True up some details with MDE content

Author: Brenduns

memdocs/intune/protect/includes/security-config-mgt-prerequisites.md

@@ -4,7 +4,7 @@ description: include file
 author: brenduns
 ms.service: microsoft-intune
 ms.author: brenduns
-ms.date: 11/22/2021
+ms.date: 11/29/2021
 ms.topic: include
 ---
 
@@ -109,7 +109,10 @@ To support Microsoft Defender for Endpoint security configuration management thr
 
 Microsoft Defender for Endpoint supports several options to onboard devices. For current guidance, see [Onboarding tools and methods for Windows devices](/microsoft-365/security/defender-endpoint/security-config-management) in the Defender for Endpoint documentation.
 
-Devices that you manage with Intune or Configuration Manager are not supported for this scenario.
+> [!IMPORTANT]  
+> After a device onboards with Microsoft Defender for Endpoint, it must and be tagged with **MDE-Management** before it can enroll with Security Management for Microsoft Defender for Endpoint. For more information on device tagging in MDE, see Create and manage device tags](/microsoft-365/security/defender-endpoint/machine-tag).
+
+Devices that you manage with Intune are not supported for this scenario.
 
 ## Create Azure AD Groups
 

memdocs/intune/protect/mde-security-integration.md

@@ -62,6 +62,7 @@ When you select a policy, you'll see information about the device check-in statu
 ## Known limitations and considerations
 
 ### Co-existence with Microsoft Endpoint Configuration Manager
+
 When using Configuration Manager, the best path for management of security policy is using the [Configuration Manager tenant attach](/mem/configmgr/tenant-attach/endpoint-security-get-started). In some environments it may be desired to use Security Management for Microsoft Defender. When using Security Management for Microsoft Defender with Configuration Manager, endpoint security policy should be isolated to a single control plane. Controlling policy through both channels will create the opportunity for conflicts and undesired results.
 
 ### Active Directory joined devices