Merge pull request #253532 from MicrosoftDocs/main

10/02 PM Publishing

Author: v-alje

articles/active-directory/architecture/security-operations-user-accounts.md

@@ -35,7 +35,7 @@ Protect user access on unmanaged devices by preventing browser sessions from rem
    1. Under **Exclude**, select **Users and groups** and choose your organization's emergency access or break-glass accounts.
 1. Under **Target resources** > **Cloud apps** > **Include**, select **All cloud apps**.
 1. Under **Conditions** > **Filter for devices**, set **Configure** to **Yes**. 
-   1. Under **Devices matching the rule:**, set to **Include filtered devices in policy**.
+   1. Under **Devices matching the rule:**, set to **Exclude filtered devices in policy**.
    1. Under **Rule syntax** select the **Edit** pencil and paste the following expressing in the box, then select **Apply**. 
       1. device.trustType -ne "ServerAD" -or device.isCompliant -ne True
    1. Select **Done**.