# Kernel DMA Protection

`Computer Configuration\Administrative Templates\System\Kernel DMA Protection`

Enumeration policy for external devices incompatible with Kernel DMA Protection -> Enabled -> Block all