497198

sccm/protect/deploy-use/create-deploy-exploit-guard-policy.md

@@ -3,7 +3,7 @@ title: "Create and deploy an Exploit Guard policy"
 titleSuffix: "Configuration Manager"
 description: "Create and deploy a Windows Defender Exploit Guard policy."
 ms.custom: na
-ms.date: 11/21/2017
+ms.date: 02/15/2018
 ms.prod: configuration-manager
 ms.technology:
   - configmgr-other
@@ -13,9 +13,9 @@ ms.tgt_pltfrm: na
 ms.topic: article
 ms.assetid: 
 caps.latest.revision: 5
-author: ErikjeMS
-ms.author: erikje
-manager: angrobe
+author: mestew    
+ms.author: mstewart
+manager: dougeby
 ---
 # Create and deploy an Exploit Guard policy <!--1355468 -->
 
@@ -51,6 +51,9 @@ Managed devices must run Windows 10 1709 Fall Creators Update or later and satis
     - **Network protection:** Set network protection to block or audit access to suspicious domains.
 5.	Complete the wizard to create the policy, which you can later deploy to devices.
 
+> [!WARNING]
+> The XML file for exploit protection should be kept secure when transferring it between machines. The file should either be deleted after import or kept in a secure location.  
+
 ### Deploy an Exploit Guard policy     
 After you create Exploit Guard policies, use the Deploy Exploit Guard Policy wizard to deploy them. To do so, open the Configuration Manager console to **Assets and compliance** > **Endpoint Protection**, and then click **Deploy Exploit Guard Policy**.