10 Windows Settings You Should Never Leave as Default

Windows has a lot of settings hidden between layers of menus that you touch all the time. However, Windows isn't set up to be secure by default, which means there are some default settings you'll need to change.

10. Telemetry

Windows Telemetry is how Microsoft collects data about how you use your system. They claim to do this to improve the overall user experience, but it's not a good idea to have your computer constantly sending data about your app usage, system performance, and hardware configuration to Microsoft.

Luckily, turning this feature off is pretty simple. Just follow these steps:

• Go to Windows Settings and click the Privacy & security tab . Then, click Diagnostics & feedback .
• Turn off the Send optional diagnostic data setting .
• As an extra precaution, click the Delete button under Delete diagnostic data to delete any data stored on Microsoft servers.

9. Advertising ID

Windows creates a unique advertising ID for each user, which app developers and ad networks use to track you across apps. This works much like a browser cookie , allowing advertisers to serve you personalized ads based on your browsing history or app usage.

Follow these steps to turn off this feature:

• Go to Windows Settings and click the Privacy & security tab . Then, click Recommendations & offers .
• Turn off the Advertising ID slider .
• As an extra precaution, turn off all settings in this section except Show notifications in settings .

8. Location Services

Location services on your computer aren't as accurate as those on your phone, but they serve the same purpose. This setting is turned on by default and can reveal sensitive information about your daily habits and activities.

Here's how to turn off location services on Windows:

• Go to Windows Settings and click the Privacy & security tab . Then, click Location .
• Turn off the Location services slider .

Remember that location services are not the same as GPS. Even the NSA recommends turning it off on your device to limit the risk of location exposure.

7. Automatic app updates in Microsoft Store

Microsoft has permanently disabled automatic updates for apps and Windows. Now, you can only pause them for up to 5 weeks. Here's how you can take back control:

• Open Microsoft Store, click your profile icon in the upper right corner. Click Settings from the pop-up menu.
• Turn off the App updates slider .

6. Windows Update Active Hours and Restart options

There's nothing more frustrating than Windows deciding to reboot to install an update in the middle of your workday. The default active hours are 8am to 5pm, which doesn't really fit with many people's actual usage habits.

How to change:

• Go to Windows Settings and click on Windows Update . Once there, click on Advanced options .
• Change Active hours settings to suit your usage habits.

5. Untrusted font installation

Unfortunately, changing this setting requires the Group Policy editor. If you are not using Windows Pro or Enterprise, you can modify the registry to change this setting.

• Open Registry Editor and access registry subkey HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\
• You should see a key named MitigationOptions . If not, right click on the blank space on the right and create a new QWORD (64-bit) and give it the same name.
• Update the Value data of the MitigationOptions key by double-clicking the key. Use 1000000000000 to enable or 2000000000000 to disable the feature.

4. Share files and printers over a public network

Unless you know how network sharing works on Windows and have it enabled by default, you should never enable file and printer sharing on a public network.

Here's how to turn off file and printer sharing over a public network:

• Open Windows Settings and go to Network & internet . Then, click Advanced network settings .
• Click Advanced sharing settings .
• Expand the Public network section and make sure that Network discovery and File and printer sharing  are turned off.

3. Automatically connect to suggested open hotspots

Even though Wi-Fi Sense has been discontinued in Windows 11 , it can still occasionally connect to random open Wi-Fi networks. You can't completely prevent this without modifying the registry, but you can protect your device by using random hardware addresses. Here's how:

• Open Windows Settings and go to Network & internet . Then, click Wi-Fi .
• Turn on the Random hardware addresses slider .

2. Dynamic Lock

Dynamic Lock uses Bluetooth to detect when your paired phone moves away and automatically locks your computer. It's great, but only if you have reliable Bluetooth—a feature that, in my experience, is only available on high-end Windows laptops.

How to turn this feature off:

• Open Windows Settings and go to Accounts . Once there, click on Sign-in options .
• Scroll down and expand the Dynamic Lock section. Uncheck the Allow Windows to automatically lock your device when you're away option .

1. OneDrive Backup

Windows automatically turns on cloud backup to your OneDrive account during setup. This means your Desktop, Documents, Pictures, Music, and Videos folders are automatically backed up to OneDrive. However, you only get 5GB of free space—and it runs out faster than you think.

Turning this feature off is simple, just unlink OneDrive on your computer. Here's how:

• Click the OneDrive icon in the system tray, then the settings gear icon.
• Go to Account section and click Unlink this PC under your account.