Windows Endpoints

Baseline expectations for every DTC-managed Windows endpoint, workstation or server.

Quick Machine Recovery — always on

Windows Quick Machine Recovery is enabled on every managed endpoint, so a device stuck in a boot failure after a bad update can pull a remediation from Windows Update without a technician on site. Microsoft: Get started with Quick Machine Recovery.

Where the rest lives

• Workstation Baseline — what every managed workstation gets
• Security Standards — EDR, anti-malware, encryption, DNS filtering, application control
• Server Standards — server-specific baseline
• How the Pillars Work — Baselines & Industry Profiles — patch speed and platform differences by industry