Installing and Configuring Windows 10: 70-698 Exam Guide

Enabling Device Guard

To enable Device Guard on your Windows 10 computer using Local Group Policy Editor, complete the following steps:

1. Press the Windows key + R to open Run.
2. Enter gpedit.msc and press Enter.
3. In the Local Group Policy Editor window, expand Computer Configuration | Administrative Templates | System | Device Guard and then, on the details pane, double-click Turn On Virtualization based Security (see Figure 14.6):

Figure 14.6. Enabling Device Guard in Windows 10

4. In the Turn On Virtualization based Security window, check the Enabled option.
5. In the Options section, select the Secure Boot option for Select Platform Security Level ...