Merge pull request #8491 from joinimran/master

Updated Instruction and screenshots.

windows/security/threat-protection/device-control/control-usb-devices-using-intune.md

@@ -266,29 +266,17 @@ Affected file types include executable files (such as .exe, .dll, or .scr) and s
 
 These settings require [enabling real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus).
 
-1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/).
-2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**.
-
-   ![Create device configuration profile](images/create-device-configuration-profile.png)
-
+1. Sign in to the [Microsoft Endpoint Manager](https://endpoint.microsoft.com/).
+2. Click **Devices** > **Windows** > **Configuration Policies** > **Create profile**. 
+![Create device configuration profile](images/create-device-configuration-profile.png)
 3. Use the following settings:
-
-   - Name: Type a name for the profile
-   - Description: Type a description
-   - Platform: Windows 10 or later
-   - Profile type: Endpoint protection
-
-   ![Create endpoint protection profile](images/create-endpoint-protection-profile.png)
-
-4. Click **Configure** > **Windows Defender Exploit Guard** > **Attack Surface Reduction**.
-
+   - Platform: Windows 10 and later 
+   - Profile type: Device restrictions
+  ![Create endpoint protection profile](images/create-endpoint-protection-profile.png)
+4. Click **Create**.  
 5. For **Unsigned and untrusted processes that run from USB**, choose **Block**.
-
    ![Block untrusted processes](images/block-untrusted-processes.png)
-
-6. Click **OK** to close **Attack Surface Reduction**, **Windows Defender Exploit Guard**, and **Endpoint protection**.
-
-7. Click **Create** to save the profile.
+6. Click **OK** to close settings and **Device restrictions**.
 
 ### Protect against Direct Memory Access (DMA) attacks