ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Select Device Control Default Enforcement Policy

Default Allow: Choosing this default enforcement, will Allow any operations to occur on the attached devices if no policy rules are found to match. Default Deny: Choosing this default enforcement, will Deny any operations to occur on the attached devices if no policy rules are found to match. Default Enforcement will establish what decision should be made during the Device Control access checks when none of the policy rules match.

Policy Details

Policy Name
DeviceControl_DefaultEnforcement
Registry Key
Software\Policies\Microsoft\Windows Defender\Device Control
Supported On
At least Windows Server 2016, Windows 10 Version 1607
Available Languages
en-us

Configuration Elements

Select Device Control Default Enforcement Policy

Type: enum

Allowed Values
  • 1 Default Allow
  • 2 Default Deny