I read with interest an article in PC Gamer, which highlighted that Windows 10 has a ransomware blocker built-in, but you need to activate it.
It’s called ‘Controlled folder access’ and it is a part of Windows Defender – just search for ‘Ransomware protection’ in the Windows search bar. You can designate certain folders that only trusted apps can access, and then tag apps to be give that access.
I am sure that you all have malware prevention strategies and tools in place, but this might be an extra layer that you will find helpful.
Here is the link to the PC Gamer article but if you centrally control your Windows devices then it may not be available.