Create and deploy a Windows Defender Exploit Guard policy to Windows 10 or later devices managed by Configuration Manager.