diff --git a/windows/keep-secure/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md
index e3329ddf3c..25f4a4fed7 100644
--- a/windows/keep-secure/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md
+++ b/windows/keep-secure/configure-endpoints-mdm-windows-defender-advanced-threat-protection.md
@@ -110,8 +110,23 @@ Configuration for onboarded machines: telemetry reporting frequency | ./Device/V
 
 2. Extract the contents of the .zip file to a shared, read-only location that can be accessed by the network administrators who will deploy the package. You should have a file named  *WindowsDefenderATP.onboarding*.
 
-3. Login to the (Microsoft Azure portal)[https://portal.azure.com]
+3. Login to the (Microsoft Azure portal)[https://portal.azure.com].
 
+4. From the Intune blade, choose **Device compliance**.
+
+  ![Image of device compliance menu](images/atp-azure-intune.png)
+
+5. Under **Manage**, choose **Policies** and choose **Create Policy**.
+
+  ![Image of policy creation in Azure](images/atp-azure-intune-create-policy.png)
+
+6. Type a name, description and choose the platform that you want this policy to apply. The category blade opens.
+
+  ![Image of naming a policy](images/atp-azure-intune-create-policy-configure.png)
+
+7. Specify information in the **Device Health**, **Device Properties**, and **System Security** settings then click **Create**.
+
+  ![Image of device health, device properties, and system security settings](images/atp-azure-intune-category.png)
 
 
 
diff --git a/windows/keep-secure/images/atp-azure-intune-category.png b/windows/keep-secure/images/atp-azure-intune-category.png
new file mode 100644
index 0000000000..3691b59d4c
Binary files /dev/null and b/windows/keep-secure/images/atp-azure-intune-category.png differ
diff --git a/windows/keep-secure/images/atp-azure-intune-create-policy-configure.png b/windows/keep-secure/images/atp-azure-intune-create-policy-configure.png
new file mode 100644
index 0000000000..c10925962a
Binary files /dev/null and b/windows/keep-secure/images/atp-azure-intune-create-policy-configure.png differ
diff --git a/windows/keep-secure/images/atp-azure-intune-create-policy.png b/windows/keep-secure/images/atp-azure-intune-create-policy.png
index aa936ae0fe..f095a6489e 100644
Binary files a/windows/keep-secure/images/atp-azure-intune-create-policy.png and b/windows/keep-secure/images/atp-azure-intune-create-policy.png differ