Update how-to-install-pshell.md

Added note and link for US Gov Cloud at step 8 as install will still succeed and to prevent customers from having to uninstall later if they don't see the note at the bottom of the article.

Author: JCoreMS

articles/active-directory/hybrid/cloud-sync/how-to-install-pshell.md

@@ -40,56 +40,56 @@ The Windows server must have TLS 1.2 enabled before you install the Azure AD Con
     [![Screenshot that the download agent](media/how-to-install/new-install-2.png)](media/how-to-install/new-install-2.png#lightbox)</br>
  6. On the right, click **Accept terms and download**.
  7. For the purposes of these instructions, the agent was downloaded to the C:\temp folder.
- 8. Install ProvisioningAgent in quiet mode.
+ 8. Install ProvisioningAgent in quiet mode. [If Installing against US Government Cloud, click here for alternate code block.](how-to-install-pshell.md#installing-against-us-government-cloud)
        ```
       $installerProcess = Start-Process 'c:\temp\AADConnectProvisioningAgentSetup.exe' /quiet -NoNewWindow -PassThru 
       $installerProcess.WaitForExit()
 
        ```
- 9. Import the Provisioning Agent PS module.
+ 10. Import the Provisioning Agent PS module.
        ```
        Import-Module "C:\Program Files\Microsoft Azure AD Connect Provisioning Agent\Microsoft.CloudSync.PowerShell.dll" 
        ```
- 10. Connect to Azure AD by using an account with the hybrid identity role. You can customize this section to fetch a password from a secure store. 
+ 11. Connect to Azure AD by using an account with the hybrid identity role. You can customize this section to fetch a password from a secure store. 
        ```
        $hybridAdminPassword = ConvertTo-SecureString -String "Hybrid identity admin password" -AsPlainText -Force 
     
        $hybridAdminCreds = New-Object System.Management.Automation.PSCredential -ArgumentList ("[email protected]", $hybridAdminPassword) 
        
        Connect-AADCloudSyncAzureAD -Credential $hybridAdminCreds 
        ```
- 11. Add the gMSA account, and provide credentials of the domain admin to create the default gMSA account.
+ 12. Add the gMSA account, and provide credentials of the domain admin to create the default gMSA account.
        ```
        $domainAdminPassword = ConvertTo-SecureString -String "Domain admin password" -AsPlainText -Force 
     
        $domainAdminCreds = New-Object System.Management.Automation.PSCredential -ArgumentList ("DomainName\DomainAdminAccountName", $domainAdminPassword) 
     
        Add-AADCloudSyncGMSA -Credential $domainAdminCreds 
        ```
- 12. Or use the preceding cmdlet to provide a precreated gMSA account.
+ 13. Or use the preceding cmdlet to provide a precreated gMSA account.
        ```
        Add-AADCloudSyncGMSA -CustomGMSAName preCreatedGMSAName$ 
        ```
- 13. Add the domain.
+ 14. Add the domain.
        ```
        $contosoDomainAdminPassword = ConvertTo-SecureString -String "Domain admin password" -AsPlainText -Force 
     
        $contosoDomainAdminCreds = New-Object System.Management.Automation.PSCredential -ArgumentList ("DomainName\DomainAdminAccountName", $contosoDomainAdminPassword) 
     
        Add-AADCloudSyncADDomain -DomainName contoso.com -Credential $contosoDomainAdminCreds 
        ```
- 14. Or use the preceding cmdlet to configure preferred domain controllers.
+ 15. Or use the preceding cmdlet to configure preferred domain controllers.
        ```
        $preferredDCs = @("PreferredDC1", "PreferredDC2", "PreferredDC3") 
     
        Add-AADCloudSyncADDomain -DomainName contoso.com -Credential $contosoDomainAdminCreds -PreferredDomainControllers $preferredDCs 
        ```
- 15. Repeat the previous step to add more domains. Provide the account names and domain names of the respective domains.
- 16. Restart the service.
+ 16. Repeat the previous step to add more domains. Provide the account names and domain names of the respective domains.
+ 17. Restart the service.
        ```
        Restart-Service -Name AADConnectProvisioningAgent  
        ```
- 17. Go to the Azure portal to create the cloud sync configuration.
+ 18. Go to the Azure portal to create the cloud sync configuration.
 
 ## Provisioning agent gMSA PowerShell cmdlets
 Now that you've installed the agent, you can apply more granular permissions to the gMSA. For information and step-by-step instructions on how to configure the permissions, see [Azure AD Connect cloud provisioning agent gMSA PowerShell cmdlets](how-to-gmsa-cmdlets.md).