diff --git a/windows/security/identity-protection/access-control/local-accounts.md b/windows/security/identity-protection/access-control/local-accounts.md
index dc32e96f0a..dcf5546de7 100644
--- a/windows/security/identity-protection/access-control/local-accounts.md
+++ b/windows/security/identity-protection/access-control/local-accounts.md
@@ -278,6 +278,9 @@ The following table shows the Group Policy and registry settings that are used t
 </tbody>
 </table>
 
+
+>[!NOTE]
+>You can also enforce the default for LocalAccountTokenFilterPolicy by using the custom ADMX in Security Templates. 
  
 
 **To enforce local account restrictions for remote access**
@@ -308,9 +311,6 @@ The following table shows the Group Policy and registry settings that are used t
 
 7.  Ensure that the local account restrictions are applied to network interfaces by doing the following:
 
-    >[!NOTE]
-    >You can also enforce the default for LocalAccountTokenFilterPolicy by using the custom ADMX in Security Templates. 
-
     1.  Navigate to Computer Configuration\\Preferences and Windows Settings, and &gt; **Registry**.
 
     2.  Right-click **Registry**, and &gt; **New** &gt; **Registry Item**.