Credentials Protections
- Local Administration Password Solution sets a unique local password on domain members and changes it on a regular basis. Passwords stored in Active Directory and protected by ACL.
- LSA Protection harden the LSASS process by using the Protected Process technology.
- Credential Guard prevents passwords, hashes and tickets from being stolen by using Virtualization-based Security.
- Protected Users is a global security group and its primary function is to prevent users' credentials being abused on the devices where they log in.