Summary
The key to good security is taking a defense-in-depth approach. Choosing an appropriate security strategy itself can be a challenge. The Security Compliance Toolkit provides guidance on recommended configurations settings. AppLocker allows organizations to restrict to devices to only run specified applications, and can be managed using Group Policy. Tools like Windows Device Health attestation can help ensure devices are configured correctly before accessing resources. Windows Information Protection helps prevent users from performing actions that risk the security of certain data. Microsoft Defender for Endpoint provides a platform for enterprise organizations to protect themselves against threats.