Merge pull request #2426 from MicrosoftDocs/diannegali-updatesecbaselines

added note for security baseline steps

Author: diannegali

defender-vulnerability-management/tvm-security-baselines.md

@@ -12,7 +12,7 @@ ms.collection:
   - Tier1
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 11/19/2024
+ms.date: 01/21/2025
 ---
 
 # Security baselines assessment
@@ -49,18 +49,21 @@ Security baselines provide support for Center for Internet Security (**CIS)** be
 4. On the **Baseline profile scope** page set the profile settings such as software, base benchmark (CIS or STIG), and the compliance level and select **Next**.
 5. Select the configurations you want to include in the profile.
 
-   :::image type="content" source="/defender/media/defender-vulnerability-management/add_configuration_settings.png" alt-text="Screenshot of the add configuration settings page" lightbox="/defender/media/defender-vulnerability-management/add_configuration_settings.png":::
+    :::image type="content" source="/defender/media/defender-vulnerability-management/add_configuration_settings.png" alt-text="Screenshot of the add configuration settings page" lightbox="/defender/media/defender-vulnerability-management/add_configuration_settings.png":::
 
-   Select **Customize** if you  want to change the threshold configuration value for your organization.
+    > [!NOTE]
+    > Some configurations might not be included in the baseline assessment due to manual checking requirement or the configurations are unsupported. These configurations are marked as needing **Manual check** in the list and these will not be automatically assessed for compliance.
 
-   :::image type="content" source="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png" alt-text="Screenshot of the customize configuration settings page"  lightbox="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png":::
+    Select **Customize** if you  want to change the threshold configuration value for your organization.
 
+    :::image type="content" source="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png" alt-text="Screenshot of the customize configuration settings page"  lightbox="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png":::
+  
 6. Select **Next** to choose the device groups and device tags you want to include in the baseline profile. The profile will be automatically applied to devices added to these groups in the future.
 7. Select **Next** to review the profile.
 8. Select **Submit** to create your profile.
 9. On the final page, select **View profile page** to see the assessment results.
 
-> [!NOTE]
+> [!TIP]
 > You can create multiple profiles for the same operating system with various customizations.
 
  When you customize a configuration an icon will appear beside it to indicate that it has been customized and is no longer using the recommended value. Select the **reset** button to revert to the recommended value.