After installing Windows 11, you should check some settings and adapt them according to your needs and streamline its usage. Here, we'll show you the 13 most important Windows 11 settings to adjust maximum security and optimize the operating system with just a few clicks.

This article is based on Windows 11 version 23H2, the most recent major version of the operating system. Most of the settings can be applied in Windows 10 and older Windows 11 versions as well, and work similarly in Windows 11 version 24H2, which is an upcoming update this year.

Further reading: Microsoft's latest Windows update broke VPNs, and there's no fix.

Customize Explorer – Show file extensions and drives.

Windows has been hiding known file extensions by default for years. This is initially annoying because it means that the correct file name is not fully displayed. There is also a security risk. For example, the file “important-document.doc.exe” is displayed as “important-document.doc”, in this case because Windows only hides the file extension “exe”.

It turns an executable file, such as malware/ransomware, into a seemingly unsuspecting Word document. You can solve the problem immediately by activating. View > Show > Filename Extensions In Explorer

You can also find settings in other versions of Windows. Folder Options > View Under “Hide extensions for known file types”. In this case, you need to disable the option.

In the folder options, you can also select the “This PC” option within the “General” tab under “Open File Explorer for”. In this case, Explorer starts from the Drives view, not the rarely required “Start View”. You can also open the Start view with a click on “Start” in the upper left corner.

Further reading: Windows includes built-in ransomware protections. Here's how to turn it on.

Customize Windows Update: Get updates faster.

After updating Windows 11 or installing the operating system, you should first go to “Windows Update” in Settings. You should first make sure that the “You are up to date” message appears at the top. Click “Check for updates” and make sure all updates are installed. Windows also updates malware protection definition files this way.

It may also be useful to enable the “Get the latest updates as they become available” option. This ensures that your Windows system receives updates faster than other users. Microsoft distributes many updates in waves. If you enable this option, you can ride out the waves, but beware that riding the bleeding edge of updates leaves you more open to potential bugs.

Also, click on “Advanced options” and enable “Get updates for other Microsoft products”. This will ensure that other Microsoft software on your computer (such as Office, Edge, and the Xbox app) is always up to date.

At this point, it may also be useful to specify when you work on the PC under “Active Hours”. This ensures that Windows does not start within this time after installing updates.

Important: Optimize malware protection settings for drivers

After installing Windows 11, open the Windows Security app from the Start menu. You should see a green icon with a tick next to all settings. If not, check the area by clicking on the corresponding icon.

For “Device Security”, you should make sure that “Memory Integrity” option is enabled. Basic Isolation > Basic Isolation Details. This prevents successful malware attacks. If this option cannot be disabled, it is due to an outdated and therefore insecure driver.

You should also make sure that “Microsoft Blacklist of Vulnerable Drivers” is enabled. This allows you to block vulnerable drivers that attackers can use to introduce malware into the system.

Important: Adjust virus and threat protection.

In the Windows Security app, you should switch on “Virus and threat protection” after installation. Click on “Manage settings” under “Virus and threat protection settings” and make sure that all the options here are turned on, mainly “Real-time protection,” “Cloud-based protection,” and ” Automatic Transmission of Samples”.

Download security updates for the malware scanner.

It is also important that you make sure that the security information for “virus and threat prevention updates” is up to date. Use “Security updates” and then “Check for updates” to update them directly.

If you are using external virus protection, these adjustments are not necessary because it disables the internal virus protection in Windows.

Check Windows Activation.

In Settings, you'll find an option to check if Windows has been activated. System > Activation. Without activation the operating system will stop working after some time and many settings will not be available. Here you can check if the activation is working and, if necessary, you can use “Change” to re-enter your product for Windows 10 or Windows 11.

Are all drivers installed?

Use the command “devmgmt.msc”, which you enter in the search field of the taskbar, to see if all the drivers are installed for all the devices on the PC. If unknown or other devices are still shown here, you should obtain and install the latest driver from the manufacturer.

Professionals still enable drive encryption.

Especially on notebooks, you should make sure you use BitLocker for drive encryption. To do this, enter “bitlocker” in the search field of the taskbar and turn on the protection.

BitLocker is available in Windows 11 Pro and Enterprise. BitLocker is not available in Windows 11 Home., sorry, but you can use device encryption instead. This can be found in Windows 11 settings.

This article was translated from German to English and originally published on pcwelt.de.