Intune already includes predefined security rules to make the Windows client secure. These can be easily applied via the “Endpoint Security” section.