Enable virtual private networks

If you manage and trust the device, you can configure a virtual private networks (VPN) or use DirectAccess to create a secure tunnel between the user's device and your company network. This ensures that information can not be intercepted across the network (such as in a public Wi-Fi hotspot); however, any data copied and stored on the device is still vulnerable to any local attacks against that device.