Learn Editor: Update edr-in-block-mode.md

Author: YongRhee-MSFT

defender-endpoint/edr-in-block-mode.md

@@ -80,16 +80,34 @@ When EDR in block mode is turned on, and a malicious artifact is detected, Defen
 
 1. Go to the Microsoft Defender portal ([https://security.microsoft.com/](https://security.microsoft.com/)) and sign in.
 
-2. Choose **Settings** \> **Endpoints** \> **General** \> **Advanced features**.
+1. Choose **Settings** > **Endpoints** > **General** > **Advanced features**.
 
-3. Scroll down, and then turn on **Enable EDR in block mode**.
+1. Scroll down, and then turn on **Enable EDR in block mode**.
 
 ### Intune
 
 To create a custom policy in Intune, see [Deploy OMA-URIs to target a CSP through Intune, and a comparison to on-premises](/troubleshoot/mem/intune/deploy-oma-uris-to-target-csp-via-intune).
 
 For more information on the Defender CSP used for EDR in block mode, see "Configuration/PassiveRemediation" under [Defender CSP](/windows/client-management/mdm/defender-csp).
 
+### Group Policy
+
+__Use Group Policy to enable EDR in block mode__
+
+1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)).
+
+1. Right-click the Group Policy Object you want to configure, and then select __Edit__.
+
+1. In the __Group Policy Management Editor__ go to __Computer configuration__ and then select __Administrative templates__.
+
+1. Expand the tree to __Windows components__ > __Microsoft Defender Antivirus__ > __Features__.
+
+1. Double-click **Enable EDR in block mode** and set the option to __Enabled__.
+
+1. Select __OK__. 
+
+1. This setting allows EDR in block mode.
+
 ## Requirements for EDR in block mode
 
 The following table lists requirements for EDR in block mode: