Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM

Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM

Written By Anoop C Nair
Last Updated August 5, 2024
Posted In Adaptiva
SHARE

Let’s learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM. A few years ago, a Windows machine was protected only by antivirus software with malware/spyware protection. This world is changing now, and cyber attacks are getting more sophisticated.

I don’t believe that only antivirus and malware/spyware solutions can help us protect corporate devices. As you know, Windows 10 is redefining how we think about security. With TPM and UEFI, hardware can plug some of the holes attackers use to compromise systems.

Secure Windows 10 Devices – Of course, these capabilities are just part of a sophisticated solution that involves countless security enhancements to Windows 10 itself, such as improved identity and access control, cloud security integration, and containerization. Windows 10 delivers an unprecedented suite of capabilities to the enterprise.

Now, it’s up to you as IT systems administrators to use these new features correctly and help keep your company safe. To that end, Microsoft  TechNet has an excellent overview here. Adaptiva has provided some background and how-to information in their recent Top 5 Security Best Practices for Windows 10 in the Enterprise report.

Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM

Most of the topics covered below can be easily implemented using modern management methods, such as OMA-URI via Intune/SCCM. The report covers some of these topics.

Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM - Fig.1
Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM – Fig.1

Windows Information Protection

Want to keep your company’s confidential product roadmap from being sent from an employee’s private email or placed in their personal Dropbox account? Microsoft is solving that challenge through containerization with WIP. One of my blog posts explains how to create WIP/EDP policies via Intune and SCCM.

BitLocker

Imagine a future where part of your encryption key is stored in a system’s hardware and another in the software. If you run a TPM chip with BitLocker, that future is a reality today.

It makes life easier for users because they get this extra level of security while only entering their Windows login, not a separate encryption key. But it makes life hard for attackers, who would need both the hardware and software keys (or an extremely long recovery key) to break in.

UEFI with Secure Boot

UEFI changes everything because it enables secure boot. When your OS loads, it has to be trusted by the PC manufacturer, or it won’t run. The same goes for drivers and more—if they are not trusted, they don’t run. This makes life a lot harder for people looking to compromise your OS.

Credential Guard

We’ve all heard of “pass the hash” attacks, where security credentials are snagged and used for unfriendly purposes. Credential Guard helps prevent these and some other attacks.

Of course, securing the boot process, credentials, and hard disk is not enough. If one application is replaced with an imposter or contains malware or IS malware, a hacker has the keys to your enterprise’s front door. Device Guard prevents unauthorized applications from running.

Vulnerability is not An Option
Suppose you are up to speed on and implementing all these technologies correctly; great! If not, you should invest some time to download the guides and reports out there and get up to speed on your security options with Windows 10 today.
Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM – Table 1
Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM - Fig.2
Learn How to Secure Windows 10 Devices in a Modern Sophisticated Way Device Management SCCM – Fig.2

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Adaptiva

Autonomous Endpoint Management AEM | New 3rd Party Patching Solution from Adaptiva

According to Gartner’s latest research, Autonomous Endpoint Management (AEM) is one of the areas where the Digital Workplace Infrastructure and Operations leaders would like to put more effort. Adaptiva announced a new 3rd Party Patching Tool Adaptiva Endpoint Patching. Microsoft and all the other vendors are concentrating more on Automatic patching solutions (e.g., Windows Autopatch) […]

VM Vidya M A 4 min read
Adaptiva

Managing Security Risks of Windows Endpoints Survey Report

Let’s look at the topic of Managing Security Risks of Windows Endpoints. The survey was conducted by Ponemon Institute and sponsored by Adaptiva. As per Ponemon Institute, 629 IT and IT security practitioners in the United States. We think IT professionals and system admins from the rest of the world also agree with the survey […]

VM Vidya M A 3 min read
Adaptiva

Endpoint Security is the Most Important Pillar of Security Investments

Let’s find out why Endpoint Security is the Most Important Pillar of Security Investments. It’s a known fact that humans are one of the weakest links of the entire security poster. As per the new reports, the biggest threat for most organizations is malware attacks. Human errors are ranked as the second biggest threat to […]

VM Vidya M A 3 min read
Adaptiva

Modern Management and Peer to Peer Technology

Let’s learn how VMware Workspace ONE works with Windows 10. Windows 10 modern management is a new mantra for all organizations. More details about VMware’s management options. VMware Workspace ONE is a powerful management platform that enables IT administrators to efficiently control end users’ mobile devices and cloud-hosted virtual desktops and applications. This can be […]

AC Anoop C Nair 3 min read