Chapter 8: Keeping Your Windows Client Secure

In this chapter, you will learn about the current best practices that are used to keep Windows clients secure. So far, we have covered many foundational topics that must be in place to have a robust and well-rounded security program, including administration and management tools, hardware-based security, network security, and the importance of protecting your identity. This chapter will cover specific features, policies, and configurations that will directly secure and harden the endpoints that make up some of your most vulnerable assets.

Securing the Windows client is a critical task, and it requires ongoing operational support to provide the latest available protection for devices as vulnerabilities continue to evolve. We will cover how to keep your Windows devices updated using Windows Update for Business, enforcing policies with Configuration Manager and Intune, enabling encryption with BitLocker, using Windows Hello for Business...