Device Control
- Policy ID
- DeviceControlEnabled
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1607
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Features
Description
Enable or Disable Defender Device Control on this machine.
Note: You must be enrolled as E3 or E5 in order for Device Control to be enabled.
Registry
ComputerHKEY_LOCAL_MACHINE
- DeviceControlEnabledREG_DWORD