Feedback Editja

Secure Windows devices

  • Artiklu
  • 2 minuti biex taqra

The objective here is to configure settings that are part of the default device policy for Windows 10 or 11. All users who connect a Windows device, including mobile devices and PCs, by signing in with their work account will automatically receive these settings. We recommend that you accept the default policy during setup and add policies later that target specific groups of users.

Before you begin

Before you can set up Windows devices for Microsoft 365 Business Premium users, make sure all the Windows devices are running Windows 10 Pro, version 1703 (Creators Update) or Windows 11 Pro.

Windows 10 Pro (or Windows 11 Pro) is a prerequisite for deploying Windows 10 Business, which is a set of cloud services and device management capabilities that complement Windows 10 Pro and Windows 11 Pro, and enable the centralized management and security controls of Microsoft 365 Business Premium.

Learn more about requirements for Microsoft 365 Business Premium.

Windows 10 Pro and Windows 11 Pro

If you have Windows devices running previous versions of Windows, such as Windows 7 Pro, Windows 8 Pro, or Windows 8.1 Pro, your Microsoft 365 Business Premium subscription entitles you to upgrade those devices to Windows 10 Pro or Windows 11 Pro.

For more information on how to upgrade Windows devices, see the following articles:

Secure your Windows 10 and 11 devices

By default all settings are On. The following settings are available:

Setting
Description
Help protect PCs from viruses and other threats using Microsoft Defender Antivirus
Requires that Microsoft Defender Antivirus is turned on to protect PCs from the dangers of being connected to the internet.
Help protect PCs from web-based threats in Microsoft Edge
Turns on settings in Edge that help protect users from malicious sites and downloads.
Help protect files and folders on PCs from unauthorized access with BitLocker
BitLocker protects data by encrypting the computer hard drives and protect against data exposure if a computer is lost or stolen. For more information, see BitLocker FAQ.
Turn off device screen when idle for this amount of time
Makes sure that company data is protected if a user is idle. A user may be working in a public location, like a coffee shop, and step away or be distracted for just a moment, leaving their device vulnerable to random glances. This setting lets you control how long the user can be idle before the screen shuts off.

Next objective

Manage Windows devices