Microsoft Defender for Endpoint
Endpoint protectionDevice Control Faq
In brief
The FAQ now states that Group Policy has no configuration user interface for device control policy groups and rules, but administrators can configure them using the related .admx and .adml files.
What Defender admins need to know
Clarifies the supported method for configuring these device control policies through Group Policy.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Why is there no configuration UX for some policy groups?
There's no configuration UX for Define device control policy groups and Define device control policy rules on yourin Group Policy. But,However, you can still getconfigure the policies by using the related .adml and .admx files from Administrative Templates (.admx) for Windows 10 2022 Update (22H2)files. For details, see Deploy and manage device control by using Group Policy.
How do I confirm that the latest policy has been deployed to the target machine?
@@ -57,7 +57,7 @@ If the policy still isn't working, generate the `C:\ProgramData\Microsoft\Window ## Why is there no configuration UX for some policy groups? -There's no configuration UX for **Define device control policy groups** and **Define device control policy rules** on your Group Policy. But, you can still get the related `.adml` and `.admx` files from [Administrative Templates (.admx) for Windows 10 2022 Update (22H2)](https://www.microsoft.com/download/details.aspx?id=104677).+There's no configuration UX for **Define device control policy groups** and **Define device control policy rules** in Group Policy. However, you can configure the policies by using the related `.adml` and `.admx` files. For details, see [Deploy and manage device control by using Group Policy](device-control-deploy-manage-gpo.md). ## How do I confirm that the latest policy has been deployed to the target machine?