Skip to content

Commit a465a53

Browse files
committed
Update device-control-deploy-manage-gpo.md
1 parent 1b7d70b commit a465a53

File tree

1 file changed

+23
-20
lines changed

1 file changed

+23
-20
lines changed

defender-endpoint/device-control-deploy-manage-gpo.md

Lines changed: 23 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -61,25 +61,27 @@ To configure the device types that a device control policy is applied, follow th
6161

6262
1. On a computer running Windows, go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Device Control** > **Turn on device control for specific device types**.
6363

64-
1. In the **Turn on device control for specific types** window, specify the product family IDs, separate by a pipe (`|`). This setting must be a single string with no spaces or it will be parsed incorrectly by the device control engine causing unexpected behaviors. Product family IDs include `RemovableMediaDevices`, `CdRomDevices`, `WpdDevices`, or `PrinterDevices`.
64+
2. In the **Turn on device control for specific types** window, specify the product family IDs, separate by a pipe (`|`). This setting must be a single string with no spaces or it will be parsed incorrectly by the device control engine causing unexpected behaviors. Product family IDs include `RemovableMediaDevices`, `CdRomDevices`, `WpdDevices`, or `PrinterDevices`.
6565

6666
## Define groups
6767

6868
:::image type="content" source="media/deploy-dc-gpo/define-groups.png" alt-text="Screenshot of define groups." lightbox="media/deploy-dc-gpo/define-groups.png":::
6969

7070
1. Create one XML file for each removable storage group.
7171

72-
1. Use the properties in your removable storage group to create an XML file for each removable storage group.
72+
2. Use the properties in your removable storage group to create an XML file for each removable storage group.
7373

74-
> [!NOTE]
75-
> Ensure root node of the XML is PolicyGroups, for example, the following XML:
76-
> <PolicyGroups>
77-
> <Group Id="{d8819053-24f4-444a-a0fb-9ce5a9e97862}" Type="Device">
78-
> ...
79-
> </Group>
80-
> </PolicyGroups>
74+
Make sure the root node of the XML is PolicyGroups, for example, the following XML:
75+
76+
```xml
77+
<PolicyGroups>
78+
<Group Id="{d8819053-24f4-444a-a0fb-9ce5a9e97862}" Type="Device">
79+
80+
</Group>
81+
</PolicyGroups>
82+
```
8183

82-
1. Save the XML file to your network share.
84+
3. Save the XML file to your network share.
8385

8486
4. Define the settings as follows:
8587

@@ -99,15 +101,17 @@ You can create different group types. Here's one group example XML file for any
99101

100102
1. Create one XML file for access policy rule.
101103

102-
1. Use the properties in removable storage access policy rule(s) to create an XML for each group's removable storage access policy rule.
104+
2. Use the properties in removable storage access policy rule(s) to create an XML for each group's removable storage access policy rule.
103105

104-
> [!NOTE]
105-
> Ensure root node of the XML is PolicyRules, for example, the following XML:
106-
> <PolicyRules>
107-
> <PolicyRule Id="{d8819053-24f4-444a-a0fb-9ce5a9e97862}">
108-
> ...
109-
> </PolicyRule>
110-
> </PolicyRules>
106+
Ensure root node of the XML is PolicyRules, for example, the following XML:
107+
108+
```xml
109+
<PolicyRules>
110+
<PolicyRule Id="{d8819053-24f4-444a-a0fb-9ce5a9e97862}">
111+
...
112+
</PolicyRule>
113+
</PolicyRules>
114+
```
111115

112116
3. Save the XML file to network share.
113117

@@ -119,13 +123,12 @@ You can create different group types. Here's one group example XML file for any
119123

120124
> [!NOTE]
121125
> To capture evidence of files being copied or printed, use [Endpoint DLP.](/purview/dlp-copy-matched-items-get-started?tabs=purview-portal%2Cpurview)
122-
> [!NOTE]
126+
>
123127
> Comments using XML comment notation `<!-- COMMENT -->` can be used in the Rule and Group XML files, but they must be inside the first XML tag, not the first line of the XML file.
124128
125129
## See also
126130

127131
- [Device control in Defender for Endpoint](device-control-overview.md)
128132
- [Device control policies in and settings](device-control-policies.md)
129-
130133
- [Device Control for macOS](mac-device-control-overview.md)
131134

0 commit comments

Comments
 (0)