Set the retention period for files in the local device control cache

Supported on: At least Windows Server 2016, Windows 10 Version 1607

Registry

HKLM Software\Policies\Microsoft\Windows Defender\Device Control

Options

DataDuplicationLocalRetentionPeriod decimal - range 0-10000

Description

This policy setting determines how long device control retains files for evidence in its local cache on the device. Device control keeps a file in its local cache only if it is unable to upload the file to a designated network share or Azure storage. By default, device control retains files in its local cache for 60 days.