ASD's Blueprint for Secure Cloud

Windows Hardening

This section describes the design decisions associated with Windows Defender Application Control on Windows 10 and 11 endpoints configured according to guidance in ASD's Blueprint for Secure Cloud.

Estimated reading time: 14 minutes

The following design components apply to the hardening of Microsoft Windows 10 21H1 and above, including Windows 11. The Windows security settings detailed in this section are based on Microsoft best practice and ASD’s Hardening Microsoft Windows 10 version 21H1 Workstations guidance.

Security & Governance




  • None identified

Do you have a suggestion on how the above page could be improved? Get in touch! ASD's Blueprint for Secure Cloud is an open source project, and we would love to get your input. Submit an issue on our GitHub, or send us an email at

Acknowledgement of Country icon

Acknowledgement of Country
We acknowledge the Traditional Owners and Custodians of Country throughout Australia and their continuing connections to land, sea and communities. We pay our respects to them, their cultures and their Elders; past, present and emerging. We also recognise Australia's First Peoples' enduring contribution to Australia's national security.

Authorised by the Australian Government, Canberra