fixing typos

Author: EMaher

articles/lab-services/classroom-labs/classroom-labs-fundamentals.md

@@ -24,13 +24,13 @@ The resources required to run a classroom lab are hosted in one of the Microsoft
 
 ## Virtual Network
 
-Each lab is isolated by its own virtual network.  If the lab has a [peered virtual network](how-to-connect-peer-virtual-network.md), then each lab is isolated by its own subnet.  Students connect to their virtual machine through a load balancer.  No student virtual machines have a public IP address; they only have a private ip addresses.  The connection string for the student will be the public IP address of the load balancer and a random port between 49152 and 65535.  Inbound rules on the load balancer forward the connection, depending on the operating system, to either port 22 (SSH) or port 3389 (RDP) of the appropriate student virtual machine. An NSG prevents outside traffic on any other ports.
+Each lab is isolated by its own virtual network.  If the lab has a [peered virtual network](how-to-connect-peer-virtual-network.md), then each lab is isolated by its own subnet.  Students connect to their virtual machine through a load balancer.  No student virtual machines have a public IP address; they only have a private ip address.  The connection string for the student will be the public IP address of the load balancer and a random port between 49152 and 65535.  Inbound rules on the load balancer forward the connection, depending on the operating system, to either port 22 (SSH) or port 3389 (RDP) of the appropriate virtual machine. An NSG prevents outside traffic on any other ports.
 
 ## Access control to the virtual machines
 
-Lab Services  handles the student’s ability to perform actions like start and stop on the host virtual machines.
+Lab Services handles the student’s ability to perform actions like start and stop on their virtual machines.  It also controls access to their VM connection information.
 
-Lab Services also handles the registration of students to the service. There are currently two different access settings, Restricted and Non-restricted. For more information, see [manage lab users](how-to-configure-student-usage.md#send-invitations-to-users) article. Restricted access means Lab Services  verifies that the students are added as user. Non-restricted means any user can register as long as they have the link and there is capacity in the lab. Non-restricted can be useful for hack-a-thon events.
+Lab Services also handles the registration of students to the service. There are currently two different access settings: restricted and nonrestricted. For more information, see the [manage lab users](how-to-configure-student-usage.md#send-invitations-to-users) article. Restricted access means Lab Services  verifies that the students are added as user before allowing access. Nonrestricted means any user can register as long as they have the registration link and there is capacity in the lab. Nonrestricted can be useful for hackathon events.
 
 Student VMs that are hosted in the classroom lab have a username and password set by the creator of the lab.  Alternately, the creator of the lab can allow registered students to choose their own password on first sign-in.