Securing Windows 11 After Initial Setup

Step by step

1. 1 min

   Verify Windows Security status

   Open the Start menu, type Windows Security, and press Enter. Navigate to Virus & threat protection to ensure real-time protection is toggled to On. If the status is yellow or red, select Manage settings and enable all relevant toggles.

   Note: A green checkmark indicates your system is currently protected.
2. 2 min

   Apply critical security patches

   Press Win + I to open Settings. Select Windows Update from the left sidebar and click Check for updates. Install all pending security intelligence updates for Microsoft Defender to ensure your database recognizes the latest malware definitions.

   Note: Restart your machine if prompted to complete the update installation.
3. 1 min

   Enable Account Protection

   Return to the Windows Security dashboard and select Account protection. Ensure your account is signed in with a Microsoft account to enable Dynamic Lock, which automatically secures your PC when your paired phone moves out of Bluetooth range. Select Dynamic Lock and check the box labeled Allow Windows to automatically lock your device when you're away.

   Note: Ensure Bluetooth is enabled on your PC and mobile device for this to function.
4. 1 min

   Activate Ransomware Protection

   In the Virus & threat protection menu, scroll down to Ransomware protection and select Manage ransomware protection. Toggle Controlled folder access to On. This prevents unauthorized applications from modifying files in your protected system folders.

   Note: You can add specific folders to the list if you require custom protection for data drives.
5. 30 sec

   Configure Firewall and Network Protection

   Navigate to Firewall & network protection in the Windows Security sidebar. Ensure the Domain, Private, and Public network profiles are all set to Active. Click on each profile to confirm that Microsoft Defender Firewall is enabled for all network types.

   Note: Never disable the firewall unless instructed by an enterprise IT administrator.
6. 30 sec

   Perform a manual security scan

   Return to the Virus & threat protection tab and select Scan options. Choose Full scan to inspect every file and running program on your storage drives. Click Scan now to initiate the process.

   Note: A full scan may take significant time depending on your disk size and file count.