add note re: not_if/only_if and the execute resource
change |microsoft ad| to |windows ad|