Merge pull request #401 from v-mathavale/v-mathavale-9713814

 as per 9713814

Author: lindalu-MSFT

docs/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth.md

@@ -189,7 +189,8 @@ Service principals in Exchange are used to enable applications to access Exchang
 
 4. Click **Application permissions**.
 
-5. For POP access, choose the **POP.AccessAsApp** permission. For IMAP access, choose the **IMAP.AccessAsApp** permission. For SMTP access, choose the **SMTP.SendAsApp** permission.
+5. For POP access, choose the **POP.AccessAsApp** permission. For IMAP access, choose the **IMAP.AccessAsApp** permission. For SMTP access, choose the **SMTP.SendAsApp** permission.<br>
+The following screenshot shows the permissions selected:
 
    ![pop-imap-permission](media/pop-imap-smtp-permission.png)
 
@@ -226,7 +227,9 @@ https://login.microsoftonline.com/{tenant}/v2.0/adminconsent?client_id=<CLIENT_I
 
 If you registered your application in your own tenant using "Accounts in this organizational directory only", you can go forward and use the application configuration page within the Microsoft Entra admin center to grant the admin consent, and you don´t have to use the authorization request URL approach.
 
-![granting-consent-for-tenant](media/grant-consent.png)
+The following screenshot shows how to grant admin consent using the application configuration page within the Microsoft Entra admin center.
+
+:::image type="content" source="media/grant-consent.png" alt-text="Screenshot of how to grant admin consent." lightbox="media/grant-consent.png":::
 
 ### Register service principals in Exchange
 
@@ -235,7 +238,7 @@ Once a tenant admin consents your Microsoft Entra application, they must registe
 To use the *New-ServicePrincipal* cmdlet, install ExchangeOnlineManagement and connect to your tenant as shown in the following snippet:
 
 ```text
-Install-Module -Name ExchangeOnlineManagement -allowprerelease
+Install-Module -Name ExchangeOnlineManagement
 Import-module ExchangeOnlineManagement 
 Connect-ExchangeOnline -Organization <tenantId>
 ```
@@ -258,6 +261,10 @@ Get-ServicePrincipal | fl
 
 The OBJECT_ID is the Object ID from the Overview page of the Enterprise Application node (Azure Portal) for the application registration. It is **not** the Object ID from the Overview page of the App Registrations node. Using the incorrect Object ID will cause an authentication failure.
 
+The following screenshot shows an example that finds the correct Object ID, which begins with '6d':
+
+:::image type="content" source="media/object-id.png" alt-text="Screenshot of example of finding the correct object id." lightbox="media/object-id.png":::
+
 The tenant admin can now add the specific mailboxes in the tenant that will be allowed to be accessed by your application. This configuration is done with the [`Add-MailboxPermission` cmdlet](/powershell/module/exchange/add-mailboxpermission).
 
 The following example shows how to give your application's service principal access to one mailbox:
@@ -267,7 +274,10 @@ Add-MailboxPermission -Identity "[email protected]" -User
 <SERVICE_PRINCIPAL_ID> -AccessRights FullAccess
 ```
 
-Different IDs are used during creation of the Exchange service principal and also later when granting mailbox permissions. The following example may help you to use the correct ID for the different stages. This example uses Microsoft Entra cmdlets; so, you'll need to install the Microsoft Entra PowerShell module, if you haven't already. For more information, see [Install Microsoft Entra PowerShell for Graph](/powershell/azure/active-directory/install-adv2?view=azureadps-2.0#installing-the-azure-ad-module&preserve-view=true).
+Different IDs are used during creation of the Exchange service principal and also later when granting mailbox permissions. 
+
+**Optional example:**<br>
+The following example may help you to use the correct ID for the different stages. This example uses Microsoft Entra cmdlets; so, you'll need to install the Microsoft Entra PowerShell module, if you haven't already. For more information, see [Install Microsoft Entra PowerShell for Graph](/powershell/azure/active-directory/install-adv2?view=azureadps-2.0#installing-the-azure-ad-module&preserve-view=true).
 
 ```text
 $AADServicePrincipalDetails = Get-AzureADServicePrincipal -SearchString YourAppName