diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md
index 98ce3a3916..ab963f2d6e 100644
--- a/windows/deployment/deploy-enterprise-licenses.md
+++ b/windows/deployment/deploy-enterprise-licenses.md
@@ -11,7 +11,7 @@ ms.topic: how-to
ms.collection:
- highpri
- tier2
-ms.date: 02/29/2024
+ms.date: 03/01/2024
zone_pivot_groups: windows-versions-11-10
appliesto:
- ✅ Windows 11
diff --git a/windows/deployment/windows-subscription-activation.md b/windows/deployment/windows-subscription-activation.md
index 8ad5813896..517504e848 100644
--- a/windows/deployment/windows-subscription-activation.md
+++ b/windows/deployment/windows-subscription-activation.md
@@ -12,7 +12,7 @@ ms.collection:
- tier2
ms.topic: concept-article
zone_pivot_groups: windows-versions-11-10
-ms.date: 02/29/2024
+ms.date: 03/01/2024
appliesto:
- ✅ Windows 11
- ✅ Windows 10
@@ -47,6 +47,8 @@ Organizations that have an enterprise agreement can also benefit from the servic
>
> Subscription activation is available for qualifying devices running currently supported versions of Windows. Subscription activation can't be used to upgrade to a newer version of Windows.
+### Adding Conditional Access policy
+
Organizations that use the Subscription Activation feature to enable users to "step-up" from one version of Windows to another and use Conditional Access policies to control access need to exclude one of the following cloud apps from their Conditional Access policies using **Select Excluded Cloud Apps**:
- [Universal Store Service APIs and Web Application, AppID 45a330b1-b1ec-4cc1-9161-9f03992aa49f](/troubleshoot/azure/active-directory/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications).