[AzureAD-Passwordless] Incorporating PM feedback

Author: iainfoulds

articles/active-directory/authentication/TOC.yml

@@ -135,13 +135,13 @@
     items: 
       - name: Deploying passwordless
         href: howto-authentication-passwordless-deployment.md
-      - name: Passwordless security keys
-        href: howto-authentication-passwordless-security-key.md
-      - name: Passwordless Windows 10
+      - name: Passwordless FIDO2 security keys
         items:
-          - name: Azure AD joined devices
+          - name: Enable FIDO2 security keys for your tenant
+            href: howto-authentication-passwordless-security-key.md
+          - name: Sign in to Windows 10 devices
             href: howto-authentication-passwordless-security-key-windows.md
-          - name: Hybrid Azure AD joined devices
+          - name: SSO to on-premises resources
             href: howto-authentication-passwordless-security-key-on-premises.md
       - name: Passwordless phone sign-in
         href: howto-authentication-passwordless-phone.md

articles/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises.md

@@ -47,7 +47,9 @@ Organizations must also meet the following software requirements.
 
 - Devices must be running Windows 10 Insider Build 18945 or newer.
 - You must have upgraded to or installed the latest version of [Azure AD Connect](../hybrid/how-to-connect-install-roadmap.md#install-azure-ad-connect).
-- Your Windows Server 2016/2019 Domain Controllers (DCs) must be fully patched and up-to-date to handle the on-premises authentication request load.
+- Your Windows Server domain controllers must have the following patches installed:
+    - For Windows Server 2016 - https://support.microsoft.com/help/4534307/windows-10-update-kb4534307
+	- For Windows Server 2019 - https://support.microsoft.com/help/4534321/windows-10-update-kb4534321
 
 ### Supported scenarios