Define Device Control evidence data remote location

Supported on: At least Windows Server 2016, Windows 10 Version 1607

Registry

HKLM Software\Policies\Microsoft\Windows Defender\Device Control

Options

DataDuplicationRemoteLocation text

Description

Define evidence file remote location, where Device Control service will move evidence data captured. When configuring this setting, ensure that Device Control is Enabled and that the provided path is a remote path the user can access.