Requirements
Minimum standards for a highly secure Windows device:
Secure-Core
Windows up-to-date:
Windows 11 Updates
Microsoft Defender up-to-date:
Defender Updates
Latest Driver and Program updates
Only necessary programs/apps/games which you need
Avoid insecure software like 7-Zip (which lacks
Anti-Exploit
and
MOTW
support), Open/LibreOffice,
Forks
, Firefox, True/Veracrypt, etc.
Stay away from "Anti-Spying"/"Anti-Telemetry"/.. tools and use
official documentation
No "Tuning" tools (not even stuff like Ccleaner!)
Hardware Requirements for System Guard and Memory Integrity:
System Guard
/
Memory Integrity
/
Defender Credential Guard
Hardening
Set User Account Control (
UAC
) to
maximum
Create
a different Admin account and
transform
your current account to Standard
Set a
complex password
and use a Microsoft account for better security
Enable
Family Safety
Don't use
SHA-1
certificates in Bitlocker
Check your
Account Security
and
Device Security
Encrypt sensitive data with
BitLocker
Set Firewall rules for
ConfigureDefender
Use Microsoft Defender (formerly Windows Defender) with
cloud-delivered protection
Check
Windows Security
for recommendations and potential issues
Keep software up-to-date using
Ninite
or
Patch My PC
Additional Tips
Regularly backup important data
Keep system firmware updated
Monitor your
security configuration baselines
Stay informed about
end-of-life
and
support timelines
Periodically check
Microsoft Safety Dashboard