Update Get-ConfigAnalyzerPolicyRecommendation.md

Author: chrisda

exchange/exchange-ps/exchange/Get-ConfigAnalyzerPolicyRecommendation.md

@@ -14,7 +14,7 @@ monikerRange: "exchonline-ps || eop-ps"
 ## SYNOPSIS
 This cmdlet is available only in the cloud-based service.
 
-Use the Get-ConfigAnalyzerPolicyRecommendation cmdlet to policies (and the corresponding users) who have settings configured that fall below the suggested values for Standard and Strict preset security policies.
+Use the Get-ConfigAnalyzerPolicyRecommendation cmdlet to compare the settings in your existing security policies to the settings that are used in the Standard or Strict preset security policies. Settings that are below the recommend value are returned in the results.
 
 **Note**: We recommend that you use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell. For instructions, see [Use the Exchange Online PowerShell V2 module](https://docs.microsoft.com/powershell/exchange/exchange-online-powershell-v2).
 
@@ -30,6 +30,26 @@ Get-ConfigAnalyzerPolicyRecommendation -RecommendedPolicyType <RecommendedPolicy
 ```
 
 ## DESCRIPTION
+For information about the policies and their recommended Standard and Strict values, see [Recommended settings for EOP and Office 365 ATP security](https://docs.microsoft.com/microsoft-365/security/office-365-security/recommended-settings-for-eop-and-office365-atp).
+
+The output of this cmdlet only returns settings that fall below the value that you've specified as a baseline (Standard or Strict).
+
+The output contains the following information for each setting:
+
+- PolicyGroup: The type of policy. The value will be Anti-Spam, Anti-Phishing, Anti-Malware, ATP Safe Links, or ATP Safe Attachments
+- SettingName: The name of the setting in the policy.
+- SettingNameDescription: A description of the setting.
+- Policy: The name of the policy.
+- AppliedTo: The number of users or domains that the policy applies to. If the policy isn't applied to anyone (for example, it's disabled), this value will be blank.
+- CurrentConfiguration: The current value of the setting.
+- LastModified: When the policy was last modified.
+- Recommendation: The recommended Standard or Strict value for the setting.
+- SettingType: For example, Boolean, String, or Integer.
+
+If a setting is configured at or better than the Standard or Strict protection profile that you're comparing to, those settings/policies aren't returned in the results
+
+This cmdlet returns the following output for each setting in each policy that falls below the recommended value.
+
 You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they're not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see [Find the permissions required to run any Exchange cmdlet](https://docs.microsoft.com/powershell/exchange/find-exchange-cmdlet-permissions).
 
 ## EXAMPLES
@@ -39,12 +59,12 @@ You need to be assigned permissions before you can run this cmdlet. Although thi
 Get-ConfigAnalyzerPolicyRecommendation -RecommendedPolicyType Strict
 ```
 
-{{ Add example description here }}
+This example runs a comparison using the Strict preset security policy settings as a baseline.
 
 ## PARAMETERS
 
 ### -RecommendedPolicyType
-The RecommendedPolicyType parameter specifies the preset security policy. Valid values are:
+The RecommendedPolicyType parameter specifies the preset security policy that you want to use as a baseline. Valid values are:
 
 - Standard
 - Strict
@@ -79,7 +99,7 @@ Accept wildcard characters: False
 ```
 
 ### -IsAppliedToDisabled
-The IsAppliedToDisabled switch filters the results by policies that aren't applied to anyone. You don't need to specify a value with this switch.
+The IsAppliedToDisabled switch filters the results by policies that aren't applied to anyone (the AppliedTo property is blank). You don't need to specify a value with this switch.
 
 If you don't use this switch, the results include policies that are applied to users and policies that aren't applied to anyone.
 
@@ -110,4 +130,3 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
 ## NOTES
 
 ## RELATED LINKS
-