Securing Windows 10 hosts