This feature uses virtualization-based security to help protect security secrets (for example, NTLM password hashes, Kerberos Ticket Granting Tickets), that only privileged system software can access them. This helps prevent Pass-the-Hash or Pass-the-Ticket attacks. Credential Guard has the following features: Hardware-level security, Virtualization-based security, Improved protection against persistent threats, Improved manageability through Group Policy, Windows Management Instrumentation (WMI), or Windows PowerShell.
This feature is a combination of hardware and software security features that allows only trusted applications to run on a device. Even if an attacker manages to get control of the Windows kernel, he or she will be much less likely to run executable code. Device Guard can use virtualization-based security (VBS) in Windows 10 Enterprise edition to isolate the Code Integrity service from the Windows kernel itself. Even if malware gains access to the kernel, the effects can be severely limited, because the hypervisor can prevent the malware from executing code.
App Locker Management
This feature helps IT pros determine which applications and files users can run on a device (also known as “whitelisting”). The applications and files that can be managed include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.
Windows Defender Advanced Threat Protection
Windows Defender Advanced Threat Protection (ATP) enables Windows Enterprise customers to detect, investigate, and remediate advanced persistent threats and data breaches on their networks. Running alongside any anti-virus (AV) solution, Windows Defender ATP is continuously up-to-date and can help lower costs. How it protects your business from advanced threats: 1. Agentless, built into the OS. 2. Powered by the Cloud 3. Unparalleled Expertise and Data
How to get Windows 10 Enterprise:
Order Windows 10 Enterprise in the A1 digital volume
You will receive your access data via e-mail.
Download the Office applications or use them directly online.
When you purchase Windows 10 Enterprise as a Cloud solution, they get the following advantages:
Windows 10 Enterprise edition. Devices currently running Windows 10 Pro, version 1607 can get Windows 10 Enterprise Current Branch (CB) or Current Branch for Business (CBB).
Support from one to hundreds of users. Although the Windows 10 Enterprise program does not have a limitation on the number of licenses an organization can have, the program is designed for small- and medium-sized organizations.
Deploy on up to five devices. For each user covered by the license, you can deploy Windows 10 Enterprise edition on up to five devices.
Roll back to Windows 10 Pro at any time. When a user’s subscription expires or is transferred to another user, the Windows 10 Enterprise device reverts seamlessly to Windows 10 Pro edition (after a grace period of up to 90 days).
Monthly, per-user pricing model. This makes Windows 10 Enterprise E3 affordable for any organization.
Move licenses between users. Licenses can be quickly and easily reallocated from one user to another user, allowing you to optimize your licensing investment against changing needs.