Top 10 enterprise features that are available in the Fall Creators Update

Windows 10 is now running on more than 500 million monthly active devices. As enterprises are beginning to move their existing PCs to Windows 10, it will be gaining more momentum. Last week, Microsoft started the roll-out of Windows 10 Fall Creators Update to its customers. Apart from several consumer facing features, this update also includes several security and management features that are targeted towards enterprise customers. Read about the top 10 enterprise features that are available as part of the Windows 10 Fall Creators Update below.

1. In large organizations, whenever a new PC is purchased, it can’t be handed over to employees directly. IT teams will generally configure the device with a custom image of Windows OS based on their organizations needs. Windows AutoPilot Deployment is a new cloud service that will allow IT to customize the Windows 10 out of box setup experience using a cloud configuration, delivering a self-service deployment experience with new Windows 10 devices. Read more about it here.
2. When users enable Windows Defender Application Guard for Microsoft Edge, they will notice an indicator on the title bar of Edge, which shows that the feature is enabled. Application Guard blocks a website from accessing the local storage, memory, installed apps, and corporate network endpoints — securing the user from any kind of attacks. Microsoft is actually isolating sites that aren’t trusted in a different instance of Windows (made possible by Hyper-V) with a separate copy of the kernel — which means it won’t have any access to the main OS environment. Read more about it here.
3. Windows Defender Advanced Threat Protection helps enterprises detect, investigate, and respond to advanced attacks on their networks. It now provides a ‘single pane of glass’ view across the Windows preventative protection security stack, for better and more manageable protection, detection, investigation and response. The new security analytics dashboard provides recommendations to improve the security posture. Read more about it here.
4. Windows Defender Exploit Guard is a new set of intrusion prevention capabilities and the four components of Windows Defender Exploit Guard are designed to lock down the device against a wide variety of attack vectors and block behaviors commonly used in malware attacks, while enabling enterprises to balance their security risk and productivity requirements. Read more about it here.
5. Controlled folder access locks down folders, allowing only authorized apps to access files. Unauthorized apps, including malicious executable files, DLLs, and scripts are denied access to folders. It can be enabled in Windows Defender Security Center app in Windows 10. In enterprise environments, Controlled folder access can also be enabled and managed using Group Policy, PowerShell, or configuration service providers for mobile device management.
6. Windows Defender Antivirus now comes with new instant protection technology using AI built on top of the Microsoft Intelligent Security Graph. Read more about Windows Defender Antivirus here.
7. Windows Defender Application Control uses the same application control technology used in Windows Defender Device Guard, but it does not need hardware, driver, and kernel mode software requirements. It can run on any Windows 10 capable device with Windows 10 Enterprise and uses the Microsoft Intelligent Security Graph (ISG) to automate the application control list making management easy. Read more about it here.
8. Windows Assigned Access now has the ability to customize and lock down Windows devices to specific tasks or experiences for Firstline Workers and kiosks. And IT can maintain these devices remotely using cloud-based tools. Organizations can now quickly set up and maintain locked down single purpose devices with improved tools, enabling single app and multi-app uses.
9. Windows Hello improvements including new factors such as proximity, location, dynamic lock and Intel Authenticate support make it easier to deploy and more secure. Windows Hello is being used by over 37 million users, and more than 200 commercial customers have started deployments of Windows Hello for Business. Learn more about it here.
10. Windows 10 Subscription Activation enables Windows 10 Pro devices to seamlessly step up to Windows 10 Enterprise without on-premise infrastructure, product keys or reboots based simply on an entitled user logging on. Read more about it here.

You can learn more about security features included in Fall Creators Update release here.