diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md
index a9f85103db..dc44233f02 100644
--- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md
+++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md
@@ -21,7 +21,7 @@ You can configure Intune settings to reduce threats from removable storage such
 - [Block unwanted removeable storage](#block-unwanted-removable-storage)
 - [Protect allowed removable storage](#protect-allowed-removable-storage)
 
-Protecting allowed removeable storage requires enabling real-time protection. 
+Protecting allowed removeable storage requires [enabling real-time protection](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-antivirus/configure-real-time-protection-windows-defender-antivirus). 
 We recommend enabling real-time protection for improved scanning performance, especialy for large storage devices.  
 If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives.
 You can optionally [run a PowerShell script to perform a custom scan](https://aka.ms/scanusb) of a USB drive after it is mounted.