[Windows 10 Tip #6] - Security Settings
Windows 10 has new security features baked in that are designed to eliminate vulnerabilities and make it harder to exploit. In this installment of the Windows 10 tips series, we'll take a look at Windows 10 security features and settings. Let’s do that now…
The Windows 10 Security Center
You don't need to understand the workings of Data Execution Prevention, Address Space Layout Randomization, UEFI Secure Boot, or Structured Exception Handling Overwrite Protection. You don't even have to memorize the acronyms that go along with them. All you need to know is that these "threat mitigation" features are part of Windows 10, and they're working in the background to protect you from a variety of threats and cyber-attacks.
[See more helpful articles in my Windows 10 Tips series: Click Here.]
But if you have Windows 10, you should be familiar with the Windows Defender Security Center, which is the hub for all security-related settings. Windows Defender (Microsoft's built-in antivirus tool), Windows Firewall and a few other tools were merged into the new Windows Defender Security Center app in the Windows 10 Creators Update released in April, 2017 (build 1703).
This app puts many Windows 10 security features in one place. You can fine-tune your anti-malware scanning options, tweak device settings, configure parental controls, or perform a “Fresh Start" if things get fouled up. To open the Windows Defender Security Center, just right-click the Defender shield icon in the notification area on the taskbar and click Open. OR, you can click on the Start menu and search for Windows Defender Security Center.
Virus & threat protection is where you’ll find malware scanning functions; toggles for real-time protection, cloud-based protection, controls for malware sample submission to Microsoft, the ability to exempt files or folders from Defender scans, notifications settings for Defender and Firewall, and threat definition update controls.
Perhaps you're wondering if you're locked into Microsoft's security tools with Windows 10. Thankfully, the answer is no. You can still use AVG, Avast, Avira, BitDefender, or any other antivirus tool you like on Windows 10. If you a install a third-party antivirus or firewall product, Microsoft Defender and Firewall will be disabled automatically, and the presence of your antivirus tool will be indicated here. (See my article Free Antivirus Programs for links to the best free Internet security tools.)
Device performance & health is where you can check for any issues with Windows Update and device drivers that may leave you vulnerable. Storage capacity and battery life issues may affect system performance/health. You'll also see here if you’re current with your Windows updates, and if not, what might be causing the update bottleneck.
Here you will also find the Fresh Start option that can re-install the latest version of Windows 10 if necessary. Microsoft recommends this option if your computer has performance issues or if you have too many unnecessary apps. Fresh Start will remove most of your apps, but will keep your personal data and Windows settings intact. If you’ve had trouble getting build 1703 or above via Windows Update, try Fresh Start. But first, try the Windows Update Troubleshooter. (In Settings, search for troubleshoot.)
Firewall & network protection includes Windows Firewall settings and the Network and Internet Troubleshooter. Oddly, there seems to be nothing under the Advanced Settings link.
Apps & browser control deals with Windows Smartscreen settings that can warn you of potentially dangerous Web content before it is downloaded by Edge or an app, or block sketchy content without warning, or let any old thing into your system (not recommended). Note that Smartscreen will scan any file downloaded from the Internet, even if it was downloaded by a non-Microsoft browser or app. I recommend leaving all of these toggles “on.”
Family options include parental controls over the sites kids can visit, the hours and days when they can use the Internet, and the apps they can buy based upon “maturity ratings.” A Microsoft account is required to use Family options. I tried the parental controls built into Windows 8.1 on my son's computer, but he found that they were easily bypassed just by changing the date or time on the system clock. I have not tried this feature on a Windows 10 computer, so if you have experience with it, please share.
One final note -- If you don’t need Internet Explorer, I suggest removing it from Windows 10 to give hackers one less program that may have exploitable vulnerabilities. IE is a favorite target because, historically, it has lots of vulnerabilities and it’s present on most Windows computers. To uninstall IE, go to Control Panel and select Uninstall a program. In the lefthand sidebar of the next screen, click on Turn Windows features on and off. Find Internet Explorer and uncheck its checkbox.
While you’re there, review all installed Windows features and uncheck any that you don’t need. The Edge browser cannot be uninstalled or disabled. I got rid of Windows Media Player, Windows Fax and Scan, the Internet Printing Client, and SMB 1.0 file sharing support. SMB1, as it’s called, enables file and printer sharing with old versions of Windows (NT, XP, and Server 2003); if you don’t need to do that, get rid of SMB1. When you have unchecked everything you want to remove, click OK. You’ll need to wait a few minutes while features are removed and your system reboots.
Your thoughts on this topic are welcome. Post your comment or question below...
This article was posted by Bob Rankin on 13 Jul 2017
|For Fun: Buy Bob a Snickers.|
Geekly Update - 12 Jul 2017
The Top Twenty
[NEW] Google Backup & Sync
Post your Comments, Questions or Suggestions
Free Tech Support -- Ask Bob Rankin
Subscribe to AskBobRankin Updates: Free Newsletter
Copyright © 2005 - Bob Rankin - All Rights Reserved
Article information: AskBobRankin -- [Windows 10 Tip #6] - Security Settings (Posted: 13 Jul 2017)
Copyright © 2005 - Bob Rankin - All Rights Reserved