Microsoft has launched one of the biggest features ‘Device Guard Security’ in Windows 10, and the feature will be powerful security and management options when it comes to talking about the enterprise space.
The company has declared in-depth details about how it will offer better security for Windows 10 business customers like more information on the Device Guard feature, which is especially designed to lock down devices when malware is detected.
Previously, we heard about the all new Windows Hello and Microsoft Passport that relate to user authentication on systems, but now the company is talking about a new feature that called Device Guard.
The all new Device Guard is one such feature, which integrates software and hardware security measures in order to check for a program’s digital signature and find out that whether it is a trusted source or not.
Different companies are capable of locking down devices and ensuring only approved software gets installed using Device Guard.
While launching this exclusive feature, Microsoft says, “To help protect users from malware, when an app is executed, Windows makes a determination on whether that app is trustworthy, and notifies the user if it is not.
Device Guard can use hardware technology and virtualization to isolate that decision making function from the rest of the Windows operating system, which helps provide protection from attackers or malware that have managed to gain full system privilege.
This gives it a significant advantage over traditional anti-virus and app control technologies like AppLocker, Bit9, and others which are subject to tampering by an administrator or malware.
A software may be signed by the Windows Store, Microsoft, by the company or any other source, which the company sees to be trustworthy. However, both modern as well as classic Win32 applications may be signed and deployed.
However, it is nothing new at all and Microsoft is adamant that by integrating virtualization technology with hardware protection and separating the authentication technology with hardware protection and separating the authentication system from the remaining of Windows.
The company also creates an innovative way to test an application’s signature. Moreover, Toshiba, Acer, Lenovo and HP are some of the OEMs that is endorsing Device Guard on their devices.
However, the Device Guard will be just one single piece of the puzzle like regular antivirus software and Windows Hello, Microsoft Passport and other features must come together and provide an excellent security to enterprise customers.
Stay connected with us to learn more about Windows 10 as we will keep updating more information as Build is just around the corner!
However, if you want to get support from professional Windows developer to discuss your project or requirements, you can get in touch with us!