Merge pull request #3570 from MicrosoftDocs/main

[AutoPublish] main to live - 04/24 10:30 PDT | 04/24 23:00 IST

Author: Ruchika-mittal01

defender-vulnerability-management/tvm-security-baselines.md

@@ -12,7 +12,7 @@ ms.collection:
 - Tier1
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 03/18/2025
+ms.date: 04/24/2025
 ---
 
 # Security baselines assessment
@@ -66,14 +66,17 @@ Security baselines provide support for Center for Internet Security (**CIS)** be
 > [!TIP]
 > You can create multiple profiles for the same operating system with various customizations.
 
- When you customize a configuration an icon will appear beside it to indicate that it has been customized and is no longer using the recommended value. Select the **reset** button to revert to the recommended value.
+When you customize a configuration an icon will appear beside it to indicate that it has been customized and is no longer using the recommended value. Select the **reset** button to revert to the recommended value.
 
 Useful icons to be aware of:
 
 ![Previously customized configuration](/defender/media/defender-vulnerability-management/previous_customization.png) - This configuration has been customized before. When creating a new profile if you select **Customize**, you'll see the available variations you can choose from.
 
 ![Not using the default value](/defender/media/defender-vulnerability-management/customized_value.png) - This configuration has been customized and is not using the default value.
 
+> [!NOTE]
+> For security baseline assessment to be successful, **PowerShell Constrained Language Mode** must be set to **off** on your devices.
+
 ## Security baselines assessment overview
 
 On the security baselines assessment overview page you can view device compliance, profile compliance, top failing devices and top misconfigured devices.