diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md b/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md
index c7ae3aac79..c57aaa4f25 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab.md
@@ -130,6 +130,9 @@ You can also use [Advanced hunting](advanced-hunting-query-language.md) to query
 >[!NOTE]
 >The connection to the test machines is done using RDP. Make sure that your firewall settings allow RDP connections.
 
+>[!NOTE]
+>Microsoft Office needs to be installed on the test machines for all the simulations to work.
+
 1. Connect to your machine and run an attack simulation by selecting **Connect**. 
 
     ![Image of the connect button for test machines](images/test-machine-table.png)