Forum Discussion
Microsoft defender firmware protects
I have set up firmware protection by group policy editor and re-boot the device, but Microsoft defender show that it is turn off, is there anything that I should change?
Ensure that the correct policies are enabled:
Open gpedit.msc.
Navigate to Computer Configuration > Administrative Templates > System > Device Guard.
Find "Turn On Virtualization Based Security".
Make sure it is set to Enabled.
Under options, verify that "Secure Boot" and "DMA Protection" are enabled as needed.