[tacticalogic]

This is the real reason Microsoft refuses to secure their operating systems, because it’s not really that difficult for them to do that, namely quit making all login ids superuser by default and forbidding the execution of software that hasn’t been installed by a superuser into a secured location, and perhaps setting and enforcing security (and crapware avoidance) standards for major software vendors.

Apparently whoever came up with Device Guard didn't get that memo.

[catnipman]

“Apparently whoever came up with Device Guard didn’t get that memo.”

Device Guard is just another bag on the side. It’s not real security: real security is built-in right from the start.