It's always important for IT to harden devices against attacks and user tampering, and Microsoft offers two main options for applying device security settings: Group Policy and Microsoft Intune.