Microsoft Windows 10 Enterprise

Windows 10 Enterprise: Windows 10 for centrally managed workstations

Windows 10 Enterprise is the edition of Windows 10 for businesses and organisations whose PCs are set up and managed by an IT department. In addition to drive encryption and virtualisation, it includes features for additionally securing credentials, specifying the permitted programs and restricting workstations to a specific task. The edition is therefore aimed at companies with their own system administration, training rooms and devices with a defined purpose.

Protection of credentials and applications

Credential Guard protects secrets such as NTLM password hashes and Kerberos tickets with virtualisation-based security. The services that access this data run in an isolated environment so that only privileged system software can reach them. This makes attacks in which stolen credentials are reused in the corporate network more difficult. Credential Guard requires the 64-bit version, UEFI firmware version 2.3.1 or later, enabled virtualisation extensions with SLAT and an IOMMU (Intel VT-d or AMD-Vi).

With AppLocker, administrators specify which programs, scripts, installation packages and DLL files users may run. This makes it possible, for example, to ensure that only approved software starts on office workstations. BitLocker encrypts the drives of the PC so that stored data cannot easily be read without unlocking, for example after a notebook has been lost. IT should keep the recovery key created in the process separately from the device.

Management and working environment

The Managed User Experience can be used to customise and lock the interface in order to restrict a device to one task, for example as a kiosk or as a computer in a training room. Administrators can define the Start menu, hide commands such as Shut down or Sign out and prevent changes to Start and the taskbar.

App-V provides applications as centrally managed services without them having to be installed on the individual devices. UE-V stores personal Windows and program settings on a network share and transfers them to the device currently in use at sign-in, even after a hardware replacement. For access on the go, Windows 10 Enterprise can be used as a client for DirectAccess, which requires an appropriately configured server in the corporate network. Hyper-V provides virtual machines for tests or older applications and requires the 64-bit version, a processor with SLAT support and at least 4 GB of memory.

Buy Windows 10 Enterprise: licence and scope of delivery

You receive a product key for activating Windows 10 Enterprise on one PC. Installation is possible as a 32-bit or 64-bit version; Credential Guard and Hyper-V require the 64-bit version. The scope of delivery includes:

• the product key for Windows 10 Enterprise
• the download link for the installation file (all downloads are also available under Software Download)
• instructions for installation and activation (see also Guides and FAQ)
• the invoice with VAT shown separately

Once your payment has been received, your product key is displayed directly on the order confirmation page and also sent to you by email. After that, you can retrieve it again at any time: with a customer account under My Product Codes, without a customer account via the Guest Portal.

If you have any questions about installation or activation, our Support team is available around the clock by email. For several workstations, offers for businesses, schools and public authorities are available in the B2B Area. You will find further editions in the category Windows 10 and under Operating Systems.

System requirements

Minimum requirements according to Microsoft. The additional requirements mentioned above apply to Credential Guard and Hyper-V.