Now we reach the final stretch - the domain configuration is complete, we’ve installed the client side extensions on our workstations or servers, now they just need a policy that tells the CSE what to do!
As we plan for our migration from Windows 7 to Windows 10 as an organization we know that we want to take advantage of Credential Guard and Device Guard in our new OS. ConfigMgr, we also know that this requires us to make a few configuration changes to our workstation “BIOS” configuration - namely converting from BIOS to UEFI, enabling SecureBoot, and enabling the virtualization technologies. Our organization has about 2300 workstations, and at least 1800 of them are physical devices…
First a little disclaimer… you should be backing up your data. If you’re not, stop reading and go work out a backup strategy.