Most of the following methods of reducing the attack surface in your environment can be configured in a number of ways, including via Intune, System Center Configuration Manager (SCCM), group policy, the Windows Security app, Windows features settings, Windows Management Instrumentation (WMI), and PowerShell.

We'll cover the following tactics of reducing your attack surface:

• Install application guard
• Enable application control
• Exploit protection
• Network protection
• Controlled folder access
• Network firewall