...
- Restrict Local Administration Tools
- Enforce User Access Control settings
- Enforce Logon Message
- Disable USB storage ( Write or Read/Write )
- Disable optical media ( Write or Read/Write )
- Disable installers
- Disable common cloud storage
- Prevent Social Media access
- Prevent Public Webmail access
- Scheduled secure free-space delete
- Ransomware Honeypot
- Alert on Unencrypted Disk (can be applied to laptops only)