All Windows PCs come with a built-in security feature called Windows Defender Application Control (WDAC), which helps prevent unauthorized software from running by allowing only trusted applications.
Windows Defender features more than antimalware protection. For enterprise users, it includes a host of advanced features, including Advanced Threat Protection, Exploit Guard and Application Guard.