diff --git a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index 0aebce483d..59f71186dd 100644 --- a/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -56,9 +56,9 @@ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection If the **OnboardingState** value is not set to **1**, you can use Event Viewer to review errors on the endpoint. If you configured your endpoints with a deployment tool that required a script, you can check the event viewer for the onboarding script results. - -**Check the result of the script**:
+**Check the result of the script**: + 1. Click **Start**, type **Event Viewer**, and press **Enter**. 2. Go to **Windows Logs** > **Application**.