# Kernel DMA Protection
`Computer Configuration\Administrative Templates\System\Kernel DMA Protection`
- Enumeration policy for external devices incompatible with Kernel DMA Protection -> Enabled -> Block all