mem

Microsoft Endpoint Management These are scripts that can be delieved via MEM to turn on certain features.

Onedrive KVM is outdated and can be done through Administrative templates now.

Hyper-V script is important to allow Application Guard to work.

Edit 9/15/21 Adding in my USB Device Control XML files and ORI strings for WDE/Intune Tutorial from this video: https://www.youtube.com/watch?v=XCC8zSChflQ

Official Doc: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/control-usb-devices-using-intune?view=o365-worldwide#allow-installation-and-usage-of-usb-drives-and-other-peripherals