Hello,
as we know ransomware consider to be the most common attack nowadays, today I have found a blog Post on how to protect file servers from such attack using SCCM Compliance and wanted to share it with you.
in addition to the mentioned technique, don’t forget regular backup and enable VSS to keep previous versions of the file.
http://www.scconfigmgr.com/2017/03/21/protect-file-servers-from-ransomware-with-sccm-cicb/
Regards,
vMonem 