You can enable the Device Guard module from the Modules page in the Endpoint Security Web UI.
To enable the Device Guard module:
Log in to the Endpoint Security Web UI as an administrator.
From the Modules menu, select Endpoint Module Administration to access the Modules page.
On the Modules page, locate the Device Guard module and click the Actions icon and select Enable to enable the module.