Enhanced Security Policy Groups

Allow Activation Lock

Allow Activation Lock (iOS)

Allow Standard Users To Approve Screen Sharing & Recording

Application Privacy Preferences - Google Chrome Access to User Files

Disable Guest Account

FileVault 2

Local Firewall Controls

Lock Screen

Passcode Restrictions (iOS)

Require Passcode for User-Enrolled Devices (iOS)

App Notification Settings - Google Chrome

App Store Restrictions

Block Manual Profile Installation

Disable Analytics (iOS)

Restrict Sharing Between Managed and Unmanaged Apps Policy (iOS)

Disable iCloud Private Relay

Gatekeeper Control

Login Window Text

Restrict Erase All Contents and Settings

Restrict Sharing Between Managed and Unmanaged Apps

Supervised iOS Restrictions

System Preferences Control

Block iCloud Access

Disable Content Caching

Disable Siri

Login Window Controls

Allow The Use of Biometrics

BitLocker Full Disk Encryption

Built-in Administrator Account Status

Built-in Guest Account Status

Display User Info When The Session Is Locked

Do Not Display Last Username on Logon Screen

Lock Screen

Restrict Control Panel Access

Windows Defender

Google Chrome Browser Force-Installed Extension List

Windows Firewall

Device Installation

Disable Cortana

Do Not Require CTRL+ALT+DEL on logon screen

FindMyDevice

Message Text For Users Attempting To Log On

Remote Assistance

Removable Storage

Turn Off Autoplay

Control Panel Display

Disable Windows Store Application

Logon Behaviors

Rename Local Administrator Account Policy

Software Restrictions

Check Disk Encryption

Lock Screen

Disable USB Storage

File Ownership and Permissions

Network Parameters

Secure Boot Settings

SSH Root Access

SSH Server Security Enforcement

Additional Process Hardening

Disable Forbidden Services

Disable Unused Filesystems

Partition and Mount Options

Services Hardening: Service Clients