diff --git a/Group Policies/Computer Configuration/Device Guard.md b/Group Policies/Computer Configuration/Device Guard.md
new file mode 100644
index 0000000..0e9e8a5
--- /dev/null
+++ b/Group Policies/Computer Configuration/Device Guard.md	
@@ -0,0 +1,5 @@
+# Device Guard
+
+`Computer Configuration\Administrative Templates\System\Device Guard`
+
+- Turn On Virtualization Based Security -> Enabled (**Only do this if you are running Windows on bare metal or with nested virtualization**)
\ No newline at end of file