ -1860,7 +1848,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender used <i>Dynamic Signature Service</i> to discard obsolete signatures.</p>
+<p>Windows Defender AV used <i>Dynamic Signature Service</i> to discard obsolete signatures.</p>
 <dl>
 <dt>Current Signature Version: &lt;Current signature version&gt;</dt>
 <dt>Signature Type: &lt;Signature type&gt;, for example: <ul>
@@ -1900,7 +1888,7 @@ Description of the error. </dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>No action is necessary. The Windows Defender client is in a healthy state. This event is reported when the Dynamic Signature Service successfully deletes out-of-date dynamic definitions.</p>
+<p>No action is necessary. The Windows Defender AV client is in a healthy state. This event is reported when the Dynamic Signature Service successfully deletes out-of-date dynamic definitions.</p>
 </td>
 </tr>
 <tr>
@@ -1928,7 +1916,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to use <i>Dynamic Signature Service</i>.</p>
+<p>Windows Defender AV has encountered an error trying to use <i>Dynamic Signature Service</i>.</p>
 <dl>
 <dt>Current Signature Version: &lt;Current signature version&gt;</dt>
 <dt>Signature Type: &lt;Signature type&gt;, for example: <ul>
@@ -1999,7 +1987,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender discarded all <i>Dynamic Signature Service</i> signatures.</p>
+<p>Windows Defender AV discarded all <i>Dynamic Signature Service</i> signatures.</p>
 <dl>
 <dt>Current Signature Version: &lt;Current signature version&gt;</dt>
 </dl>
@@ -2031,7 +2019,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender downloaded a clean file.</p>
+<p>Windows Defender AV downloaded a clean file.</p>
 <dl>
 <dt>Filename: &lt;File name&gt;
 Name of the file.</dt>
@@ -2065,7 +2053,7 @@ Name of the file.</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to download a clean file.</p>
+<p>Windows Defender AV has encountered an error trying to download a clean file.</p>
 <dl>
 <dt>Filename: &lt;File name&gt;
 Name of the file.</dt>
@@ -2086,7 +2074,7 @@ Description of the error. </dt>
 <td colspan="2">
 <p>Check your Internet connectivity settings.
 </p>
-<p>The Windows Defender client encountered an error when using the Dynamic Signature Service to download the latest definitions to a specific threat. This error is likely caused by a network connectivity issue. 
+<p>The Windows Defender AV client encountered an error when using the Dynamic Signature Service to download the latest definitions to a specific threat. This error is likely caused by a network connectivity issue. 
 </p>
 </td>
 </tr>
@@ -2112,7 +2100,7 @@ Description of the error. </dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender downloaded and configured Windows Defender Offline to run on the next reboot.</p>
+<p>Windows Defender AV downloaded and configured Windows Defender Offline to run on the next reboot.</p>
 </td>
 </tr>
 <tr>
@@ -2139,7 +2127,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender has encountered an error trying to download and configure Windows Defender Offline.</p>
+<p>Windows Defender AV has encountered an error trying to download and configure Windows Defender Offline.</p>
 <dl>
 <dt>Error Code: &lt;Error code&gt;
 Result code associated with threat status. Standard HRESULT values.</dt>
@@ -2173,7 +2161,7 @@ Description of the error. </dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>The support for your operating system will expire shortly. Running Windows Defender on an out of support operating system is not an adequate solution to protect against threats.</p>
+<p>The support for your operating system will expire shortly. Running Windows Defender AV on an out of support operating system is not an adequate solution to protect against threats.</p>
 </td>
 </tr>
 <tr>
@@ -2200,7 +2188,7 @@ Description of the error. </dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>The support for your operating system has expired. Running Windows Defender on an out of support operating system is not an adequate solution to protect against threats.</p>
+<p>The support for your operating system has expired. Running Windows Defender AV on an out of support operating system is not an adequate solution to protect against threats.</p>
 </td>
 </tr>
 <tr>
@@ -2227,7 +2215,7 @@ Description of the error. </dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>The support for your operating system has expired. Windows Defender is no longer supported on your operating system, has stopped functioning, and is not protecting against malware threats.</p>
+<p>The support for your operating system has expired. Windows Defender AV is no longer supported on your operating system, has stopped functioning, and is not protecting against malware threats.</p>
 </td>
 </tr>
 <tr>
@@ -2254,7 +2242,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender Real-Time Protection feature has encountered an error and failed.</p>
+<p>Windows Defender AV real-time protection feature has encountered an error and failed.</p>
 <dl>
 <dt>Feature: &lt;Feature&gt;, for example:
 <ul>
@@ -2268,7 +2256,7 @@ Description of the error. </dt>
 Result code associated with threat status. Standard HRESULT values.</dt>
 <dt>Error Description: &lt;Error description&gt;
 Description of the error. </dt>
-<dt>Reason: The reason Windows Defender real-time protection has restarted a feature.</dt>
+<dt>Reason: The reason Windows Defender AV real-time protection has restarted a feature.</dt>
 </dl>
 </p>
 </td>
@@ -2280,7 +2268,7 @@ Description of the error. </dt>
 <td colspan="2">
 <p>You should restart the system then run a full scan because it's possible the system was not protected for some time.
 </p>
-<p>The Windows Defender client's real-time protection feature encountered an error because one of the services failed to start. 
+<p>The Windows Defender AV client's real-time protection feature encountered an error because one of the services failed to start. 
 </p>
 <p>If it is followed by a 3007 event ID, the failure was temporary and the antimalware client recovered from the failure. 
 </p>
@@ -2310,7 +2298,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender Real-time Protection has restarted a feature. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down.</p>
+<p>Windows Defender AV real-time protection has restarted a feature. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down.</p>
 <dl>
 <dt>Feature: &lt;Feature&gt;, for example:
 <ul>
@@ -2320,7 +2308,7 @@ Description of the error. </dt>
 <li>Network Inspection System</li>
 </ul>
 </dt>
-<dt>Reason: The reason Windows Defender real-time protection has restarted a feature.</dt>
+<dt>Reason: The reason Windows Defender AV real-time protection has restarted a feature.</dt>
 </dl>
 </p>
 </td>
@@ -2357,7 +2345,7 @@ Description of the error. </dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was enabled.</p>
+<p>Windows Defender AV real-time protection scanning for malware and other potentially unwanted software was enabled.</p>
 </td>
 </tr>
 <tr>
@@ -2383,7 +2371,7 @@ Description of the error. </dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was disabled. </p>
+<p>Windows Defender AV real-time protection scanning for malware and other potentially unwanted software was disabled. </p>
 </td>
 </tr>
 <tr>
@@ -2411,7 +2399,7 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender Real-time Protection feature configuration has changed.</p>
+<p>Windows Defender AV real-time protection feature configuration has changed.</p>
 <dl>
 <dt>Feature: &lt;Feature&gt;, for example:
 <ul>
@@ -2450,12 +2438,12 @@ Description of the error. </dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.</p>
+<p>Windows Defender AV configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.</p>
 <dl>
 <dt>Old value: &lt;Old value number&gt;
-Old Windows Defender configuration value.</dt>
+Old Windows Defender AV configuration value.</dt>
 <dt>New value: &lt;New value number&gt;
-New Windows Defender configuration value.</dt>
+New Windows Defender AV configuration value.</dt>
 </dl>
 </p>
 </td>
@@ -2483,7 +2471,7 @@ New Windows Defender configuration value.</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender  engine has been terminated due to an unexpected error.</p>
+<p>Windows Defender AV  engine has been terminated due to an unexpected error.</p>
 <dl>
 <dt>Failure Type: &lt;Failure type&gt;, for example:
 Crash
@@ -2516,7 +2504,7 @@ or Hang</dt>
 <p>User action:</p>
 </td>
 <td colspan="2">
-<p>The Windows Defender client engine stopped due to an unexpected error.</p>
+<p>The Windows Defender AV client engine stopped due to an unexpected error.</p>
 <p>To troubleshoot this event:
 <ol>
 <li>Run the scan again.</li>
@@ -2551,7 +2539,7 @@ or Hang</dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender scanning for malware and other potentially unwanted software has been enabled.</p>
+<p>Windows Defender AV scanning for malware and other potentially unwanted software has been enabled.</p>
 </td>
 </tr>
 <tr>
@@ -2577,7 +2565,7 @@ or Hang</dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender scanning for malware and other potentially unwanted software is disabled.</p>
+<p>Windows Defender AV scanning for malware and other potentially unwanted software is disabled.</p>
 </td>
 </tr>
 <tr>
@@ -2602,7 +2590,7 @@ or Hang</dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender scanning for viruses has been enabled. </p>
+<p>Windows Defender AV scanning for viruses has been enabled. </p>
 </td>
 </tr>
 <tr>
@@ -2629,7 +2617,7 @@ or Hang</dt>
 <p>Description:</p>
 </td>
 <td colspan="2">
-<p>Windows Defender scanning for viruses is disabled. </p>
+<p>Windows Defender AV scanning for viruses is disabled. </p>
 </td>
 </tr>
 <tr>
@@ -2657,10 +2645,10 @@ or Hang</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender  has entered a grace period and will soon expire. After expiration, this program will disable protection against viruses, spyware, and other potentially unwanted software.</p>
+<p>Windows Defender AV  has entered a grace period and will soon expire. After expiration, this program will disable protection against viruses, spyware, and other potentially unwanted software.</p>
 <dl>
-<dt>Expiration Reason: The reason Windows Defender will expire.</dt>
-<dt>Expiration Date: The date Windows Defender will expire.</dt>
+<dt>Expiration Reason: The reason Windows Defender AV will expire.</dt>
+<dt>Expiration Date: The date Windows Defender AV will expire.</dt>
 </dl>
 </p>
 </td>
@@ -2690,7 +2678,7 @@ or Hang</dt>
 </td>
 <td colspan="2">
 <p>
-<p>Windows Defender  grace period has expired. Protection against viruses, spyware, and other potentially unwanted software is disabled.</p>
+<p>Windows Defender AV  grace period has expired. Protection against viruses, spyware, and other potentially unwanted software is disabled.</p>
 <dl>
 <dt>Expiration Reason:</dt>
 <dt>Expiration Date: </dt>
@@ -2706,13 +2694,13 @@ Description of the error. </dt>
 
 <a id="error-codes"></a>
 ## Windows Defender Antivirus client error codes
-If Windows Defender Antivirus experiences any issues it will usually give you an error code to help you troubleshoot the issue. Most often an error means there was a problem installing an update.
-This section provides the following information about Windows Defender Antivirus client errors.
+If Windows Defender AV experiences any issues it will usually give you an error code to help you troubleshoot the issue. Most often an error means there was a problem installing an update.
+This section provides the following information about Windows Defender AV client errors.
 -   The error code
 -   The possible reason for the error
 -   Advice on what to do now
 
-Use the information in these tables to help troubleshoot Windows Defender Antivirus error codes.
+Use the information in these tables to help troubleshoot Windows Defender AV error codes.
   
 
 <table>
@@ -2723,7 +2711,6 @@ Use the information in these tables to help troubleshoot Windows Defender Antivi
 <th>Error code</th>
 <th>Message displayed</th>
 <th>Possible reason for error</th>
-<th>What to do now</th>
 </tr>
 <tr>
 <td>
@@ -2779,6 +2766,14 @@ Use the information in these tables to help troubleshoot Windows Defender Antivi
 <p>This error indicates that there might be an engine configuration error; commonly, this is related to input 
 data that does not allow the engine to function properly. 
 </p>
+<p><b>What to do now</b></p>
+<p>
+<ol>
+<li>[Update the definitions](manage-updates-baselines-windows-defender-antivirus.md).</li>
+<li>Run a full scan.</li>
+<li>Restart the device and try again.</li>
+</ol>
+</p>
 </td>
 </tr>
 <tr>
@@ -2791,7 +2786,7 @@ data that does not allow the engine to function properly.
 </b></p>
 </td>
 <td>
-<p>This error indicates that Windows Defender failed to quarantine a threat. 
+<p>This error indicates that Windows Defender AV failed to quarantine a threat. 
 </p>
 <p><b>What to do now</b></p>
 <p>
@@ -2891,7 +2886,7 @@ data that does not allow the engine to function properly.
 <p>This error indicates that removal inside the container type might not be not supported. 
 </p>
 <p><b>What to do now</b></p>
-<p>Windows Defender is not able to remediate threats detected inside the archive. Consider manually removing the detected resources. 
+<p>Windows Defender AV is not able to remediate threats detected inside the archive. Consider manually removing the detected resources. 
 </p>
 </td>
 </tr>
@@ -2955,10 +2950,10 @@ data that does not allow the engine to function properly.
 </b></p>
 </td>
 <td>
-<p>This error indicates that Windows Defender does not support the current version of the platform and requires a new version of the platform. 
+<p>This error indicates that Windows Defender AV does not support the current version of the platform and requires a new version of the platform. 
 </p>
 <p><b>What to do now</b></p>
-<p>You can only use Windows Defender in Windows 10. For Windows 8, Windows 7 and Windows Vista, you can use <a href="https://www.microsoft.com/server-cloud/system-center/endpoint-protection-2012.aspx">System Center Endpoint Protection</a>.  
+<p>You can only use Windows Defender AV in Windows 10. For Windows 8, Windows 7 and Windows Vista, you can use <a href="https://www.microsoft.com/server-cloud/system-center/endpoint-protection-2012.aspx">System Center Endpoint Protection</a>.  
 </p>
 </td>
 </tr>
@@ -2975,7 +2970,6 @@ The following error codes are used during internal testing of Windows Defender A
 <th>Error code</th>
 <th>Message displayed</th>
 <th>Possible reason for error</th>
-<th>What to do now</th>
 </tr>
 <tr>
 <td>
@@ -2986,7 +2980,7 @@ The following error codes are used during internal testing of Windows Defender A
 </b></p>
 </td>
 <td>
-<p>Windows Defender Antivirus can't access the Internet.</p>
+<p>Windows Defender AV can't access the Internet.</p>
 <p><b>What to do now</b></p>
 <p>Check your Internet connection, then run the scan again.</p>
 </td>

From 30388edb198f52faf677f9870a8709a6979fe063 Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <Iaan.Wiltshire@microsoft.com>
Date: Wed, 6 Sep 2017 18:16:47 +0000
Subject: [PATCH 09/12] Updated troubleshoot-windows-defender-antivirus.md

---
 .../troubleshoot-windows-defender-antivirus.md   | 16 ++++++----------
 1 file changed, 6 insertions(+), 10 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 997073d317..178a164669 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -1312,7 +1312,7 @@ Description of the error. </dt>
 </td>
 </tr>
 <tr>
-<td valign="top" rowspan="4"><b>Event ID: 1120</b></td>
+<td valign="top" rowspan="3"><b>Event ID: 1120</b></td>
 <td>
 <p>Symbolic name:</p>
 </td>
@@ -2700,14 +2700,12 @@ This section provides the following information about Windows Defender AV client
 -   The possible reason for the error
 -   Advice on what to do now
 
-Use the information in these tables to help troubleshoot Windows Defender AV error codes.
+Use the information in these tables to help troubleshoot Windows Defender AV error codes.  
   
+### External error codes
 
 <table>
 <tr>
-<td colspan="4"><b>External error codes</b></td>
-</tr>
-<tr>
 <th>Error code</th>
 <th>Message displayed</th>
 <th>Possible reason for error</th>
@@ -2959,14 +2957,12 @@ data that does not allow the engine to function properly.
 </tr>
 </table>
 
-<a id="internal-error-codes"></a>
-The following error codes are used during internal testing of Windows Defender AV.
+### Internal error codes
+
+The following error codes are used during internal testing of Windows Defender AV.  
 
 <table>
 <tr>
-<td colspan="4"><b>Internal error codes</b></td>
-</tr>
-<tr>
 <th>Error code</th>
 <th>Message displayed</th>
 <th>Possible reason for error</th>

From e90ec0028f8646e475e3e2ce0b884cc9f292e53d Mon Sep 17 00:00:00 2001
From: Iaan D'Souza-Wiltshire <Iaan.Wiltshire@microsoft.com>
Date: Wed, 6 Sep 2017 18:31:24 +0000
Subject: [PATCH 10/12] Updated troubleshoot-windows-defender-antivirus.md

---
 ...troubleshoot-windows-defender-antivirus.md | 19 ++-----------------
 1 file changed, 2 insertions(+), 17 deletions(-)

diff --git a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
index 178a164669..cd2c6ccda5 100644
--- a/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
+++ b/windows/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus.md
@@ -2488,29 +2488,14 @@ or Hang</dt>
 </td>
 <td colspan="2">
 <p>To troubleshoot this event:<ol>
-<li>Try to restart the service.<ul>
+<li>Try to restart the service:<ul>
 <li>For antimalware, antivirus and spyware, at an elevated command prompt, type <b>net stop msmpsvc</b>, and then type <b>net start msmpsvc</b> to restart the antimalware engine.</li>
 <li>For the <i>Network Inspection System</i>, at an elevated command prompt, type <b>net start nissrv</b>, and then type <b>net start nissrv</b> to restart the <i>Network Inspection System</i> engine by using the NiSSRV.exe file.
 </li>
 </ul>
 </li>
-<li>If it fails in the same way, look up the error code by accessing the <a href="https://go.microsoft.com/fwlink/?LinkId=215163">Microsoft Support Site</a>  and entering the error number in the <b>Search</b> box, and contact <a href="https://go.microsoft.com/fwlink/?LinkId=215491">Microsoft Technical Support</a>.</li>
-</ol>
-</p>
-</td>
-</tr>
-<tr>
-<td>
-<p>User action:</p>
-</td>
-<td colspan="2">
-<p>The Windows Defender AV client engine stopped due to an unexpected error.</p>
-<p>To troubleshoot this event:
-<ol>
 <li>Run the scan again.</li>
-<li>If it fails in the same way, go to the <a href="https://go.microsoft.com/fwlink/?LinkId=215163">Microsoft Support site</a>, enter the error number in the <b>Search</b> box to look for the error code.</li>
-<li>Contact <a href="https://go.microsoft.com/fwlink/?LinkId=215491">Microsoft Technical Support</a>.
-</li>
+<li>If it fails in the same way, look up the error code by accessing the <a href="https://go.microsoft.com/fwlink/?LinkId=215163">Microsoft Support Site</a>  and entering the error number in the <b>Search</b> box, and contact <a href="https://go.microsoft.com/fwlink/?LinkId=215491">Microsoft Technical Support</a>.</li>
 </ol>
 </p>
 </td>

From 27ff4311916302a0fa62a34768bd4def59d8db93 Mon Sep 17 00:00:00 2001
From: Jeanie Decker <jdecker@microsoft.com>
Date: Wed, 6 Sep 2017 20:48:27 +0000
Subject: [PATCH 11/12] Merged PR 3053: Fix metadata

---
 windows/configuration/wcd/wcd-accounts.md                    | 2 +-
 windows/configuration/wcd/wcd-admxingestion.md               | 2 +-
 windows/configuration/wcd/wcd-applicationmanagement.md       | 2 +-
 windows/configuration/wcd/wcd-assignedaccess.md              | 2 +-
 windows/configuration/wcd/wcd-automatictime.md               | 2 +-
 windows/configuration/wcd/wcd-browser.md                     | 2 +-
 windows/configuration/wcd/wcd-callandmessagingenhancement.md | 2 +-
 windows/configuration/wcd/wcd-cellular.md                    | 2 +-
 windows/configuration/wcd/wcd-certificates.md                | 2 +-
 windows/configuration/wcd/wcd-cleanpc.md                     | 2 +-
 windows/configuration/wcd/wcd-connections.md                 | 2 +-
 windows/configuration/wcd/wcd-connectivityprofiles.md        | 2 +-
 windows/configuration/wcd/wcd-countryandregion.md            | 2 +-
 windows/configuration/wcd/wcd-desktopbackgroundandcolors.md  | 2 +-
 windows/configuration/wcd/wcd-developersetup.md              | 2 +-
 windows/configuration/wcd/wcd-deviceformfactor.md            | 2 +-
 windows/configuration/wcd/wcd-devicemanagement.md            | 2 +-
 windows/configuration/wcd/wcd-dmclient.md                    | 2 +-
 windows/configuration/wcd/wcd-editionupgrade.md              | 2 +-
 windows/configuration/wcd/wcd-embeddedlockdownprofiles.md    | 2 +-
 windows/configuration/wcd/wcd-firewallconfiguration.md       | 2 +-
 windows/configuration/wcd/wcd-firstexperience.md             | 2 +-
 windows/configuration/wcd/wcd-folders.md                     | 2 +-
 windows/configuration/wcd/wcd-initialsetup.md                | 2 +-
 windows/configuration/wcd/wcd-internetexplorer.md            | 2 +-
 windows/configuration/wcd/wcd-licensing.md                   | 2 +-
 windows/configuration/wcd/wcd-maps.md                        | 2 +-
 windows/configuration/wcd/wcd-messaging.md                   | 2 +-
 windows/configuration/wcd/wcd-modemconfigurations.md         | 2 +-
 windows/configuration/wcd/wcd-multivariant.md                | 2 +-
 windows/configuration/wcd/wcd-networkproxy.md                | 2 +-
 windows/configuration/wcd/wcd-networkqospolicy.md            | 2 +-
 windows/configuration/wcd/wcd-nfc.md                         | 2 +-
 windows/configuration/wcd/wcd-oobe.md                        | 2 +-
 windows/configuration/wcd/wcd-otherassets.md                 | 2 +-
 windows/configuration/wcd/wcd-personalization.md             | 2 +-
 windows/configuration/wcd/wcd-policies.md                    | 2 +-
 windows/configuration/wcd/wcd-provisioningcommands.md        | 2 +-
 windows/configuration/wcd/wcd-sharedpc.md                    | 2 +-
 windows/configuration/wcd/wcd-shell.md                       | 2 +-
 windows/configuration/wcd/wcd-smisettings.md                 | 2 +-
 windows/configuration/wcd/wcd-start.md                       | 2 +-
 windows/configuration/wcd/wcd-startupapp.md                  | 2 +-
 windows/configuration/wcd/wcd-startupbackgroundtasks.md      | 2 +-
 windows/configuration/wcd/wcd-surfacehubmanagement.md        | 2 +-
 windows/configuration/wcd/wcd-tabletmode.md                  | 2 +-
 windows/configuration/wcd/wcd-takeatest.md                   | 2 +-
 windows/configuration/wcd/wcd-theme.md                       | 2 +-
 windows/configuration/wcd/wcd-unifiedwritefilter.md          | 2 +-
 windows/configuration/wcd/wcd-universalappinstall.md         | 2 +-
 windows/configuration/wcd/wcd-universalappuninstall.md       | 2 +-
 windows/configuration/wcd/wcd-usberrorsoemoverride.md        | 2 +-
 windows/configuration/wcd/wcd-weakcharger.md                 | 2 +-
 windows/configuration/wcd/wcd-windowsteamsettings.md         | 2 +-
 windows/configuration/wcd/wcd-wlan.md                        | 2 +-
 windows/configuration/wcd/wcd-workplace.md                   | 2 +-
 windows/configuration/wcd/wcd.md                             | 2 +-
 57 files changed, 57 insertions(+), 57 deletions(-)

diff --git a/windows/configuration/wcd/wcd-accounts.md b/windows/configuration/wcd/wcd-accounts.md
index d3dd731cdf..7e89dfdb30 100644
--- a/windows/configuration/wcd/wcd-accounts.md
+++ b/windows/configuration/wcd/wcd-accounts.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-admxingestion.md b/windows/configuration/wcd/wcd-admxingestion.md
index daa6ca5eb8..52223258ad 100644
--- a/windows/configuration/wcd/wcd-admxingestion.md
+++ b/windows/configuration/wcd/wcd-admxingestion.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-applicationmanagement.md b/windows/configuration/wcd/wcd-applicationmanagement.md
index f032ce168c..af27cea5f0 100644
--- a/windows/configuration/wcd/wcd-applicationmanagement.md
+++ b/windows/configuration/wcd/wcd-applicationmanagement.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-assignedaccess.md b/windows/configuration/wcd/wcd-assignedaccess.md
index ad5d7551fb..201fc633e1 100644
--- a/windows/configuration/wcd/wcd-assignedaccess.md
+++ b/windows/configuration/wcd/wcd-assignedaccess.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-automatictime.md b/windows/configuration/wcd/wcd-automatictime.md
index abb8bbd179..52d9845460 100644
--- a/windows/configuration/wcd/wcd-automatictime.md
+++ b/windows/configuration/wcd/wcd-automatictime.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-browser.md b/windows/configuration/wcd/wcd-browser.md
index 787b6fa65b..a8af54b4f9 100644
--- a/windows/configuration/wcd/wcd-browser.md
+++ b/windows/configuration/wcd/wcd-browser.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-callandmessagingenhancement.md b/windows/configuration/wcd/wcd-callandmessagingenhancement.md
index bb07ccc02c..f3905fe8bc 100644
--- a/windows/configuration/wcd/wcd-callandmessagingenhancement.md
+++ b/windows/configuration/wcd/wcd-callandmessagingenhancement.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-cellular.md b/windows/configuration/wcd/wcd-cellular.md
index 64258bbe02..7ea42d279d 100644
--- a/windows/configuration/wcd/wcd-cellular.md
+++ b/windows/configuration/wcd/wcd-cellular.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-certificates.md b/windows/configuration/wcd/wcd-certificates.md
index 6347a4795d..4e414b4677 100644
--- a/windows/configuration/wcd/wcd-certificates.md
+++ b/windows/configuration/wcd/wcd-certificates.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-cleanpc.md b/windows/configuration/wcd/wcd-cleanpc.md
index ec1f5eaadc..fa14dead06 100644
--- a/windows/configuration/wcd/wcd-cleanpc.md
+++ b/windows/configuration/wcd/wcd-cleanpc.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-connections.md b/windows/configuration/wcd/wcd-connections.md
index 1ce0db8e5b..07f2fffa0f 100644
--- a/windows/configuration/wcd/wcd-connections.md
+++ b/windows/configuration/wcd/wcd-connections.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-connectivityprofiles.md b/windows/configuration/wcd/wcd-connectivityprofiles.md
index bb7d3366c0..2a71e900c4 100644
--- a/windows/configuration/wcd/wcd-connectivityprofiles.md
+++ b/windows/configuration/wcd/wcd-connectivityprofiles.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-countryandregion.md b/windows/configuration/wcd/wcd-countryandregion.md
index aea53e22de..84e1e611f1 100644
--- a/windows/configuration/wcd/wcd-countryandregion.md
+++ b/windows/configuration/wcd/wcd-countryandregion.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-desktopbackgroundandcolors.md b/windows/configuration/wcd/wcd-desktopbackgroundandcolors.md
index 1cf770db9b..6f954aec14 100644
--- a/windows/configuration/wcd/wcd-desktopbackgroundandcolors.md
+++ b/windows/configuration/wcd/wcd-desktopbackgroundandcolors.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-developersetup.md b/windows/configuration/wcd/wcd-developersetup.md
index e7c4378477..76c7f07631 100644
--- a/windows/configuration/wcd/wcd-developersetup.md
+++ b/windows/configuration/wcd/wcd-developersetup.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-deviceformfactor.md b/windows/configuration/wcd/wcd-deviceformfactor.md
index dc1e5cd524..c9d4434a24 100644
--- a/windows/configuration/wcd/wcd-deviceformfactor.md
+++ b/windows/configuration/wcd/wcd-deviceformfactor.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-devicemanagement.md b/windows/configuration/wcd/wcd-devicemanagement.md
index 9297174468..297225f5a1 100644
--- a/windows/configuration/wcd/wcd-devicemanagement.md
+++ b/windows/configuration/wcd/wcd-devicemanagement.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-dmclient.md b/windows/configuration/wcd/wcd-dmclient.md
index 4efec80320..27a6b9dd36 100644
--- a/windows/configuration/wcd/wcd-dmclient.md
+++ b/windows/configuration/wcd/wcd-dmclient.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-editionupgrade.md b/windows/configuration/wcd/wcd-editionupgrade.md
index cb2fd133b6..76e05d28ae 100644
--- a/windows/configuration/wcd/wcd-editionupgrade.md
+++ b/windows/configuration/wcd/wcd-editionupgrade.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-embeddedlockdownprofiles.md b/windows/configuration/wcd/wcd-embeddedlockdownprofiles.md
index 833b66a43a..2203a1cb2b 100644
--- a/windows/configuration/wcd/wcd-embeddedlockdownprofiles.md
+++ b/windows/configuration/wcd/wcd-embeddedlockdownprofiles.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-firewallconfiguration.md b/windows/configuration/wcd/wcd-firewallconfiguration.md
index 5e394b2f6b..df61861e90 100644
--- a/windows/configuration/wcd/wcd-firewallconfiguration.md
+++ b/windows/configuration/wcd/wcd-firewallconfiguration.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-firstexperience.md b/windows/configuration/wcd/wcd-firstexperience.md
index b3a53776ff..cf0f7c1983 100644
--- a/windows/configuration/wcd/wcd-firstexperience.md
+++ b/windows/configuration/wcd/wcd-firstexperience.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-folders.md b/windows/configuration/wcd/wcd-folders.md
index bbad0c9cb9..08eff6065d 100644
--- a/windows/configuration/wcd/wcd-folders.md
+++ b/windows/configuration/wcd/wcd-folders.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-initialsetup.md b/windows/configuration/wcd/wcd-initialsetup.md
index db5b9cee8b..a579fca408 100644
--- a/windows/configuration/wcd/wcd-initialsetup.md
+++ b/windows/configuration/wcd/wcd-initialsetup.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-internetexplorer.md b/windows/configuration/wcd/wcd-internetexplorer.md
index d1a2e56c56..e3290e6905 100644
--- a/windows/configuration/wcd/wcd-internetexplorer.md
+++ b/windows/configuration/wcd/wcd-internetexplorer.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-licensing.md b/windows/configuration/wcd/wcd-licensing.md
index 5b3ebb4f41..7ae7661ea8 100644
--- a/windows/configuration/wcd/wcd-licensing.md
+++ b/windows/configuration/wcd/wcd-licensing.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-maps.md b/windows/configuration/wcd/wcd-maps.md
index 4a1bfc4a7a..afe5f92c1c 100644
--- a/windows/configuration/wcd/wcd-maps.md
+++ b/windows/configuration/wcd/wcd-maps.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-messaging.md b/windows/configuration/wcd/wcd-messaging.md
index a00378d147..871e87042c 100644
--- a/windows/configuration/wcd/wcd-messaging.md
+++ b/windows/configuration/wcd/wcd-messaging.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-modemconfigurations.md b/windows/configuration/wcd/wcd-modemconfigurations.md
index dc45dff1ef..98bae12f8b 100644
--- a/windows/configuration/wcd/wcd-modemconfigurations.md
+++ b/windows/configuration/wcd/wcd-modemconfigurations.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-multivariant.md b/windows/configuration/wcd/wcd-multivariant.md
index 37a5519dfd..fa8c0d735f 100644
--- a/windows/configuration/wcd/wcd-multivariant.md
+++ b/windows/configuration/wcd/wcd-multivariant.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-networkproxy.md b/windows/configuration/wcd/wcd-networkproxy.md
index 7eb31bc61c..3689226767 100644
--- a/windows/configuration/wcd/wcd-networkproxy.md
+++ b/windows/configuration/wcd/wcd-networkproxy.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-networkqospolicy.md b/windows/configuration/wcd/wcd-networkqospolicy.md
index 5906d70cdd..be9d9f4d69 100644
--- a/windows/configuration/wcd/wcd-networkqospolicy.md
+++ b/windows/configuration/wcd/wcd-networkqospolicy.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-nfc.md b/windows/configuration/wcd/wcd-nfc.md
index c03217c87e..1b56de1940 100644
--- a/windows/configuration/wcd/wcd-nfc.md
+++ b/windows/configuration/wcd/wcd-nfc.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-oobe.md b/windows/configuration/wcd/wcd-oobe.md
index 7a72de6bb0..e609255e3d 100644
--- a/windows/configuration/wcd/wcd-oobe.md
+++ b/windows/configuration/wcd/wcd-oobe.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-otherassets.md b/windows/configuration/wcd/wcd-otherassets.md
index f5f33e19a2..ff79d72f5f 100644
--- a/windows/configuration/wcd/wcd-otherassets.md
+++ b/windows/configuration/wcd/wcd-otherassets.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-personalization.md b/windows/configuration/wcd/wcd-personalization.md
index 27f82ea825..a5aaee541d 100644
--- a/windows/configuration/wcd/wcd-personalization.md
+++ b/windows/configuration/wcd/wcd-personalization.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-policies.md b/windows/configuration/wcd/wcd-policies.md
index 72357237a0..f672b70b05 100644
--- a/windows/configuration/wcd/wcd-policies.md
+++ b/windows/configuration/wcd/wcd-policies.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-provisioningcommands.md b/windows/configuration/wcd/wcd-provisioningcommands.md
index 5ed43d8d18..7ab3bd2e35 100644
--- a/windows/configuration/wcd/wcd-provisioningcommands.md
+++ b/windows/configuration/wcd/wcd-provisioningcommands.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-sharedpc.md b/windows/configuration/wcd/wcd-sharedpc.md
index d771bbee7b..744e0acd11 100644
--- a/windows/configuration/wcd/wcd-sharedpc.md
+++ b/windows/configuration/wcd/wcd-sharedpc.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-shell.md b/windows/configuration/wcd/wcd-shell.md
index 8d7ad0b7ff..a0b581cb04 100644
--- a/windows/configuration/wcd/wcd-shell.md
+++ b/windows/configuration/wcd/wcd-shell.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-smisettings.md b/windows/configuration/wcd/wcd-smisettings.md
index ce6de17758..df459903c7 100644
--- a/windows/configuration/wcd/wcd-smisettings.md
+++ b/windows/configuration/wcd/wcd-smisettings.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-start.md b/windows/configuration/wcd/wcd-start.md
index 25fcc57075..3256dea604 100644
--- a/windows/configuration/wcd/wcd-start.md
+++ b/windows/configuration/wcd/wcd-start.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-startupapp.md b/windows/configuration/wcd/wcd-startupapp.md
index 06c5b20b7a..3e9d1ca9b2 100644
--- a/windows/configuration/wcd/wcd-startupapp.md
+++ b/windows/configuration/wcd/wcd-startupapp.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-startupbackgroundtasks.md b/windows/configuration/wcd/wcd-startupbackgroundtasks.md
index 6b0840c310..2e5c3fa161 100644
--- a/windows/configuration/wcd/wcd-startupbackgroundtasks.md
+++ b/windows/configuration/wcd/wcd-startupbackgroundtasks.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-surfacehubmanagement.md b/windows/configuration/wcd/wcd-surfacehubmanagement.md
index f2da4a2dd6..4a6dbb3dd3 100644
--- a/windows/configuration/wcd/wcd-surfacehubmanagement.md
+++ b/windows/configuration/wcd/wcd-surfacehubmanagement.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-tabletmode.md b/windows/configuration/wcd/wcd-tabletmode.md
index a8d2ea900a..5f454d89bb 100644
--- a/windows/configuration/wcd/wcd-tabletmode.md
+++ b/windows/configuration/wcd/wcd-tabletmode.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-takeatest.md b/windows/configuration/wcd/wcd-takeatest.md
index 75613f3b2e..c498ffd865 100644
--- a/windows/configuration/wcd/wcd-takeatest.md
+++ b/windows/configuration/wcd/wcd-takeatest.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-theme.md b/windows/configuration/wcd/wcd-theme.md
index 2d3e643f85..bc5710c264 100644
--- a/windows/configuration/wcd/wcd-theme.md
+++ b/windows/configuration/wcd/wcd-theme.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-unifiedwritefilter.md b/windows/configuration/wcd/wcd-unifiedwritefilter.md
index fe65f8413f..5ba21b01a3 100644
--- a/windows/configuration/wcd/wcd-unifiedwritefilter.md
+++ b/windows/configuration/wcd/wcd-unifiedwritefilter.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-universalappinstall.md b/windows/configuration/wcd/wcd-universalappinstall.md
index 6ba1b3993a..50f88c2fdc 100644
--- a/windows/configuration/wcd/wcd-universalappinstall.md
+++ b/windows/configuration/wcd/wcd-universalappinstall.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-universalappuninstall.md b/windows/configuration/wcd/wcd-universalappuninstall.md
index 17bbc8f15b..70cd723052 100644
--- a/windows/configuration/wcd/wcd-universalappuninstall.md
+++ b/windows/configuration/wcd/wcd-universalappuninstall.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-usberrorsoemoverride.md b/windows/configuration/wcd/wcd-usberrorsoemoverride.md
index 7175b5e14b..31685f534d 100644
--- a/windows/configuration/wcd/wcd-usberrorsoemoverride.md
+++ b/windows/configuration/wcd/wcd-usberrorsoemoverride.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-weakcharger.md b/windows/configuration/wcd/wcd-weakcharger.md
index f1316bc77a..92f8844d81 100644
--- a/windows/configuration/wcd/wcd-weakcharger.md
+++ b/windows/configuration/wcd/wcd-weakcharger.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-windowsteamsettings.md b/windows/configuration/wcd/wcd-windowsteamsettings.md
index b9ee438e22..26c23a84ce 100644
--- a/windows/configuration/wcd/wcd-windowsteamsettings.md
+++ b/windows/configuration/wcd/wcd-windowsteamsettings.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-wlan.md b/windows/configuration/wcd/wcd-wlan.md
index 6b641db70f..80bbb26cf5 100644
--- a/windows/configuration/wcd/wcd-wlan.md
+++ b/windows/configuration/wcd/wcd-wlan.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd-workplace.md b/windows/configuration/wcd/wcd-workplace.md
index 901e30a048..8db1aa11a4 100644
--- a/windows/configuration/wcd/wcd-workplace.md
+++ b/windows/configuration/wcd/wcd-workplace.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---
diff --git a/windows/configuration/wcd/wcd.md b/windows/configuration/wcd/wcd.md
index 38f6061d9f..080f9e469f 100644
--- a/windows/configuration/wcd/wcd.md
+++ b/windows/configuration/wcd/wcd.md
@@ -5,7 +5,7 @@ ms.prod: w10
 ms.mktglfcycl: deploy
 ms.sitesec: library
 author: jdeckerMS
-localizationpriority: medium
+ms.localizationpriority: medium
 ms.author: jdecker
 ms.date: 08/21/2017
 ---

From a36ff99ce02710aa158b8577cec71f165ba3c950 Mon Sep 17 00:00:00 2001
From: Jeanie Decker <jdecker@microsoft.com>
Date: Thu, 7 Sep 2017 15:26:50 +0000
Subject: [PATCH 12/12] Merged PR 3068: Add support topics for Surface Hub and
 Surface

---
 devices/surface-hub/TOC.md                    |  1 +
 .../surface-hub/change-history-surface-hub.md |  6 ++
 devices/surface-hub/index.md                  |  1 +
 .../support-solutions-surface-hub.md          | 50 +++++++++++++++
 .../surface-hub/troubleshoot-surface-hub.md   |  2 -
 devices/surface/TOC.md                        |  1 +
 devices/surface/change-history-for-surface.md |  6 ++
 devices/surface/index.md                      |  1 +
 devices/surface/support-solutions-surface.md  | 64 +++++++++++++++++++
 9 files changed, 130 insertions(+), 2 deletions(-)
 create mode 100644 devices/surface-hub/support-solutions-surface-hub.md
 create mode 100644 devices/surface/support-solutions-surface.md

diff --git a/devices/surface-hub/TOC.md b/devices/surface-hub/TOC.md
index 74d61c7720..82f4db6262 100644
--- a/devices/surface-hub/TOC.md
+++ b/devices/surface-hub/TOC.md
@@ -40,6 +40,7 @@
 ### [Using a room control system](use-room-control-system-with-surface-hub.md)
 ## [PowerShell for Surface Hub](appendix-a-powershell-scripts-for-surface-hub.md)
 ## [How Surface Hub addresses Wi-Fi Direct security issues](surface-hub-wifi-direct.md)
+## [Top support solutions for Surface Hub](support-solutions-surface-hub.md)
 ## [Troubleshoot Microsoft Surface Hub](troubleshoot-surface-hub.md)
 ## [Troubleshoot Miracast on Surface Hub](miracast-troubleshooting.md)
 ## [Useful downloads for Surface Hub administrators](surface-hub-downloads.md)
diff --git a/devices/surface-hub/change-history-surface-hub.md b/devices/surface-hub/change-history-surface-hub.md
index 6fc60ccb51..fc50a8188d 100644
--- a/devices/surface-hub/change-history-surface-hub.md
+++ b/devices/surface-hub/change-history-surface-hub.md
@@ -16,6 +16,12 @@ ms.localizationpriority: medium
 
 This topic lists new and updated topics in the [Surface Hub Admin Guide]( surface-hub-administrators-guide.md).
 
+## September 2017
+
+New or changed topic | Description
+--- | ---
+[Top support solutions for Surface Hub](support-solutions-surface-hub.md) | New
+
 ## August 2017
 
 
diff --git a/devices/surface-hub/index.md b/devices/surface-hub/index.md
index ab8cbc200f..cdde9fd95e 100644
--- a/devices/surface-hub/index.md
+++ b/devices/surface-hub/index.md
@@ -44,6 +44,7 @@ In some ways, adding your new Surface Hub is just like adding any other Microsof
 | [Manage Microsoft Surface Hub](manage-surface-hub.md) | How to manage your Surface Hub after finishing the first-run program. |
 | [PowerShell for Surface Hub](appendix-a-powershell-scripts-for-surface-hub.md) | 
 | [How Surface Hub addresses Wi-Fi Direct security issues](surface-hub-wifi-direct.md) | This topic provides guidance on Wi-Fi Direct security risks, how the Surface Hub has addressed those risks, and how Surface Hub administrators can configure the device for the highest level of security.  | PowerShell scripts to help set up and manage your Surface Hub. |
+| [Top support solutions for Surface Hub](support-solutions-surface-hub.md) | These are the top Microsoft Support solutions for common issues experienced using Surface Hub. | 
 | [Troubleshoot Microsoft Surface Hub](troubleshoot-surface-hub.md) | Troubleshoot common problems, including setup issues, Exchange ActiveSync errors. |
 | [Troubleshoot Miracast on Surface Hub](miracast-troubleshooting.md) | Learn how to resolve Miracast issues. |
 | [Useful downloads for Surface Hub administrators](surface-hub-downloads.md) | This topic provides links to useful Surface Hub documents, such as product datasheets, the site readiness guide, and user's guide. |
diff --git a/devices/surface-hub/support-solutions-surface-hub.md b/devices/surface-hub/support-solutions-surface-hub.md
new file mode 100644
index 0000000000..f5416c8b0d
--- /dev/null
+++ b/devices/surface-hub/support-solutions-surface-hub.md
@@ -0,0 +1,50 @@
+---
+title: Top support solutions for Microsoft Surface Hub
+description: Find top solutions for common issues using Surface Hub.
+ms.assetid: CF58F74D-8077-48C3-981E-FCFDCA34B34A
+keywords: Troubleshoot common problems, setup issues
+ms.prod: w10
+ms.mktglfcycl: support
+ms.sitesec: library
+ms.pagetype: surfacehub
+author: jdeckerms
+ms.author: jdecker
+ms.date: 09/07/2017
+ms.localizationpriority: medium
+---
+
+# Top support solutions for Microsoft Surface Hub
+
+Microsoft regularly releases both updates and solutions for Surface Hub. To ensure your devices can receive future updates, including security updates, it's important to keep your Surface Hub devices updated. For a complete listing of the update history, see [Surface Hub update history](https://www.microsoft.com/surface/support/surface-hub/surface-hub-update-history) and [Known issues and additional information about Microsoft Surface Hub](https://support.microsoft.com/help/4025643).
+
+
+These are the top Microsoft Support solutions for common issues experienced when using Surface Hub.
+
+## Setup and install issues
+
+- [Setup troubleshooting](troubleshoot-surface-hub.md#setup-troubleshooting)
+- [Exchange ActiveSync errors](troubleshoot-surface-hub.md#exchange-activesync-errors)
+
+## Miracast issues
+
+- [Troubleshoot Miracast on Surface Hub](miracast-troubleshooting.md)
+ 
+## Download updates issues
+
+- [Surface Hub can't download updates from Windows Update](https://support.microsoft.com/help/3191418/surface-hub-can-t-download-updates-from-windows-update)
+
+## Connect app issues
+
+- [The Connect app in Surface Hub exits unexpectedly](https://support.microsoft.com/help/3157417/the-connect-app-in-surface-hub-exits-unexpectedly)
+
+
+
+ 
+
+
+ 
+
+
+
+
+
diff --git a/devices/surface-hub/troubleshoot-surface-hub.md b/devices/surface-hub/troubleshoot-surface-hub.md
index 46b82e72e3..8fb31f0492 100644
--- a/devices/surface-hub/troubleshoot-surface-hub.md
+++ b/devices/surface-hub/troubleshoot-surface-hub.md
@@ -20,8 +20,6 @@ Troubleshoot common problems, including setup issues, Exchange ActiveSync errors
 
 Common issues are listed in the following table, along with causes and possible fixes. The [Setup troubleshooting](#setup-troubleshooting) section contains a listing of on-device problems, along with several types of issues that may be encountered during the first-run experience. The [Exchange ActiveSync errors](#exchange-activesync-errors) section lists common errors the device may encounter when trying to synchronize with an Microsoft Exchange ActiveSync server.
 
--   [Setup troubleshooting](#setup-troubleshooting)
--   [Exchange ActiveSync errors](#exchange-activesync-errors)
 
 ## Setup troubleshooting
 
diff --git a/devices/surface/TOC.md b/devices/surface/TOC.md
index 192f88b5e0..45393cc7e9 100644
--- a/devices/surface/TOC.md
+++ b/devices/surface/TOC.md
@@ -26,6 +26,7 @@
 ### [Use System Center Configuration Manager to manage devices with SEMM](use-system-center-configuration-manager-to-manage-devices-with-semm.md)
 ## [Surface Diagnostic Toolkit](surface-diagnostic-toolkit.md)
 ## [Surface Data Eraser](microsoft-surface-data-eraser.md)
+## [Top support solutions for Surface devices](support-solutions-surface.md)
 ## [Change history for Surface documentation](change-history-for-surface.md)
 
 
diff --git a/devices/surface/change-history-for-surface.md b/devices/surface/change-history-for-surface.md
index 33992b2d0a..04cd11e9f1 100644
--- a/devices/surface/change-history-for-surface.md
+++ b/devices/surface/change-history-for-surface.md
@@ -11,6 +11,12 @@ author: jdeckerms
 
 This topic lists new and updated topics in the Surface documentation library.
 
+## September 2017
+
+New or changed topic | Description
+--- | ---
+[Top support solutions for Surface devices](support-solutions-surface.md) | New
+
 ## June 2017
 
 |New or changed topic | Description |
diff --git a/devices/surface/index.md b/devices/surface/index.md
index 65fba37343..eeecfa1314 100644
--- a/devices/surface/index.md
+++ b/devices/surface/index.md
@@ -30,6 +30,7 @@ For more information on planning for, deploying, and managing Surface devices in
 | [Surface Enterprise Management Mode](surface-enterprise-management-mode.md) | See how this feature of Surface devices with Surface UEFI allows you to secure and manage firmware settings within your organization. |
 | [Surface Diagnostic Toolkit](surface-diagnostic-toolkit.md) | Find out how you can use the Microsoft Surface Diagnostic Toolkit to test the hardware of your Surface device. |
 | [Surface Data Eraser](microsoft-surface-data-eraser.md) | Find out how the Microsoft Surface Data Eraser tool can help you securely wipe data from your Surface devices. |
+| [Top support solutions for Surface devices](support-solutions-surface.md) | These are the top Microsoft Support solutions for common issues experienced using Surface devices in an enterprise. |
 | [Change history for Surface documentation](change-history-for-surface.md) | This topic lists new and updated topics in the Surface documentation library. |
 
 
diff --git a/devices/surface/support-solutions-surface.md b/devices/surface/support-solutions-surface.md
new file mode 100644
index 0000000000..b283d9f42c
--- /dev/null
+++ b/devices/surface/support-solutions-surface.md
@@ -0,0 +1,64 @@
+---
+title: Top support solutions for Surface devices
+description: Find top solutions for common issues using Surface devices in the enterprise.
+ms.assetid: CF58F74D-8077-48C3-981E-FCFDCA34B34A
+keywords: Troubleshoot common problems, setup issues
+ms.prod: w10
+ms.mktglfcycl: support
+ms.sitesec: library
+ms.pagetype: surfacehub
+author: jdeckerms
+ms.author: jdecker
+ms.date: 09/07/2017
+ms.localizationpriority: medium
+---
+
+# Top support solutions Microsoft Surface Hub
+
+Microsoft regularly releases both updates and solutions for Surface devices. To ensure your devices can receive future updates, including security updates, it's important to keep your Surface devices updated.  For a complete listing of the update history, see [Surface update history](https://www.microsoft.com/surface/support/install-update-activate/surface-update-history) and [Install Surface and Windows updates](https://www.microsoft.com/surface/support/performance-and-maintenance/install-software-updates-for-surface?os=windows-10&=undefined).
+
+
+These are the top Microsoft Support solutions for common issues experienced when using Surface devices in an enterprise.
+
+## Screen cracked or scratched issues
+
+- [Cracked screen and physical damage](https://www.microsoft.com/surface/support/warranty-service-and-recovery/surface-is-damaged)
+
+
+##Device cover or keyboard issues
+
+- [Troubleshoot your Surface Type Cover or keyboard](https://www.microsoft.com/surface/support/hardware-and-drivers/troubleshoot-surface-keyboards)
+- [Troubleshoot problems with Surface Keyboard, Surface Ergonomic Keyboard, and Microsoft Modern Keyboard with Fingerprint ID](https://www.microsoft.com/surface/support/touch-mouse-and-search/surface-keyboard-troubleshooting)
+- [Set up Microsoft Modern Keyboard with Fingerprint ID](https://www.microsoft.com/surface/support/touch-mouse-and-search/microsoft-modern-keyboard-fingerprintid-set-up)
+- [Enabling Surface Laptop keyboard during MDT deployment](https://blogs.technet.microsoft.com/askcore/2017/08/18/enabling-surface-laptop-keyboard-during-mdt-deployment/)
+
+ 
+## Device won't wake from sleep or hibernation issues
+
+- [Surface won’t turn on or wake from sleep](https://www.microsoft.com/surface/support/warranty-service-and-recovery/surface-wont-turn-on-or-wake-from-sleep?os=windows-10&=undefined)
+- [Surface Pro 4 or Surface Book doesn't hibernate in Windows 10](https://support.microsoft.com/help/3122682)
+- [Surface Pro 3 doesn't hibernate after four hours in connected standby](https://support.microsoft.com/help/2998588/surface-pro-3-doesn-t-hibernate-after-four-hours-in-connected-standby)
+- [Surface Pro 3 Hibernation Doesn’t Occur on Enterprise Install](https://blogs.technet.microsoft.com/askcore/2014/11/05/surface-pro-3-hibernation-doesnt-occur-on-enterprise-install/)
+
+
+## Other common issues
+
+- [Trouble installing Surface updates](https://www.microsoft.com/surface/support/performance-and-maintenance/troubleshoot-updates?os=windows-10&=undefined)
+- [Troubleshooting common Surface Pro 3 issues post-deployment](http://blogs.technet.com/b/askcore/archive/2015/03/19/troubleshooting-common-surface-pro-3-issues-post-deployment.aspx)
+- [Surface Pro 3 hibernation doesn't occur on enterprise install](https://blogs.technet.microsoft.com/askcore/2014/11/05/surface-pro-3-hibernation-doesnt-occur-on-enterprise-install/)
+- [Reusing the same NIC for multiple PXE initiated deployments in System Center Configuration Manger OSD](https://blogs.technet.microsoft.com/system_center_configuration_manager_operating_system_deployment_support_blog/2015/08/27/reusing-the-same-nic-for-multiple-pxe-initiated-deployments-in-system-center-configuration-manger-osd)
+- [Troubleshoot docking stations for Surface Pro and Surface 3](https://www.microsoft.com/surface/support/hardware-and-drivers/troubleshoot-docking-station?os=windows-8.1-update-1&=undefined)
+- [What to do if Surface is running slower](https://www.microsoft.com/surface/support/performance-and-maintenance/what-to-do-if-surface-is-running-slower?os=windows-10&=undefined)
+
+
+
+
+ 
+
+
+ 
+
+
+
+
+