# Configuring Security Policies

## Table of Contents

- [What are security policies?](#what-are-security-policies)
- [What are the default security policies offered by Endpoint Central?](#what-are-the-default-security-policies-offered-by-endpoint-central)
- [How to configure security policies?](#how-to-configure-security-policies)

## What are security policies?

**Security policies** refer to a framework of restrictions that are imposed upon the users and computers in the network to ensure that they comply with the security guidelines set within the organization.

## What are the default security policies offered by Endpoint Central?

The Security Policies configuration in Endpoint Central provides three default policies namely:

1. System Security Policies

   - System
   - MMC Snap-ins
   - Task Scheduler
   - Windows Installer
   - Control Panel

2. Browser Security Policies

   - Internet Explorer
   - Network

3. Desktop Security Policies

   - Desktop
   - Active Desktop

To know more about the security policies offered by Endpoint Central, click [here](https://www.manageengine.com/products/desktop-central/help/misc/windows_security_policies.html#Windows-Security-Policies)

![security policies for users in endpoint central](https://www.manageengine.com/products/desktop-central/help/images/security-policies-user.png)

## How to configure security policies?

1. In Endpoint Central Console, navigate to **Configurations tab** --> **Add Configurations** --> **Configurations** --> **Windows**
2. Select **Security Policies** and choose **User**
3. Specify the **Name** and **Description** for the configuration.
4. In the configure security policies criteria, you have three options to enable, disable and not configure security policies for the default security policies.
5. Define the **Target**
6. Specify retry options if required and deploy the configuration.
7. You can also enable notifications to receive emails based on the specified frequency.
8. Click on the **Deploy** button to deploy the Security Policies configuration in all the targets.
9. To save the configuration as draft, click **Save as**

You have successfully configured Security Policies for Windows machines.