Get an overview of device control, including removable storage access control and device installation policies in Defender for Endpoint.

"Device control" refers to the implementation of policies and measures to manage and control the use of devices within an organization's network or environment.

Step-by-step instructions for getting started with device control. Step-by-step examples on how to configure device control to restrict access to devices like USBs, CD/DVD drivers, and Windows …

Mar 10, 2025 · In general, the Device Control features enable IT administrators to control whether users can install and use peripheral devices, such as removable storage, printers, or Bluetooth devices.

Dec 18, 2025 · If you're using Intune to manage Defender for Endpoint settings, you can use it to deploy and manage device control capabilities. Different aspects of device control are managed differently in …

Device control is a security solution that restricts access to specific types of external devices connected to endpoints. This can include USB drives, external hard drives, CD/DVDs, Bluetooth devices, and …

Jul 28, 2025 · With device control in place, security teams decide which devices to permit, block, or handle with special rules. This control makes it significantly easier to prevent data loss, block …

Device control walkthroughs This article describes different ways to see how device control works. Beginning with default settings, each section describes how to configure device control to achieve …

This repository contains samples and resources for Microsoft Defender for Endpoint Device Control for Windows and Microsoft Defender for Endpoint Device Control for Mac

This article describes different ways to see how device control works. Beginning with default settings, each section describes how to configure device control to achieve certain objectives.