Control | Description |
---|---|
Restrict USB drives and other peripherals | You can allow/prevent users to install only the USB drives and other peripherals included on a list of authorized/unauthorized devices or device types. |
Block installation and usage of removable storage | You can't install or use removable storage. |
Allow installation and usage of specifically approved peripherals | You can only install and use approved peripherals that report specific properties in their firmware. |
Prevent installation of specifically prohibited peripherals | You can't install or use prohibited peripherals that report specific properties in their firmware. |
Allow installation and usage of specifically approved peripherals with matching device instance IDs | You can only install and use approved peripherals that match any of these device instance IDs. |
Prevent installation and usage of specifically prohibited peripherals with matching device instance IDs | You can't install or use prohibited peripherals that match any of these device instance IDs. |
Limit services that use Bluetooth | You can limit the services that can use Bluetooth. |
Use Microsoft Defender ATP baseline settings | You can set the recommended configuration for ATP by using the Microsoft Defender ATP security baseline. |
Control | Description |
---|---|
Allow installation and usage of USB drives and other peripherals | Allow users to install only the USB drives and other peripherals included on a list of authorized devices or device types |
Prevent installation and usage of USB drives and other peripherals | Prevent users from installing USB drives and other peripherals included on a list of unauthorized devices and device types |
Control | Description |
---|---|
Enable Microsoft Defender Antivirus Scanning | Enable Microsoft Defender Antivirus scanning for real-time protection or scheduled scans. |
Block untrusted and unsigned processes on USB peripherals | Block USB files that are unsigned or untrusted. |
Protect against Direct Memory Access (DMA) attacks | Configure settings to protect against DMA attacks. |