25.07.2017 Views

MICROSOFT_PRESS_EBOOK_INTRODUCING_WINDOWS_10

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

FIGURE 15-7 By using Delivery Optimization policies, you can control peer-to-peer delivery of Windows apps and<br />

updates on your corporate network.<br />

Security policies<br />

The list of security policies available for a Windows <strong>10</strong> PC goes on for many pages, with administrators<br />

having fine-grained control over every aspect of the system. Most of these policies in Windows <strong>10</strong><br />

are extensions of previously available policies, including many that were first made available in the<br />

Windows 8 and 8.1 releases.<br />

The few new policies in this group for Windows <strong>10</strong> are esoteric but interesting.<br />

Under Computer Configuration > Administrative Templates > System > Mitigation Options, for<br />

example, you’ll find a new Untrusted Font Blocking setting, which prevents users from loading any font<br />

files except those that are properly installed in the secured Fonts folder.<br />

Another new policy is located under Computer Configuration > Administrative Templates ><br />

Windows Components\BitLocker Drive Encryption\Operating System Drives. By enabling the Configure<br />

Pre-boot Recovery Message And URL policy setting, you can supply a custom recovery message or<br />

replace the existing URL displayed on the pre-boot key recovery screen when the OS drive is locked.<br />

184 CHAPTER 15 What’s new in Group Policy in Windows <strong>10</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!