# Kernel DMA Protection

`Computer Configuration\Policies\Administrative Templates\System\Kernel DMA Protection`

- Enumeration policy for external devices incompatible with Kernel DMA Protection -> Enabled -> Block all