Securing Windows 11 After Initial Setup

Configure Windows Security settings immediately after setup to ensure system integrity, active threat protection, and account safety.

1. Verify Windows Security status. Open the Start menu, type Windows Security, and press Enter. Navigate to Virus & threat protection to ensure real-time protection is toggled to On. If the status is yellow or red, select Manage settings and enable all relevant toggles.
2. Apply critical security patches. Press Win + I to open Settings. Select Windows Update from the left sidebar and click Check for updates. Install all pending security intelligence updates for Microsoft Defender to ensure your database recognizes the latest malware definitions.
3. Enable Account Protection. Return to the Windows Security dashboard and select Account protection. Ensure your account is signed in with a Microsoft account to enable Dynamic Lock, which automatically secures your PC when your paired phone moves out of Bluetooth range. Select Dynamic Lock and check the box labeled Allow Windows to automatically lock your device when you're away.
4. Activate Ransomware Protection. In the Virus & threat protection menu, scroll down to Ransomware protection and select Manage ransomware protection. Toggle Controlled folder access to On. This prevents unauthorized applications from modifying files in your protected system folders.
5. Configure Firewall and Network Protection. Navigate to Firewall & network protection in the Windows Security sidebar. Ensure the Domain, Private, and Public network profiles are all set to Active. Click on each profile to confirm that Microsoft Defender Firewall is enabled for all network types.
6. Perform a manual security scan. Return to the Virus & threat protection tab and select Scan options. Choose Full scan to inspect every file and running program on your storage drives. Click Scan now to initiate the process.