New Windows 10 Security Features: Credential Guard and Device Guard
Check New Windows 10 Security Features
We offer you New Windows 10 Security Features to help you stay updated
Device Guard is a Windows 10 feature consisting of policies the administrators set to restrict prohibited apps based on those configured policies.
The Device Guard works on both user and kernel level protecting from both hardware and software threats.
Device Guard can be configured from SCCM, by Group Policy and by executing from PowerShell.
Credential Guard is a Secure Boot configuration that also needs to be enabled in the BIOS first before policies can be defined by the administrators .Once the Secure Boot is enabled in the BIOS, the administrators can then implement Device Guard and define policies using PowerShell, command prompt, and Group Policy or GPO.
Device Guard secures the hardware by verifying the firmware codes and signatures.
Read more about Device Guard and Credential Guard