Select Device Control Default Enforcement Policy
- Policy ID
- DeviceControl_DefaultEnforcement
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1607
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Device Control
Description
Default Allow: Choosing this default enforcement, will Allow any operations to occur on the attached devices if no policy rules are found to match.
Default Deny: Choosing this default enforcement, will Deny any operations to occur on the attached devices if no policy rules are found to match.
Default Enforcement will establish what decision should be made during the Device Control access checks when none of the policy rules match.
Options
Registry
ComputerHKEY_LOCAL_MACHINE
- DefaultEnforcementREG_DWORD