Overview: Enhanced desktop security for Windows

As an administrator, you can use enhanced desktop security for Windows® features to provide single-sign on access and Google security features to Windows 10 devices. You can also push Windows settings and wipe device data from the Admin console.

System requirements

  • Windows 10 Professional, Business, Enterprise, or Education version 1803 or later

Add SSO and Google sign-in security to Windows devices

This feature is available with all G Suite and Cloud Identity editions. Device must have Chrome Browser 81 or later.

When you install Google Credential Provider for Windows (GCPW) on devices, users can sign in to their device using their Google credentials. Once authenticated on the device, users receive single sign-on access to Google services and other applications and all the security features their Google Account provides. For details, see Overview: Google Credential Provider for Windows.

Manage Windows devices

This feature is available with G Suite Enterprise, G Suite Enterprise for Education, G Suite Enterprise Essentials, and Cloud Identity Premium editions.

With enhanced desktop security for Windows, you can configure and manage enrolled devices from the Admin console, as follows:

  • Set users' administrative permission level on Windows.
  • Deploy BitLocker settings to corporate drives.
  • Administer Windows Updates.
  • Deploy custom settings.
  • Perform admin actions, such as wiping data from a device.

For details, see Overview: Windows management settings.

Get started with enhanced desktop security for Windows

To use enhanced desktop security for Windows, you first need to:

  1. Enable the enhanced desktop security service.
  2. Enroll devices in the service.

    Important: If you install GCPW on a user's device, the device is automatically enrolled in Windows device management the first time the user signs in with their Google Account. 

  3. (Optional) Track company-owned Windows devices.

Was this helpful?
How can we improve it?