Forum Discussion
Defender of Endpoint on Comanaged Laptop
We are testing device control feature of Microsoft Defender for Endpoint (MDE). Onboarded a laptop to MDE only (not enrolled to Intune) - created two policies in Defender portal Attack Surface red...
To check the Device Control logs, open the Event Viewer and navigate to:
Applications and Services Logs - Microsoft - Windows - Windows Defender - Operational
There you should see events related to Attack Surface Reduction and Device Control. Make sure you run the Event Viewer with administrative privileges, and you can filter the logs for specific errors or messages related to Device Control