Protect unmanaged Windows 10 PCs and Macs

You can manage Windows 10 PCs and Macs by enrolling them in Microsoft Intune, which allows you to ensure they're healthy and secure before accessing data in your environment. However, many campaigns and small businesses include staff who bring their own devices (BYOD), which will not be managed by the organization. For these unmanaged PCs and Macs, use this article to ensure that minimum security capabilities are configured.

Protect a computer running Windows 10 or a Mac

If your Windows 10 PC or Mac is not managed by your organization, be sure to configure these security capabilities.

Turn on device encryption

Device encryption is available on a wide range of Windows devices and helps protect your data by encrypting it. If you turn on device encryption, only authorized individuals will be able to access your device and data. See turn on device encryption for instructions.

If device encryption isn't available on your device, you can turn on standard BitLocker encryption instead. (BitLocker isn't available on Windows 10 Home edition.)

Protect your device with Windows Security

If you have Windows 10, you'll get the latest antivirus protection with Windows Security. When you start up Windows 10 for the first time, Windows Security is on and actively helping to protect your PC by scanning for malware (malicious software), viruses, and security threats. Windows Security uses real-time protection to scan everything you download or run on your PC.

Windows Update downloads updates for Windows Security automatically to help keep your PC safe and protect it from threats.

If you have an earlier version of Windows and are using Microsoft Security Essentials, it's a good idea to move to Windows Security. For more information, see help protect my device with Windows Security.

Turn on Windows Firewall

You should always run Windows Firewall even if you have another firewall turned on. Turning off Windows Firewall might make your device (and your network, if you have one) more vulnerable to unauthorized access. See Turn Windows Firewall on or off for instructions.