edit

Author: Brenduns

memdocs/intune/protect/endpoint-security-account-protection-policy.md

@@ -90,12 +90,12 @@ The following are the configurations you can make:
 - **User selection type**: Choose how to select users. Options include:
 
   - **Users**: Select the users and user groups from your Azure AD.
-  - **Manual**:  Specify Azure AD users and groups manually, by username, domain/username, or the groups security identifier (SID).
+  - **Manual**:  Specify Azure AD users and groups manually, by username, domain\username, or the groups security identifier (SID).
 
 - **Selected user(s)**: Depending on your selection for *User selection type*, you’ll use one of the following options:
 
   - **Select user(s)**: Select the users and user groups from your Azure AD.
-  - **Add users(s)**: This opens the **Add users** pane where you can then specify one or more user identifiers as they appear on a device. You can specify the user by *Username, Domain/username*, or by *security identifier (SID)*.
+  - **Add users(s)**: This opens the **Add users** pane where you can then specify one or more user identifiers as they appear on a device. You can specify the user by *Username, Domain\username*, or by *security identifier (SID)*. This can be helpful in scenarios such as a Hybrid AADJ device where you want to add an on-premises user from Active Directory to a local group.
 
     :::image type="content" source="./media/endpoint-security-account-protection-policy/add-user.png" alt-text="Screen shot of the Add users page.":::