This article describes how you can block Bluetooth Network Adapter devices in your environment.

NOTE: It's important to know to which Windows 10 version you intend to push the DLP policy. This is because DLP configuration might differ for different Windows versions.
 

1. Log on to the ePO console.
2. Go to Menu, Data Protection, and select DLP Policy Manager. 
3. Under Rule Sets, click the Rule Set that needs to be used.
4. On the DLP Rule Set page, select the Device Control tab. 
5. Click the Actions drop-down list and select New Rule, Plug and Play Device Rule.
6. On the Plug and Play Device Rule page:
   1. Enter a Rule Name.  
   2. Set the State to Enabled.
   3. Set the Severity according to your requirement.
   4. On the Condition tab, click the three dots next to Plug and Play. 
   5. Select New Item.
7. On the New Plug and Play Device definition page:
   1. Enter a name for the device definition.
   2. Under Available Properties, add the following properties:
       

      Property	Comparison type	Value
      Bus Type	Equals	Bluetooth
      Device Class	Equals	Network Adapters (Unmanaged)

   3. Click Save. Select the new device definition option and click OK.
8. On the Reaction tab, set the following:
   1. Set the Action to Block.  
   2. Click the three dots next to the User Notification, and select a notification from the list. Click OK.
   3. Select the Report Incident option.
   4. Click Save and then Close.
9. Apply the policy changes through Policy Assignment.

Now, your Endpoints block the Bluetooth Network Adapters.
 

1. Log on to the ePO console.
2. Go to Menu, Data Protection, and select DLP Policy Manager. 
3. Under Rule Sets, click the Rule Set that needs to be used.
4. On the DLP Rule Set page, select the Device Control tab. 
5. Click the Actions drop-down list and select New Rule, Plug and Play Device Rule.
6. On the Plug and Play Device Rule page:
   1. Enter a Rule Name.  
   2. Set the State to Enabled.
   3. Set the Severity according to your requirement.
   4. On the Condition tab, click the three dots next to Plug and Play. 
   5. Select New Item.
7. On the New Plug and Play Device definition page:
   1. Enter a name for the device definition.
   2. Under Available Properties, add the following properties:
       

      Property	Comparison type	Value
      Bus Type	Equals	Bluetooth
      Device Instance ID (Advanced)	Contains	BTH\MS_RFCOMM
      Device Instance ID (Advanced)	Contains	BTHENUM\DEV
      Device Description	Contains	RFCOMM Protocol TDI

   3. Click Save. Select the new device definition checkbox and click OK.
8. On the Reaction tab, set the following:
   1. Set the Action to Block.  
   2. Click the three dots next to the User Notification, and select a notification from the list. Click OK.
   3. Select the Report Incident checkbox.
   4. Click Save and then Close.
9. Apply the rule set to a new policy and assign the same to the endpoints systems. The result of this new rule must block the built-in Windows Send and Receive files through Bluetooth in Windows 10 version 1809.
10. Apply the policy changes through the Policy Assignment.

Now, your Endpoints block Bluetooth adapters with the RFCOMM protocol. Other devices can be connected, but file transfer, headphones, and microphones can be blocked.