A technician is troubleshooting a Windows 10 Pro laptop that is joined to an Active Directory domain and already uses BitLocker. The customer wants to enable Device Guard to lock down which applications can run, but the option is not available in the local Group Policy editor. To make Device Guard available, to which Windows 10 edition should the system be upgraded?
Device Guard is part of the virtualization-based security feature set that Microsoft only licenses with Windows 10 Enterprise (and Education). Although Windows 10 Pro (and Pro for Workstations) can join a domain and include BitLocker Drive Encryption, neither edition exposes Device Guard. Windows 10 Home lacks domain-join capability and BitLocker. Therefore, upgrading to Windows 10 Enterprise is required.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is domain binding in Windows 10?
Open an interactive chat with Bash
What are BitLocker and Device Guard?
Open an interactive chat with Bash
How does the Pro edition differ from the Enterprise edition in Windows 10?