Windows 11 Settings To Change Immediately [Free Post]

In this post, I'll show you settings you should change immediately in Windows 11 to improve security. These include file extensions, advanced options in Windows Update, improved malware protection, ensuring the built-in antivirus works as it should, and more. Let's take a look.

Thank you so much for reading this premium blog post! I occasionally post some of my Premium Content here on Substack to give you a sense of what I’m working on. Please consider purchasing individual access to this guide and others on my website for $5 each. You can keep up to date with my latest free posts on KevinTheTechGuy.ca, on Patreon, via the RSS feed, and on Mastodon. Your support makes my work possible.

Note: This post is too long for a single email. Please click “view entire message” at the bottom to read the full post in your browser.

Showing File Extensions

Windows has been hiding known file extensions by default for years. This is initially annoying because it means that the type of file is not displayed next to the file name.

This is a security risk. For example, “important-document.doc.exe” is displayed as “important-document.doc”.

In this case, ".doc" is actually part of the file name. ".exe" is hidden because that's a file type extension and is not shown by default.

Malicious actors take advantage of this. You think you're downloading a Word doc or an image, when, in fact, it is an executable file that can make changes to your computer.

You can quickly enable file extensions by clicking View > Show File Name Extensions in File Explorer.

Windows Update Advanced Options

Go to Windows Update, and click on Advanced Options. Then ensure "Notify me when a restart is required to finish updating".

This way, Windows won't automatically restart if you're in the middle of something and you won't lose that work.

Click Optional Updates on the Advanced Options screen to see this page. If Windows Update indicates that optional updates are available, click the down-pointing arrow.

Put a checkmark next to the available update to select it, and click the Download and Install button.

To improve Device security, you should ensure that the Memory integrity option is enabled.

This better allows Windows to prevent successful malware attacks. If this option cannot be disabled, it's because you're using an outdated and thus insecure driver.

To do this, go to Privacy and Security in Settings and click Device Security.

Under "Core Isolation" click Core Isolation details, and enable that.

I should note that Windows isn't great at keeping drivers up to date. Driver Booster does a much better job, and I strongly recommend the paid version.

Virus and Threat Protection

In Windows Security, you should ensure “Virus and threat protection” is enabled unless you're using a third-party antivirus (not recommended).

In Settings, click Privacy and Security, then Virus and Threat Protection.

Click on Manage settings under Virus and Threat Protection Settings and make sure that all three options are switched on, including:

• Real-time protection
• Cloud-based protection
• Automatic transmission of samples

Disable Start Menu Ads (Suggested Apps)

Out of the box, so to speak, Microsoft includes suggested "stub" apps they want you to use, either their own, or from partners like Spotify.

To remove these, right-click on them and choose uninstall.

Get Rid of Notification Ads and Full-Screen Upsells

Windows will occasionally send you notification pop-ups with “tips and suggestions.” These tips can include messages pushing the Microsoft Rewards program and other things.

To disable them, go into Settings > System > Notifications.

Stop Seeing Suggested Content (Ads) in Settings

Windows 11's Settings app offers more “suggestions” for subscriptions, such as Microsoft 365, Copilot Pro, and others.

To remove these in Windows 11, open Settings > Privacy & security > General. Then, turn off Show me suggested content in the Settings app.

This option will NOT appear if you're using a Local Account (NOT a Microsoft Account).

Hide Suggested Content (Ads) in File Explorer

Microsoft puts occasional banners in File Explorer to show ads ("suggestions") for OneDrive storage.

To disable these in Windows 11, open File Explorer > the “…” menu > Options. Click the View tab, scroll down to near the bottom of the list, and uncheck Show sync provider notifications. Then click OK.

Avoid Lock Screen Text Ads

Windows 11 uses Microsoft’s Windows "Spotlight" feature to show text-based ads on the Lock Screen and push full-screen advertisements for PC games.

In Windows 11, open the Settings > Personalization > Background. Change Spotlight to Picture, and choose whatever picture you like. If you want a different image, you need to change it manually.

Hide Clutter in Desktop Search

The search box on the taskbar and the pop-up search both have “highlights” that recommend various distractions, including shopping content, games, and more.

In Windows 11, open the Settings > Privacy & security > Search permissions. Scroll down and turn off Show search highlights.

Turn Off The Viral Firehose in Widgets

Windows 11’s Widgets promote viral news articles, stock prices, and other topics you may not care about.

In Windows 11, right-click an empty spot on the taskbar, select Taskbar settings, and turn off Widgets. While you might find some of the information in Widgets interesting, it's just not worth the distraction, so I recommend disabling it entirely.

Replace The Start Menu

No one seems to really like the Start Menu in Windows 11. You can replace it for FREE using Open Shell, and you can revert back to the original Start Menu at any time.

Get Rid of OneDrive

OneDrive, Microsoft's cloud-based file syncing service, which is FREE up to a certain amount of storage, is bundled in Windows 11. You might as well get rid of it if you don't use it. If it is simply installed, it will constantly nag you to use it.

Go to Settings > Apps > Installed Apps. Then click the three vertical dots "..." next to OneDrive, and uninstall it. You'll be glad you did.

Right Click Context Menus

Microsoft changed the context-specific right-click menus in Windows 11 simply because they can.

If you prefer a more traditional option, when you right-click a file or folder, click More Options at the bottom, and you'll see a more pleasant alternative.

Windows sometimes shows you “finish setting up your PC” prompts with messages about using OneDrive and Microsoft 365. To get rid of these:

In Windows 11, open the Settings app and head to System > Notifications.

Scroll down to the bottom of the screen, expand the “Additional settings” section, and uncheck the three options here: “Get tips and suggestions when using Windows,” “Suggest ways to get the most out of Windows and finish setting up this device,” and “Show the Windows welcome experience after updates and when signed in to show what’s new and suggested.”

Thank you so much for reading this subsriber blog post! I occasionally post some of my Premium Content here to give you a sense of what I’m working on. Please consider purchasing individual access to this guide and others on my website for $5. You can keep up to date with my latest free posts on KevinTheTechGuy.ca, on Patreon, via the RSS feed, and on Mastodon. Your support makes my work possible.