# Device Control Settings

Configure device and file auditing, report retention and archiving, and email alerts for blocked devices and temporary-access requests.

## Configure audit monitoring

Choose the device types and file actions to track, then define how long activity logs remain available.

### Open Audit Settings

Navigate to **Settings → Audit Settings** to configure event tracking for monitoring and compliance.

### Device Audit Report

The Device Audit Report records recently connected devices and blocked devices that attempted access. Configure the retention period and select the device types to monitor.

![Device Audit Report settings in Device Control Plus](https://www.manageengine.com/products/desktop-central/help/images/dc-settings1.png)

Select monitored device types and configure device-log retention.

**Note**

Selected device types are audited even when no policy is deployed, so monitoring does not depend on policy deployment.

**Warning**

When this option is disabled, audit data is retained for only **one day**, and all recorded data is erased automatically at the end of each day.

### File Audit Report

The File Audit Report contains file-tracing details, including the accessed file, username, computers, and devices. Configure the retention period and select the file actions to monitor.

![File Audit Report settings in Device Control Plus](https://www.manageengine.com/products/desktop-central/help/images/dc-settings2.png)

Choose monitored file actions and configure file-log retention.

**Warning**

When this option is disabled, audit data is retained for only **one day**, and all recorded data is erased automatically at the end of each day.

## Retain shadow and archive reports

Control how long shadow-copy records remain available and move selected audit reports into file-based archives.

### File Shadow Report

The File Shadow Report includes shadow-copy details, the network share path, username, computers, and devices. Configure how long the report records should be retained.

![File Shadow Report settings in Device Control Plus](https://www.manageengine.com/products/desktop-central/help/images/dc-settings3.png)

Configure retention for file-shadow records.

**Warning**

When this option is disabled, audit data is retained for only **one day**, and all recorded data is erased automatically at the end of each day.

### File Archive Report

Enable the File Archive Report to retain selected reports for an additional specified period beyond their individually configured retention periods.

Archived reports are removed from the database server and stored at the configured file path for the defined period. Enter the archive retention period and storage path.

![File Archive Report settings in Device Control Plus](https://www.manageengine.com/products/desktop-central/help/images/dc-settings4.png)

Set the archive location and report-retention period.

## Configure email notifications

Notify administrators about blocked-device connections and temporary-access requests.

### Add alert recipients

Alert settings send emails when a blocked device connects to a managed computer or when a temporary-access request is submitted.

![Alert Settings for Device Control email notifications](https://www.manageengine.com/products/desktop-central/help/images/dc-settings5.png)

Configure the administrators who receive Device Control alerts.

1. Navigate to **Settings → Alert Settings**.
2. Enter the administrators' email addresses, then select **Save**.

## Related

- [Managing Trusted Devices](https://www.manageengine.com/desktop-management-msp/help/device-control/trusted-devices.html)
- [Temporary Access Management](https://www.manageengine.com/desktop-management-msp/help/device-control/temp-access.html)
- [Audit & Reports](https://www.manageengine.com/desktop-management-msp/help/device-control/dc-reports.html)