If you want to close common loopholes that allow a user on Windows to bypass a Content Policy, use the Device Setup > Windows section of the Tech Lockdown dashboard. This includes information about how to enforce Cloudflare's Filtered VPN application.
Cloudflare WARP Enforcer Tool
If you're using Cloudflare WARP to connect to your content policy, install our WARP Enforcer Tool for Windows to ensure that WARP is not stopped or uninstalled.
The Enforcer Tool should be a part of the standard Device Setup process.