Boot...Mar 07, 2018 · Windows 10 environment for every endpoint state Maximize Firmware-Based Security Trusted Platform Module TPM Attestation Secure 10 On-Chip Cryptography and

Window 10 Security Primer by

offline_

Boot

BitLocker

Encrypt Fixed Drives

BitLocker To Go

Encrypt Removable Drives

Logon

Password

Running

Learn More

4010 Lake Washington Blvd NE

Suite 200

Kirkland, WA 98033

+1 (425) 823-4500

[email protected]

adaptiva.com

/adaptiva

/adaptiva

/company/adaptiva

A quick reference guide of key Microsoft-related tools, features, and technologies to secure your Windows 10 environment for every endpoint state

Maximize Firmware-Based Security

Trusted PlatformModule

TPM Attestation Secure 10

On-Chip Cryptographyand Security

AuthenticateDevices

Migrate from BIOSto UEFI

Control theBoot Process

UEFI

Protect Against Rootkits and Bootkits

Secure Boot Trusted BootEarly LaunchAnti-Malware

Prevent Windows Bootloader Tampering

Prevent Tampering with WindowsKernel and Components

Block UntrustedDrivers

Log Boot Process forRemote Attestation

Measured Boot

Windows Hellofor Business

Kerberos ArmoringCompound

Authentication

Replace Passwordswith Biometric or PIN

Protect TokensDuring Exchange

Authenticate BothUser and Device

Deny Access toInsecure Systems

Windows DeviceHealth Attestation

AccountLockout

TPMLockout

Lock User Out Per Policy

Software Devices Data Cyber Defense

Prevent Unauthorized Changes

Allow/DenyRunning Applications

AppLocker

Separate Business Datafrom Personal Data

Windows InformationProtection

Control File Access Based onUse and Device Attributes

Dynamic AccessControl

Block Known-DangerousContent

Windows DefenderSmartScreen

Protect System andUser Accounts against Threats

Windows DefenderCredential Guard

Harden Endpoints AgainstMalware

Windows DefenderDevice Guard

Apply Security Configuration via Group Policy/MDM

Device RestrictionPolicies

Isolate Threats viaVirtualization

Windows DefenderApplication Guard

Allow/Deny Running ApplicationsBased on Cloud Reputation

Windows DefenderApplication Control

Protect PCs from Viruses, Malare and Ransomware

Windows Defender

Restrict Inbound/OutboundNetwork Tra�c

Windows DefenderFirewall

Protect Web Activity withVirtualized Browser

Edge BrowserVirtualization

Simulate a PhysicalSmart Card

Virtual Smart Cards

Automate Security Configuration Management

Client Health

Apply SecurityPatches and Updates

OneSite

Learn more about the Adaptiva Windows 10 Accelerator Program at adaptiva.com/products

ResolveLockouts

Access PC/DiskWhen Locked Out

BitLocker Recovery

User Account Control

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10

https://docs.microsoft.com/en-us/windows/security/hardware-protection/tpm/trusted-platform-module-overview

https://docs.microsoft.com/en-us/windows/security/hardware-protection/tpm/tpm-fundamentals

https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-uefi

https://insights.adaptiva.com/2017/adaptiva-releases-bios-uefi-solution-update-speed-windows-10-migrations/

https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-secure-boot

https://docs.microsoft.com/en-us/windows/security/hardware-protection/secure-the-windows-10-boot-process#trusted-boot

https://docs.microsoft.com/en-us/windows/security/hardware-protection/secure-the-windows-10-boot-process#early-launch-anti-malware

https://docs.microsoft.com/en-us/windows/security/hardware-protection/secure-the-windows-10-boot-process#measured-boot

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan

https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-identity-verification

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-lockout-policy

https://docs.microsoft.com/en-us/windows/security/hardware-protection/tpm/manage-tpm-lockout

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-compound-authentication-and-ad-ds-claims

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-compound-authentication-and-ad-ds-claims

https://docs.microsoft.com/en-us/windows/security/threat-protection/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices

https://msdn.microsoft.com/en-us/library/windows/desktop/dn742497(v=vs.85).aspx

https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard

https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus

https://docs.microsoft.com/en-us/windows/security/threat-protection/applocker/applocker-overview

https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control

https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/dynamic-access-control

https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/windows-firewall-with-advanced-security

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-set-individual-device

https://docs.microsoft.com/en-us/microsoft-edge/deploy/security-enhancements-microsoft-edge

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview

https://docs.microsoft.com/en-us/windows/security/identity-protection/virtual-smart-cards/virtual-smart-card-overview

https://cloudblogs.microsoft.com/microsoftsecure/2017/10/23/introducing-windows-defender-application-control/

https://adaptiva.com/products/#client-health

https://adaptiva.com/products/#onesite

https://adaptiva.com/products/

https://adaptiva.com/products/

https://twitter.com/adaptiva

https://facebook.com/adaptiva

https://linkedin.com/company/adaptiva

https://adaptiva.com/

https://www.microsoft.com/en-us/download/details.aspx?id=55319

Documents

Boot...Mar 07, 2018 · Windows 10 environment for every endpoint state Maximize Firmware-Based Security Trusted Platform Module TPM Attestation Secure 10 On-Chip Cryptography and