Windows 10: “Device Control” showing in Powershell on a private home computer

When I do “Get-MpComputerStatus” in Powershell, it always shows Device Control and the policies are outdated by ALOT. I’ve reset and clean installed my computer many times yet it still shows. It might’ve been the result of something a little sketchy I downloaded but the file had no virus scanned with MSERT, Windows Defender and Malwarebytes. What does this entail? Please help me! The screenshot keeps failing to send, this is it:https://ibb.co/mC99Kt4

:)

 

“Device Control” showing in Powershell on a private home computer

When I do “Get-MpComputerStatus” in Powershell, it always shows Device Control and the policies are outdated by ALOT. I’ve reset and clean installed my computer many times yet it still shows. It might’ve been the result of something a little sketchy I downloaded but the file had no virus (scanned with MSERT, Windows Defender and Malwarebytes). What does this entail? Please help me! The screenshot keeps failing to send, this is it:

IMG-7574 hosted at ImgBB

 

“Device Control” showing in Powershell on a private home computer

To reset the settings in Group Policy Editor, follow these steps:

1 - Open the Group Policy Editor by typing "gpedit.msc" in the Run dialog.

2 - Navigate to Computer Configuration\Administrative Templates\System\Removable Storage Access.

3 - Look for any settings related to device control that have been modified or configured.

4 - Right-click on each setting and select "Reset" to reset it to its default value.

5 - Repeat this process for all settings related to device control that have been modified or configured.

Regarding your question about someone connecting to your PC even though the device control is disabled, it's difficult to say without more information about your system and the specific settings that are enabled or disabled. In general, having device control policies enabled can help prevent unauthorized access to your system through external devices like USB drives, so it's always a good idea to keep these settings up-to-date and configured to your security needs. If you're concerned about someone accessing your system, you can also take additional steps like enabling a firewall, using strong passwords, and avoiding downloading or installing untrusted software.

Otherwise, if you want to remove the device control policy completely, you can try the following steps:

1 - Open the Group Policy Editor by typing "gpedit.msc" in the Run dialog.

2 - Navigate to Computer Configuration\Administrative Templates\System\Removable Storage Access.

3 - Look for any settings related to device control that have been modified or configured.

4 - Right-click on each setting and select "Delete" to remove it from the policy.

5 - Repeat this process for all settings related to device control that have been modified or configured.

6 - Once you have removed all the device control settings, close the Group Policy Editor.

7 - Restart your computer to ensure that the changes take effect.

As mentioned before, removing device control policies may reduce your system's security posture and increase the risk of unauthorized access through external devices like USB drives.

 

“Device Control” showing in Powershell on a private home computer

Hello! My name is Cristiano, I'm an Independent Advisor. I'll try to assist you.

Outdated policies related to device control can happen due to various reasons, including installing suspicious or untrusted software on your system.

To address this issue, you can try the following steps:

1 - Run a FULL system scan with your antivirus software to ensure that your system is free of any malware or viruses.

2 - Update your Windows Defender and Malwarebytes to the latest version and run a scan again to ensure that there are no malicious programs on your system.

3 - Try resetting the Group Policy settings related to device control. You can do this by opening the Group Policy Editor (type "gpedit.msc" in the Run dialog), navigating to Computer Configuration\Administrative Templates\System\Removable Storage Access, and resetting any settings that may have been modified or configured.

4 - If the issue persists, you can try creating a new local user account on your system and check if the device control policies are still outdated. This will help you determine if the issue is specific to your user account or if it is a system-wide problem.

I hope this helped.