Home → Best Practices → Network Security → Client Security
1.1. Client Security
Must Have Practices Should have endpoint protection installed on all managed devices MDM and/or GPO should be used to manage policies that ensure a secure client End users should backup their data Network admins should provide a means to store the backup data Training should be provided to end users Patching should be completed for the OS and any installed 3rd party applications Best Practices Software Restriction Policies (Windows GPO) Computer Configuration => Policies => Windows Settings => Security Settings =>Software Restriction Policies No Local Admin rights for users Use approved applications list through MDM for self-service software installations Use drive encryption