From the course: Deploying and Managing Defender for Endpoint for Windows

Unlock the full course today

Join today to access over 24,500 courses taught by industry experts.

Device control for Windows

Device control for Windows

- [Instructor] While most Windows threats will originate from the network, you may have scenarios where you need to worry about physical origins. You want to limit folks ability to connect unvetted hardware like USB devices. Defender Device Control gives you some defenses here. First off, we can control removable storage and printers with permissions, and secondly, we can control the installation of connected hardware altogether. All of this comes with auditing, so we can assess risk ahead of implementation or blocking anything, or after we've gone into enforcement mode, we can also monitor activity. Let's start by exploring removable storage and printer control a little bit more. It allows us to control, read, write, execute style permissions on things like USB devices or printers. We're going to do that based on device properties, which typically boils down to goods. And we can do that kind of in a scalable way using this concept called reusable settings where I can define a type of…

Contents