All settings are on by default, and help make sure that the %BRAND_WINDOWS_10% devices connecting to your domain are protected. ...