Merge pull request #8491 from joinimran/master

Updated Instruction and screenshots.

windows/security/threat-protection/device-control/control-usb-devices-using-intune.md

@@ -266,29 +266,17 @@ Affected file types include executable files (such as .exe, .dll, or .scr) and s
 
 These settings require [enabling real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus).
 
-1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/).
+1. Sign in to the [Microsoft Endpoint Manager](https://endpoint.microsoft.com/).
-2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**.
+2. Click **Devices** > **Windows** > **Configuration Policies** > **Create profile**. 
-
+![Create device configuration profile](images/create-device-configuration-profile.png)
-   ![Create device configuration profile](images/create-device-configuration-profile.png)
-
 3. Use the following settings:
-
+   - Platform: Windows 10 and later 
-   - Name: Type a name for the profile
+   - Profile type: Device restrictions
-   - Description: Type a description
+  ![Create endpoint protection profile](images/create-endpoint-protection-profile.png)
-   - Platform: Windows 10 or later
+4. Click **Create**.  
-   - Profile type: Endpoint protection
-
-   ![Create endpoint protection profile](images/create-endpoint-protection-profile.png)
-
-4. Click **Configure** > **Windows Defender Exploit Guard** > **Attack Surface Reduction**.
-
 5. For **Unsigned and untrusted processes that run from USB**, choose **Block**.
-
    ![Block untrusted processes](images/block-untrusted-processes.png)
-
+6. Click **OK** to close settings and **Device restrictions**.
-6. Click **OK** to close **Attack Surface Reduction**, **Windows Defender Exploit Guard**, and **Endpoint protection**.
-
-7. Click **Create** to save the profile.
 
 ### Protect against Direct Memory Access (DMA) attacks