Windows 10 Device Guard is a new tool for administrators to take full control of machines running the OS and prevent unwanted installations