Setting up Hardened Settings for Windows 11
Setting up Hardened Settings for Windows 11
Enviroment: Windows 2019 domain, Win 10 Pro workstations and role systems Retiring hardware has prompted the lock-stock-and barrel replacement of a couple of systems. These new systems, role oriented, came with Windows 11 pre-loaded. I could wipe the pre-load an install win10 but that would be like putting my finger in the dike because it sprung a leak. The writing is on the wall and its inevitable. I've scoured the web and came up with nothing helpful. I even, foolishly, asked Microsoft directly. Microsoft's reply, keep windows 11 patched and up to date. There must be some way, even a modest way , to harden Windows 11, to be able to restricting what content is sent and received, where privacy is preserved, and their AI is reigned in. And yes, I trust MS only slightly more than I trust a stranger when it comes to my responsibilities to my employer. Any assistance/strategies are appreciated.
You should be able to turn off your internet and Wi-Fi connection if you want to.
Maybe something like "Endpoint Protection" could work as a fix. The only real trouble I've had lately is sometimes having annoying stuff with Chrome (for instance) until a patch or update comes out, usually just a few days later, but it can be really bad on its own in other ways.
Hey, so what topics or personal info do you worry about most? If there are any ways to fix it or help, that might be different for everyone.
Blocking or deleting tracking just for ads, or any other reason, stops Edge AI from watching and collecting everything Microsoft wants to know. I don't trust Microsoft or anyone else except what's on my campus. It makes me nervous about using the web as anything more than a tool, even when it comes from Microsoft.
That will always be true, but it isn't really a way to make things stronger or more secure. Modern ideas about technology are different from what used to be taught back then. While companies still need computers and networks because they work for them, the internet is just a tool that helps us connect, not something we should rely on as the main thing.
Actually, yes, having an endpoint solution helped me out there. But now the problem is, 11 is a sieve. Once we set up our endpoints on that system, it validates and opens up for Microsoft to attack. And because Microsoft isn't bulletproof, hackers who target their products find easy access through those holes.