Introduction
I've never run Windows the way Microsoft hands it over. On any PC I use, I turn things off, move things around, and clear out the parts I didn't ask for. Over the years, that's grown into a long list, scattered across Settings menus, a few registry keys, and the occasional Group Policy. This guide pulls it all into one place, in the order I'd work through a PC.
Backups and a safety net come first, then debloating and performance, security and privacy, the AI and interface settings, power and networking, updates, the registry, and the advanced tools. The last section covers what not to touch, which matters as much as everything before it.
Popular Now: ASUS cancels buyer's 20th Anniversary Bundle pre-order despite paying $10,350 already, wants even more moneyTreat all of it as a reference you come back to, not a script to run top to bottom. The fastest way to break a working PC is to apply everything in one sitting and lose track of which change caused the problem. Pick the sections that fit your hardware and your habits, apply them one at a time, and skip the rest with a clear conscience.
Before you change a single setting, give yourself a way back - the next section sets up restore points, registry exports, and backups. Two habits save the most grief after that. Change one thing at a time so you always know what caused an issue, and never run a one-click "optimizer" script you can't read yourself.
Not everything applies to every PC, so each tweak opens with a short "Applies to" line telling you who it's for. Some changes work the same way on Home and Pro; others require the Group Policy Editor, which only Pro has, with a registry route for Home where one exists. A few settings only appear on Copilot+ PCs, and some suit a desktop more than a laptop on battery.
Every path, toggle, command, and value here was checked against Windows 11 version 25H2, the 26200 build series, which is current as I write this. Where Microsoft has deprecated something, I point to what replaced it. I revisit the whole guide every six months. The next section is where the work starts with the backups everything else depends on.
Best Deals: Samsung T7 1TB Portable SSD
Prices last scanned 1 hour and 37 minutes ago
Backups and a safety net
Every change in this guide is easier to make when you know you can undo it. So before touching a single setting, set up three layers of recovery. Between them, they take a few minutes, and they're the reason the rest of this guide is low-stakes.
Our Latest TweakTown Guides
- Using Multiple Monitors? Change these Windows settings for a Better Experience
- Windows Sandbox is The Windows Security Feature Most People Never Use
- I ditched the Windows 11 context menu for this open-source tool, and here's why
- Windows 11 may be encrypting your drive already, and I checked where my recovery key went
- I swapped File Explorer for this free file manager and finally got the layout I wanted
System Restore lets you roll back a bad change
Applies to: Home and Pro, all PCs.
Frequently Asked Questions
Open a question for an answer from TweakTown's coverage of this guide, or ask your own below.
How do I enable and create a System Restore point before making tweaks on Windows 11 25H2 (build 26200)?
What registry change disables web results and the Copilot button in Start for Home and Pro editions?
What settings or features does the guide explicitly warn against disabling (e.g., Defender, Windows Update, services), and why?
How should I approach using debloat/one-click optimizer tools according to the guide to avoid breaking a working PC?
Have a question about this content not listed here? Ask below and TweakBot will answer it.
On many PCs, System Restore is disabled on the system drive by default, so it is worth checking and turning it on before you start tweaking. It snapshots your system files, drivers, installed programs, and registry, so when a change misbehaves, you can roll back to a point where Windows worked.
It won't touch your personal files, so think of it as a system safety net rather than a backup of your stuff.
Turn it on first. Search the Start menu for "Create a restore point" and open the result, which drops you on the System Protection tab. Select your system drive, click Configure, choose "Turn on system protection," and drag the Max Usage slider to somewhere around five percent.
With protection on, click Create, give the point a name you'll recognize, and let it finish. I make one before any session of registry edits, and a named point is easier to find later than a row of dated ones when you're hunting for a specific change.
Export the registry key before you edit it
Applies to: Home and Pro, all PCs.
A restore point covers the whole system, but for registry work, there's a faster, more convenient option. Before you change any key, export just that branch or all, so you have a one-click way to put it back exactly as it was.
Open Registry Editor with regedit, then find the key you're about to edit. Right-click it, choose Export, set the range to "Selected branch," and save the .reg file somewhere obvious with a dated name.
The whole thing takes a few seconds, and it's a habit worth building.
If an edit goes wrong, double-click that .reg file and confirm the prompt to merge the original values back. However, there's one catch. It restores what was there, but won't remove a brand-new key you added afterward. For those, your restore point is the cleaner undo.
Image backups are the only thing that covers everything
Applies to: Home and Pro, all PCs.
Restore points and registry exports are quick undos for changes you make on purpose. Neither one saves you from a dead drive or an update that leaves Windows unbootable.
For that, you want a full disk image, which is a complete copy of the drive you can restore in one pass.
Windows used to handle this itself, but the built-in system image tool has been deprecated for years and isn't worth trusting with anything important. The newer Windows Backup app isn't a substitute either, since it only syncs your folders, apps, settings, and credentials to OneDrive.
So this is one of the few spots where I reach for third-party software. Hasleo Backup Suite Free, AOMEI Backupper Standard, and Veeam Agent for Microsoft Windows all offer free editions that can image a full drive and create bootable rescue media. Keep that media on a USB stick, since a backup is only useful if you can boot into something to restore it.
Set these three up once, and you rarely think about them again, beyond a fresh restore point before a big change. That's the point of doing it now: with that net under you, the rest of this guide won't feel risky. The next section is where the visible work begins, stripping out the bloat Windows ships with.
Debloat and declutter
This is where the cleanup pays off most. By default, Windows 11 ships apps you never picked, web ads inside search, and "suggested content" tucked into a dozen menus. Clearing it out is the single change that makes the system feel like yours again.
The preinstalled apps worth uninstalling
Applies to: Home and Pro, all PCs.
Start with the obvious, such as the apps you'll never open. Head to Settings > Apps > Installed apps, and you'll find the full list with an uninstall option behind the three dots next to each one.
Most of the preinstalled extras are safe to remove. Clipchamp, the Microsoft Solitaire Collection, the Xbox app, Outlook, Teams, Microsoft News, MSN Weather, and Feedback Hub all uninstall cleanly and can be reinstalled from the Microsoft Store later if you miss one.
A few are worth keeping even though they look like clutter. Snipping Tool, Calculator, Paint, Notepad, Photos, and Terminal are the built-ins I reach for, and the Microsoft Store and App Installer should stay, since other things lean on them. When in doubt, leave it; an unused app costs you almost nothing.
If you'd rather not click through them one by one, Windows' built-in package manager handles it from a terminal. Run winget uninstall followed by the app's name, and you can clear several in a row without touching Settings. Some apps require the exact package name, which you can list with winget list.
Web results in Start are an ad placement, not a feature
Applies to: Home and Pro via the registry; Group Policy on Pro.
Type anything into Start and Windows pads your results with Bing web links and, on many builds, a Copilot entry. There is still no single switch in Settings that turns off every kind of web suggestion in Start, so this part works more reliably if you handle it with a registry policy.
Before you edit anything, export the branch first, as covered in the last section. Then open Registry Editor with regedit, and go to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer. If the Explorer key isn't there, right-click the Windows key above it and create it.
Inside, make a new DWORD (32-bit) value named DisableSearchBoxSuggestions and set it to 1. Sign out and back in, and the web suggestions and the Copilot button both vanish, leaving Start to return only your apps, files, and settings.
This works the same on Home and Pro. Pro has a matching Group Policy under Computer Configuration > Administrative Templates > Windows Components > Search, but the registry value holds up more reliably across updates, so I use it everywhere. Microsoft occasionally shuffles these Start and search options between Settings and policy, so if an update changes how web content appears, reapplying this registry value is a reliable way to put things back the way you prefer.
Suggested content lives in more places than you'd guess
Applies to: Home and Pro.
Microsoft scatters "suggestions," "tips," and "recommendations" across so many pages that turning them all off feels like a scavenger hunt. None of them does anything you'll miss - so flip the lot.
Start at Settings > Privacy & security > Recommendations & offers and switch off all toggles there, including the advertising ID and the prompts to show suggested content in Settings. Then go to Settings > Personalization > Start and turn off the recommendations and recently added items, which is what fills the bottom of the Start menu with things you didn't pin.
One more hide further out. Under Settings > Personalization > Lock screen, set the status to anything but Windows Spotlight to stop the fun facts and tips.
Widgets and Copilot come out with a click or a command
Applies to: Home and Pro; the Group Policy route is Pro only.
Copilot is now a standalone app, which makes it easy to deal with. Uninstall it from Settings > Apps > Installed apps like any other app, and turn off its taskbar button under Taskbar settings.
If your keyboard has a dedicated Copilot key, remap it in Settings > Bluetooth & devices > Keyboard, under "Customize Copilot key on keyboard," so the key opens something useful instead.
Widgets take one extra step to remove properly. The taskbar toggle only hides the button; the process behind it keeps running. To clear it out entirely, open Terminal as administrator and run winget uninstall "Windows Web Experience Pack". The Widgets board and its taskbar toggle both disappear together.
On Pro, there's a sturdier option. In Group Policy, under Windows Components > Widgets, set "Allow widgets" to Disabled, and it stays gone even after a feature update tries to bring it back.
Edge ships with prompts that don't need to be on
Applies to: Home and Pro.
Even if Edge isn't your main browser, it runs more than you'd think, and a couple of its defaults keep it alive in the background. Two quick changes settle it down.
Paste edge://settings/system/manageSystem into the address bar and turn off "Startup boost" and "Continue running background extensions and apps when Edge is closed." Together, those stop Edge from preloading at sign-in and lingering after you close it.
With the bloat gone, the web ads out of search, and Edge settled down, the PC already feels lighter. The next section goes over the settings that shape performance, from startup apps to the power plan Windows keeps hidden.
Performance and responsiveness
Performance tweaking has a bad reputation, mostly because of the junk software that promises miracles and delivers pop-ups. None of that here. These are the built-in settings that make a difference to how quickly Windows responds, and every one is free and reversible.
Startup apps are the biggest lever most people skip
Applies to: Home and Pro, all PCs.
Every program that launches with Windows steals a slice of your startup and then sits in the background afterward. Most of them don't need to. Trimming that list is the single fastest way to make a PC feel quicker, and it takes two minutes.
Open Task Manager with
Disable the obvious offenders, such as Spotify, Teams, Adobe's updater, and OneDrive, if it's a desktop that doesn't rely on sync. What you leave on matters too, so keep anything tied to your security software, audio, or graphics drivers running.
You won't break anything by disabling a startup entry - the app still opens normally when you launch it. It just stops loading itself the moment you sign in.
Visual effects matter on older hardware
Applies to: Home and Pro; biggest gains on older or low-end PCs.
Windows spends resources on animations, shadows, and fades that you stop noticing after a week. On a modern desktop, the cost is small, but on older or low-end hardware, turning them off makes the whole interface feel instantly snappier.
Search the Start menu for "Adjust the appearance and performance of Windows" to open Performance Options. Choose "Adjust for best performance" to switch everything off at once, then re-tick two boxes worth keeping: "Smooth edges of screen fonts," so text doesn't look rough, and "Show thumbnails instead of icons," so your image folders stay usable.
The result looks a little flatter and moves a lot faster. On an aging laptop, it's one of the biggest wins in this whole guide.
GPU scheduling and Game Mode are worth checking
Applies to: Home and Pro; mainly gaming PCs.
Two gaming-oriented settings get talked up as free speed, but both are situational. Start with hardware-accelerated GPU scheduling, which hands some scheduling work from the CPU to the GPU. You'll find its toggle under Settings > System > Display > Graphics, listed with the default settings near the top of the page. If it doesn't appear there at all, your GPU or driver doesn't support it.
On a capable GPU, it's often on already, and leaving it on is usually fine. It's not a guaranteed win, though; some games stutter with it, and laptops tend to last longer on battery with it off. If you're chasing a specific problem, this is a toggle worth testing both ways.
Game Mode is the simpler one. You can find it at Settings > Gaming > Game Mode, and it mainly holds back updates and background tasks while you play. It's on by default, is generally safe to leave enabled, and is worth a quick check if you game at all.
Storage Sense handles disk maintenance so you don't have to
Applies to: Home and Pro.
Freeing up disk space used to mean digging through folders and running Disk Cleanup by hand, but now Storage Sense does it for you. Turn it on under Settings > System > Storage > Storage Sense, set a schedule, and it clears temporary files, empties the Recycle Bin, and thins out old downloads without you thinking about it.
Rather than repeat every toggle here, I've walked through the complete Storage Sense setup and the schedule I run in a separate guide.
The Ultimate Performance power plan is hidden, not missing
Applies to: Desktops doing heavy work; rarely available on laptops.
Windows keeps a higher-tier power plan called Ultimate Performance tucked out of sight. It's intended for workstations and high-end desktops and reduces how aggressively hardware powers up and down, which can trim some of the tiny delays that come from aggressive power saving.
This adds the plan immediately on some OEM desktops; however, on laptops and systems that rely on modern standby, the plan may stay hidden or be unavailable by design. To surface it, open Terminal as administrator and run powercfg -duplicatescheme e9a42b02-d5df-448d-aa00-03f14749eb61. Then go to Control Panel > Hardware and Sound > Power Options, click "Show additional plans," and select Ultimate Performance.
This one is for desktops doing sustained heavy work, like rendering or compiling. On a laptop, it mostly heats the chassis and drains the battery for gains you won't feel, and on many newer laptops with modern standby, it won't appear at all. If you change your mind, switch back to Balanced in Power Options or remove the duplicated plan and leave your other schemes alone.
Startup, visuals, GPU, disk, and power are all handled with built-in settings and nothing to install. If you only keep one change from here, make it the startup list, since you feel that one every morning. Security is next, and most of it turns out to be already running.
Security hardening
The good news about Windows 11 security is that most of it already works. Defender, the firewall, and SmartScreen all run out of the box, and for most people they're enough. This section is about confirming that, then switching on the few strong protections that ship turned off.
Windows Security is already running, so start by reading it
Applies to: Home and Pro, all PCs.
Open the Start menu and search for Windows Security to see the whole picture on one screen. The dashboard breaks protection into sections: Virus & threat protection, Firewall & network protection, App & browser control, Device security, and a few more. A green check on each means Windows is handling it.
Spend a minute here confirming the basics. Real-time protection should be on under Virus & threat protection, and the firewall should show as active for your Domain, Private, and Public networks. If everything's green, you don't need a third-party antivirus; Defender has held its own against paid suites for years.
The rest of this section is about the strong protections that don't show up green by default, because Microsoft leaves them off.
Smart App Control is strict, so know what it blocks first
Applies to: Home and Pro; the toggle is still rolling out.
Smart App Control is a stricter layer that blocks untrusted apps before they even run, based on Microsoft's reputation data and code signing. It's effective, but blunt - in its enforcing state, there's no "run anyway" button, so anything unsigned or obscure is simply blocked.
For a long time, this setting was locked to clean installs and couldn't be switched back on once off. The April 2026 update changed that, and it now toggles from Windows Security > App & browser control > Smart App Control settings, though the change is still rolling out, so you may not have it yet.
Check which of its three states you're in: On, Evaluation, or Off. Evaluation means Windows is still deciding whether it suits you. Understand it before enabling it because if everything you run is mainstream and signed, it's a strong free safety net; but if you rely on niche or unsigned tools, it will get in your way.
Core Isolation's Memory Integrity is off more often than it should be
Applies to: Home and Pro; most modern PCs.
Memory Integrity, tucked under Core Isolation, uses your CPU's virtualization to wall off the Windows kernel from malicious drivers. It's one of the stronger protections here, and on PCs that upgraded from an older build, it's very often switched off.
You can find it under Windows Security > Device security > Core isolation details, and turn Memory integrity on. If it flips on cleanly, restart, and you're done.
Sometimes it refuses, and Windows tells you why because an incompatible driver is blocking it. Click "Review incompatible drivers" to see the cause, usually left behind by old hardware, a legacy VPN, or anti-cheat software. The right fix is to update that driver from Windows Update or the vendor's site, rather than deleting it, then try the toggle again.
Device encryption is probably already on, so find your recovery key
Applies to: Home (Device Encryption) and Pro (BitLocker).
This is the one security feature where the risk isn't leaving it off - it's not knowing it's on. Since the 24H2 release, Windows 11 encrypts the system drive by default on supported devices after a clean install or reset when you sign in with a Microsoft account. That now includes Home editions and desktops, not just business laptops.
Encryption itself is a good thing, but the danger lies in the recovery key. If a firmware change, a hardware swap, or even a bad update ever triggers the recovery screen, you'll need a 48-digit key to get back in. Plenty of people first learn their drive was encrypted at exactly that moment.
So check your status under Settings > Privacy & security > Device encryption on Home, or Control Panel > BitLocker Drive Encryption on Pro. Windows backs the key up to your Microsoft account automatically (at account.microsoft.com/devices/recoverykey), but save your own copy somewhere off the PC too. It's the difference between a two-minute unlock and losing everything on the drive.
Controlled Folder Access is built-in ransomware protection
Applies to: Home and Pro, all PCs.
Controlled Folder Access is Windows' built-in ransomware defense, and it's off by default. When it's on, only trusted apps can change files in your protected folders, so a piece of ransomware can't quietly encrypt your Documents and Pictures.
Switch it on under Windows Security > Virus & threat protection > Ransomware protection. It guards your main user folders out of the gate, and you can add more under Protected folders.
The one catch is that it can occasionally block a legitimate app, like a photo editor or a backup tool, from saving where it expects to. When that happens, don't switch the whole feature off; just add that app under "Allow an app through Controlled folder access" and carry on.
Secure Boot should already be on, but confirm it
Applies to: All PCs; set in UEFI firmware.
Secure Boot stops untrusted code from loading during startup, which shuts the door on bootkits before Windows even loads. Windows 11 requires firmware that supports it, though that isn't the same as having it switched on, so a ten-second check settles it.
Press msinfo32, and in System Information, look for "Secure Boot State" in the list; On is what you want. If it somehow reads Off, you can usually enable Secure Boot in your PC's UEFI firmware under a Boot or Security section. Make sure you have your encryption recovery key handy first if BitLocker or device encryption is on.
None of that needed a download, and most of it was already protecting you; you just confirmed it and closed the last few gaps. The recovery key is the piece I'd go back and double-check tonight if you skipped it. Privacy comes next, where the job shifts from adding protection to taking back the data Windows collects by default.
Privacy and telemetry
Privacy is where Windows quietly collects the most, and where a few minutes of toggling pays off. You can't shut it all off; a required baseline of diagnostic data stays for updates and security. But the optional collection, ad tracking, and the leftovers from features Microsoft has removed are all yours to clear up.
Optional diagnostic data is the first toggle to turn off
Applies to: Home and Pro.
Head to Settings > Privacy & security > Diagnostics & feedback first. Switch "Send optional diagnostic data" off to stop Windows from sending the richer stream of how-you-use-everything data that isn't needed to keep the PC running.
While you're there, turn off "Improve inking and typing" and "Tailored experiences," the setting that uses your data to push tips and ads inside Windows. That last one may now read "Personalized offers" on newer builds, but it does the same job.
Finish by clicking "Delete diagnostic data" to wipe what's already been collected. Windows still sends a required baseline it needs for updates and security - there's no switch for it in Settings - but you've just cut the optional half loose.
The advertising ID is only half the story
Applies to: Home and Pro.
If you worked through the debloat section, you already switched off the four toggles on the General page. Here's what the most important one does. The advertising ID is a per-device identifier that lets apps stitch your activity together into a single profile for targeting ads.
Turning it off doesn't reduce how many ads you see; it just stops them being tied to a shared identity across apps. The other three toggles on that page kill locally relevant content, app-launch tracking, and Settings suggestions, none of which you'll miss. Microsoft has renamed this page to "Recommendations & offers," so look there if General has moved.
One thing that page doesn't touch is the personalization tied to your Microsoft account, which lives server-side. To clear that, sign in at privacy.microsoft.com and turn off ad personalization there too.
App permissions are a five-minute audit worth doing
Applies to: Home and Pro.
Scroll down the same Privacy & security page to the App permissions list that includes Camera, Microphone, Location, and the rest. Each one opens to show exactly which apps can use it, and toggling off the ones that have no business there takes five minutes.
Be honest about what each app needs. A photo editor wants the camera; a PDF reader asking for your microphone and location does not. Location, Camera, and Microphone are the three worth checking closely, since those are the ones you'd least like leaking.
Background permissions moved out of this list a while back. To stop an app running when you're not using it, go to Settings > Apps > Installed apps, open its advanced options, and set "Let this app run in the background" to Never.
Activity History is mostly gone, so clear what it left behind
Applies to: Home and Pro; mainly upgraded installs.
Activity History used to log the apps you opened and the files you touched, then sync it to Microsoft. Microsoft retired that cloud sync back in early 2024, and on many current builds the Activity History settings page has been pulled from Privacy & security entirely. For most people, there's simply nothing left to switch off.
The catch is on PCs that upgraded from an older build, where cached activity can still sit in a local database. You've already dealt with most of it by clicking "Delete diagnostic data" earlier, and you can clear anything that reached the cloud by signing in at privacy.microsoft.com and wiping your activity there.
If you're on Pro and want it locked off for good, Group Policy still has an "Enable Activity Feed" setting under System that you can disable.
Edge keeps its own privacy stack
Applies to: Home and Pro.
Edge runs its own privacy settings, separate from Windows, and they're worth a pass even if it's just your backup browser. Paste edge://settings/privacy into the address bar to find them.
Set Tracking prevention to Strict, the highest of the three levels, which blocks the most trackers across sites. Below that, switch off the personalization sliders that let Edge use your browsing to tailor ads and recommendations. There's no real downside for most people; pages load the same, with less following you around.
While you're in Edge's settings, change the default search engine from Bing to whatever you use, under the address bar and search settings. That one change removes a lot of Bing from your day.
You've now reset what Windows knows about you to something much closer to need-to-know, and nothing you turned off will change how the PC behaves day to day. That's the useful part because the tradeoff people expect from privacy settings mostly isn't there. The AI features are next, from the Copilot app to the Copilot+ tools that only some PCs even have.
Managing Windows 11's AI features
Windows 11's AI splits into two camps, and it helps to know which applies to you before you start toggling. The Copilot app runs on most supported Windows 11 PCs and is also available on many Windows 10 systems, depending on edition and region. The heavier features, like Recall, only exist on Copilot+ PCs, a specific class of hardware. This section covers both, so you're never hunting for a setting your PC doesn't have.
The Copilot app is just an app now, so treat it like one
Applies to: Home and Pro, all PCs.
The good news is that Copilot stopped being a system component and became a normal app. The old docked sidebar that wedged itself into the desktop is gone, replaced by a standalone Copilot app you can move, ignore, or remove like any other. That alone defuses most of the worry people had about it.
If you already uninstalled it back in the debloat section, you're done here. If you kept it, it reaches you three ways: the taskbar icon, a dedicated Copilot key if your keyboard has one, and the
The setting worth checking is the wake word. On recent builds, Copilot can listen for "Hey, Copilot" and start a voice chat hands-free, which means a microphone waiting on a trigger phrase. It's opt-in and off by default, but if the idea bothers you, open Copilot's settings and confirm "Listen for 'Hey, Copilot' to start a conversation" is switched off.
Beyond that, there's not much to manage. It's an app; leave it if you find it useful, or uninstall it from Settings > Apps > Installed apps if you don't. You can also remap the Copilot key to open something else, which the debloat section covered.
Just know that removing the app doesn't remove every trace of AI from Windows. Edge carries its own Copilot, and apps like Notepad and Paint have picked up their own writing and image tools. Pulling the app is the cleanest single step - but the AI push is broader than one icon.
Recall: first check whether you even have it
Applies to: Copilot+ PCs only.
Recall is the feature that generated the most noise, and the first thing to establish is whether it's even on your PC. Recall runs only on Copilot+ PCs, the newer hardware with a dedicated neural processor, so most people don't have it at all.
To check, open Settings > System > About and look for a "Copilot+ PC" badge under the device specifications. If it's not there, Recall isn't on your PC, the Recall & snapshots page won't appear in Settings, and you can skip the rest of this section with nothing to fix.
If you do have a Copilot+ PC, Recall still doesn't switch itself on. It's opt-in and off by default, and it only works once Windows Hello and drive encryption are set up. Even so, it's worth confirming, since it's the kind of thing that's easy to enable during setup without registering what it does.
Head to Settings > Privacy & security > Recall & snapshots, where "Save snapshots" is the master switch. Confirm it reads Off unless you've decided you want Recall running. If it's on and you didn't mean to, flip it off, and use the reset option under Advanced settings to clear anything already captured.
Recall itself has improved: snapshots are processed on the device, encrypted, and never sent to Microsoft, and you can filter out sensitive apps and sites. If you want the searchable-timeline idea, it's far safer than it launched. But the default position for most people is simple: confirm it's off unless you've decided you want it.
The other Copilot+ features, and why you probably won't see them
Applies to: Copilot+ PCs only.
Recall is just the headline. Copilot+ PCs also get features like Click to Do, Windows Studio Effects for the webcam, Live Captions with translation, improved Windows search, and on-device boosts for tools in Photos and Paint such as Super Resolution, among others. These richer, on-device experiences rely on the neural processor that standard PCs don't have.
So if you're on a normal PC and none of these appear, nothing is broken. The settings simply aren't there because the hardware to run the full Copilot+ experience isn't either; you won't see Recall or Click to Do appear just from a regular Windows update alone.
What you do have is the Copilot app itself, which runs its cloud-based features on any PC. For everything else, the simple answer is that these are hardware features first and software features second, and a standard PC just sits them out. Next, we move to the everyday interface, where every tweak applies to every PC again.
Start menu, taskbar, and File Explorer
This is the section you'll notice every single day. Everything above was about what Windows does in the background; this is about where things sit on your screen and how quickly you can reach them. None of it is risky, and all of it is a matter of taste.
Move the taskbar left and trim what sits next to Start
Applies to: Home and Pro.
The centered taskbar is the change people noticed first in Windows 11, and after years of a left-aligned Start button, plenty of us want it back where it was. It's one toggle. Right-click any empty part of the taskbar, choose Taskbar settings, and open Taskbar behaviors at the bottom. Set Taskbar alignment to Left, and the Start button snaps back to the corner where your muscle memory expects it.
While you're on that page, scroll back up to Taskbar items and clear out what you don't use. Search can drop to a plain icon or disappear, and Task view, Widgets, and Copilot can all switch off, though you may have removed the last two back in the debloat section.
What you're left with is Start, your pinned apps, and the system tray, which is all most of us ever touch. Take a moment to open the system tray corner overflow too, since a clean taskbar undermined by fifteen hidden icons isn't much of a win.
One habit worth building here is to pin the apps you open daily and unpin everything else. A taskbar with six deliberate icons beats one with twenty you scan past.
Start menu layouts changed, so find out which one you have
Applies to: Home and Pro; the layout depends on your build.
Microsoft has been reshaping the Start menu, and the rollout has been staged, so two different versions are out there. Open yours before following any advice, including mine.
Recent builds put Pinned, Recommended, and All apps live on one continuous scrollable surface, with the app list right there rather than behind a separate button. You can switch that list between Category, Grid, and List views, and Windows remembers your choice. Category groups apps automatically, which either suits you or doesn't.
The bigger win is under Settings > Personalization > Start, where the page is now grouped into Recommended, All, and Other. You can switch the Recommended section off completely, which clears the recent files and app suggestions from the bottom of Start.
If your PC still has the older design, you'll see a layout selector at the top of that same page with Default, More pins, and More recommendations. Choose More pins, then turn off the "Show recently added apps," "Show most used apps," and "Show recommendations" toggles below it. The effect is the same - pins, and nothing else.
Either way, finish by organizing what's left. Drag one pinned icon on top of another to build a folder, name it, and you can collapse a dozen apps into a couple of tidy groups.
File Explorer should open to This PC, not Home
Applies to: Home and Pro.
Explorer opens to Home by default, a page of recent files and pinned folders that's useful to some people and noise to everyone else. If you'd rather land on your drives, it's a single dropdown.
Open File Explorer, click the three-dot menu, and choose Options. On the General tab, set "Open File Explorer to" to This PC, and every new window starts at your drives instead.
Stay on that tab for a moment, because the privacy checkboxes below it matter too. Clearing the recent files and frequent folders boxes stops Explorer from building a history of what you've opened, and the newer "Show Recommended section" checkbox switches off the suggestions row on Home, which Microsoft only recently opened up to everyone.
Then move to the View tab, where two settings are worth changing. Tick "File name extensions" so you can see whether something is a .pdf or a .pdf.exe, which is a small but real security habit. Check "Hidden items" too if you edit config files, though leave it off if you'd rather not see the clutter.
The File Explorer features that arrived while nobody was looking
Applies to: Home and Pro; some features roll out gradually.
Explorer has picked up more in the last two years than in the decade before, and some of it replaces software you may still have installed.
Tabs are the big one. Press
Archive support has grown too. Explorer now reads RAR and 7z alongside ZIP, plus a handful of developer formats, so right-clicking an archive and choosing Extract all covers most of what people install WinRAR or 7-Zip for. On recent builds, Explorer can also create 7z and TAR archives from the context menu, though ZIP is still the default; for simple downloads and sharing, the built-in tools are usually enough.
Some PCs also get extra image and text actions in the right-click menu, such as blurring a background or extracting text from an image. These depend on the AI features available on your hardware, so if you don't see them yet, nothing's wrong - they just haven't reached your PC.
Anyway, these are the changes visitors notice on your PC and the ones you'd redo first on a new one. Power and battery are next, including the setting I switch off on nearly every PC.
Power, battery, and thermals
Power settings decide how your PC behaves when you're not looking, including how it sleeps, how it wakes, and how hard it works when plugged in. This is a shorter section, but it includes one setting worth turning off on most desktops.
Energy Saver replaced Battery Saver, and it runs on desktops too
Applies to: Laptops and desktops; the auto-trigger threshold is laptops only.
Battery Saver is gone. Since the 24H2 release, Energy Saver has taken its place, and the difference is more than a rename. Where the old feature only kicked in on a laptop running low, Energy Saver can run on any PC at any charge level, including a desktop that has no battery at all. You can find it under Settings > System > Power & battery > Energy saver. On a laptop, you can choose whether it stays on while plugged in. On a desktop, you get a straightforward always-on toggle instead.
It's worth knowing what the mode does before you leave it on permanently. Windows dims your display by around 30 percent, blocks background apps from running, pauses non-critical update downloads, switches off transparency effects, and locks the power mode dropdown while it's active. On a laptop, that's a fair trade for extra hours; however, on a desktop, the dimming alone annoys most people.
If the auto-trigger percentage isn't on that page, you're not imagining it. Some 25H2 builds shipped without it before Microsoft restored the setting in a later update, so either update Windows or press control powercfg.cpl to set the threshold through the older Power Options.
Also, open Battery usage to see which apps drain the most. Sorting by the last seven days usually reveals one or two culprits worth blocking in the background, which does more for battery life than any setting here.
Fast Startup is a hibernation trick that breaks more than it fixes
Applies to: Desktops, dual-boot setups, and PCs with driver quirks.
Fast Startup is the one power setting I switch off on nearly every PC. Despite the name, it doesn't fully shut your PC down. It signs you out, then saves the kernel and driver state into the hibernation file, so the next boot reloads that snapshot instead of starting fresh.
That saves a few seconds on an old mechanical drive. On an NVMe SSD, you're trading a handful of seconds for a shutdown that isn't really a shutdown, and that half-state causes a specific set of problems.
Dual-boot setups suffer the most, since Windows leaves its partition in a hibernated state and Linux will refuse to mount it properly, or mount it read-only, to avoid corrupting your files. Beyond that, it can make the UEFI firmware harder to reach at boot, leave driver issues in place that a real shutdown would clear, and interfere with some updates.
To turn it off, open Control Panel > Hardware and Sound > Power Options, click "Choose what the power buttons do," then click "Change settings that are currently unavailable" to unlock the greyed-out boxes. Uncheck "Turn on fast startup (recommended)" and save.
If the option isn't listed at all, hibernation is switched off on your PC, which means Fast Startup is already inactive and there's nothing to do. Note that a restart always performs a full cold boot anyway, which is why "have you restarted it?" fixes things that shutting down doesn't.
Ultimate Performance is a desktop tool, not a laptop one
Applies to: Desktops.
The performance section covered surfacing the hidden Ultimate Performance plan with a single powercfg command, so here's the part that matters for this section - where it belongs.
That plan keeps components from idling down between bursts of work, which shaves off tiny latencies. On a desktop doing sustained heavy work, like rendering, compiling, or long exports, that's a reasonable trade of watts for consistency. However, on a laptop it's the wrong tool. You'll get more heat, louder fans, and shorter battery life for gains you're unlikely to notice, and Windows won't warn you when a PC is running hot. On many newer laptops with modern standby, the plan won't appear at all.
For everything else, Balanced is the right default, whatever the tweaking forums say. Windows scales the clock speeds well on modern hardware, and the difference between Balanced and High Performance in daily use is mostly a warmer room.
That's power settings handled. The next section moves to networking, from metered connections to the DNS settings worth changing.
Networking
Networking is the section people skip, since the connection usually works. But Windows makes a few decisions about your bandwidth that you'd probably rather make yourself, including sharing update files with other PCs. None of what follows requires touching your router.
Metered connection is a one-toggle bandwidth firewall
Applies to: Home and Pro; mainly laptops and hotspots.
If you only change one networking setting, make it this one. Marking a connection as metered tells Windows the network has a data cap, and Windows responds by pulling back on everything it would otherwise do in the background.
You can flip it under Settings > Network & internet > Wi-Fi (or Ethernet), click the network you're connected to, and switch on Metered connection.
Once it's on, Windows holds back non-critical update downloads, pauses Microsoft Store app updates, stops Delivery Optimization sharing update files with PCs across the internet, and prompts apps like OneDrive to scale back syncing. Some critical updates can still be downloaded, but Windows limits automatic update activity on a metered connection.
This is most useful on a phone hotspot, hotel Wi-Fi, or any capped plan, and cellular connections are treated as metered by default. It's also handy on a home connection during a big download or an evening of gaming, then switched off afterward. Don't leave it on forever and then wonder why your PC is behind on updates. It's a tool for constrained connections, not a permanent setting.
Custom DNS lives in Settings now, and it can be encrypted
Applies to: Home and Pro, all PCs.
Your ISP's DNS resolves every address you visit, which makes it both a speed factor and a record of your browsing. Switching to a public resolver is a couple of minutes of work, and Windows 11 handles it in Settings.
Go to Settings > Network & internet, click your Wi-Fi or Ethernet connection, open Hardware properties, and click Edit next to DNS server assignment. Switch the dropdown from Automatic (DHCP) to Manual, then turn on IPv4. Enter your preferred DNS address (such as 1.1.1.1) and alternate (such as 1.0.0.1) in the two boxes. The important part comes next. Under each one, set the DNS over HTTPS dropdown to On (automatic template). That encrypts your DNS queries.
That dropdown only appears when Windows recognizes the address as a provider it has a template for, which covers Cloudflare, Google, and Quad9 out of the box. If you enter something else, you may need to supply the template manually, so it's easiest to stick with a supported provider unless you have a reason not to.
Once you save, the connection page shows your DNS servers as Encrypted, which is how you confirm it worked. If a site misbehaves afterward, switch the assignment back to Automatic, and you're where you started.
Delivery Optimization can share updates with other PCs
Applies to: Home and Pro.
Delivery Optimization is Microsoft's peer-to-peer update system. Rather than pulling every update from Microsoft, your PC can grab pieces from other PCs and hand pieces back out. It saves Microsoft bandwidth and can speed up updates on a multi-PC network, but the default scope catches people out.
Open Settings > Windows Update > Advanced options > Delivery Optimization to see it. On a current Windows 11 install, peering is limited to your local network by default, so your PC is not uploading update files to strangers unless someone changed the setting. What's worth checking is whether it has been switched to devices on the internet, which widens the pool well beyond your own home.
Pick based on your setup. With one PC, switch it off entirely and Windows downloads straight from Microsoft as before. With several PCs at home, choose "Devices on my local network," which keeps the useful part, since one PC downloads the update and the rest pull it over your LAN, without exposing you to internet peers.
Under Advanced options, you'll find bandwidth caps for downloads and uploads, plus a monthly upload ceiling. Just know those limits apply to automatic downloads, not to an update you kick off yourself. Setting those caps is how I stopped Windows updates choking my downloads, so this is the short version.
The DNS providers worth knowing in 2026
Applies to: All PCs.
Once you know where the setting lives, the question is which resolver to use. These are the four worth considering, and none of them is a wrong answer.
Cloudflare's 1.1.1.1 is the speed pick, consistently among the fastest globally, with a privacy policy promising it doesn't sell your data or log your IP to disk. Quad9's 9.9.9.9 leans on security instead, blocking domains known for malware and phishing at the DNS level, which is a real safety net on a family PC.
NextDNS sits differently, as you make an account and configure your own filtering, blocklists, and logging, with a generous free tier. It's the choice if you want control rather than a set-and-forget address. AdGuard DNS aims squarely at blocking ads and trackers across every device, before your browser even sees them.
Pick the one whose priority matches yours. You can change it in thirty seconds if you don't get on with it, and testing two over a week is the only reliable way to know which feels faster on your connection.
Your bandwidth is under control, your DNS is encrypted and chosen deliberately, and your update sharing is scoped the way you want it. If you undo everything else here, keep the DNS change. Windows Update and drivers come next, where the goal is staying in control without breaking the update pipeline.
Windows Update and driver management
Staying in control of updates is mostly about restraint. You want to choose when they land and undo the rare one that breaks something, without dismantling the update pipeline itself. Everything here is a supported control, not a hack that stops working next patch.
Pause updates on your schedule, and set active hours
Applies to: Home and Pro, all PCs.
Windows Update has become more flexible about timing, which is almost all most of us want. Head to Settings > Windows Update and you'll find Pause updates near the top.
The control changed with July's update. Instead of picking from fixed one-to-five-week options, you now choose an end date from a calendar. A single pause still can't reach more than 35 days ahead, but you can return mid-pause and pick a new date without installing what's queued.
Use that power carefully. Pausing is the right call when you're mid-project, traveling, or waiting out a patch that's causing trouble elsewhere. Leaving a PC unpatched for months is a different thing entirely, since you're skipping fixes for flaws that get exploited in the wild. Pressing Resume kicks off a check immediately and installs what was waiting.
Active hours are the other half. Under Advanced options, set the window when you normally use the PC, and Windows won't restart for an update inside it. Just be clear about what this does. It governs restart timing only. It doesn't slow downloads or reduce bandwidth, which is what Delivery Optimization and metered connections are for. Microsoft is also moving toward bundling updates that require a restart into a single monthly restart, although critical and out-of-band updates can still require one sooner.
Optional and driver updates are opt-in for a reason
Applies to: Home and Pro.
Under Settings > Windows Update > Advanced options sits Optional updates, which holds two different things. First, driver updates Microsoft has for your hardware; second, preview builds of next month's non-security update. Skip the preview updates. There's no benefit to installing next month's cumulative update early on a PC you rely on, and you take on the bugs everyone else gets to avoid.
Driver updates deserve more thought. If a device is misbehaving, a driver waiting here is worth trying. If everything works, leave them alone. A working driver you replace for no reason is one of the more common ways people create a problem that didn't exist that morning.
I make an exception for GPU drivers, which I get from NVIDIA or AMD directly rather than Windows Update, since their releases are newer and tied to actual game fixes. For everything else, the rule holds - install a driver to solve a problem, not to have the highest number.
Roll back a driver that caused a problem
Applies to: Home and Pro.
When something breaks right after a driver update, Windows keeps the previous version so you can step back to it. This is the fastest fix for a device that worked yesterday and doesn't today.
Right-click Start and open Device Manager, find the device, and open its Properties. On the Driver tab, click Roll Back Driver, give a reason when prompted, and restart when it finishes.
Sometimes that button is greyed out, which means Windows has no previous package to return to. That happens when the driver was installed by a vendor's own installer, when the update was a clean install rather than a replacement, or when disk cleanup cleared out the old files.
In that case, go to the manufacturer's support page, download the older version you know worked, and install it over the current one. It's worth keeping a copy of a known-good GPU or chipset driver on hand for exactly this reason.
Undo a bad update, and know what your PC can roll back
Applies to: Home and Pro.
Occasionally a Windows update itself is the problem. Start at Settings > Windows Update > Update history, where every recent update is listed with its KB number. Match the date against when trouble started, then scroll to the bottom and click Uninstall updates.
Pick the offending update and remove it, then pause updates for a couple of weeks so it doesn't reinstall while Microsoft works on a fix.
There's now a stronger option too. A 2026 Windows update also introduced Point-in-time Restore, which takes a full snapshot of your system, apps, settings, and personal files roughly once a day, keeping each for 72 hours. Windows switches it on automatically when your OS drive is 200GB or larger; below that, it stays off, though you can enable it yourself. Either way, you'll find it under Settings > System > Recovery.
Understand two things before you lean on it. A restore rolls back system state and installed apps to the snapshot, which can affect changes you've made since. It's triggered from the recovery environment, not from inside Windows, so you'll need your encryption recovery key ready if device encryption or BitLocker is on.
It's a fast undo for a bad week, not a backup. The image backups from the second section still cover everything this doesn't.
Third-party driver updater tools cause the problems they claim to fix
Applies to: All PCs.
There's a whole category of software promising to scan your PC and update every driver at once, and it's worth being blunt and not installing any of it. The pattern is consistent. They flag dozens of drivers as dangerously out of date, install generic packages that don't match your specific hardware, bundle extras you didn't ask for, then nag for a subscription to fix what they've broken. I'd say plenty are outright malware.
Meanwhile, the free and correct sources are already on your PC. Windows Update handles most hardware, the manufacturer's support page covers your specific model, and NVIDIA, AMD, and Intel publish their own GPU and chipset drivers directly.
Registry tweaks worth knowing
The registry has a worse reputation than it deserves. The edits here are small, targeted, and reversible, and each one fixes something Windows gives you no other way to change.
However, one warning covers this whole section. Before any edit below, export the branch you're about to touch, exactly as the backups section described. Right-click the key, choose Export, set the range to "Selected branch," and save a dated .reg file. A restore point on top of that takes another minute and covers you completely.
Shorter menu delays make Windows feel faster than any performance tweak
Applies to: Home and Pro.
This is my favorite edit in the whole guide, because the effect is immediate and you feel it every day. Windows waits a set time before opening submenus, and by default that wait is 400 milliseconds. Once you cut it, going back feels sluggish.
Open Registry Editor with regedit, then go to HKEY_CURRENT_USER\Control Panel\Desktop. Look for MenuShowDelay in the right pane.
Here's the gotcha that trips people up: MenuShowDelay is a string value, not a DWORD. If it isn't there, create it with New > String Value, not New > DWORD. Getting that wrong is why the tweak fails for so many people.
Set it somewhere between 50 and 100. Zero works, though menus can then flicker open when your cursor passes over them, so I land on 50 and leave it. Sign out and back in to apply it. If you decide you prefer the old pacing, set the value back to 400 and you're exactly where you started.
Stop Windows adding " - Shortcut" to everything
Applies to: Home and Pro; results vary by build.
Every shortcut you create gets " - Shortcut" tacked onto its name, and you've probably been deleting that by hand for years. There's a registry value that governs it, though I'll be honest about how well it holds up.
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer and find the binary value named link. Double-click it and set all the bytes to zeros, then restart Explorer from Task Manager or reboot.
On plenty of PCs, that's the end of it, and new shortcuts arrive with clean names. On some recent builds it doesn't take, and reports are mixed about which behavior you'll get. If yours falls into the second group, the value is harmless to leave at zeros, and restoring the original bytes puts things back.
That mixed record is worth mentioning because a lot of guides present this one as a guaranteed fix. It's a small annoyance either way, and it's the only tweak here I wouldn't promise will work on your PC.
Verbose boot messages are useful when something hangs
Applies to: Home and Pro.
If a shutdown or boot regularly stalls, replacing the spinning dots with running commentary tells you which service is responsible. It's a diagnostic tool rather than an everyday tweak, and it's a VerboseStatus DWORD set to 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
I've written up five registry tweaks I apply on every new PC separately, and this one is covered there in full alongside the shutdown timeout values that pair with it, so I won't repeat the walkthrough here.
However, if Fast Startup is still enabled, a normal shutdown won't show these messages, since it isn't a true shutdown. Switching Fast Startup off, as the power section suggested, makes this tweak work as intended.
End Task on the taskbar stopped being a registry hack
Applies to: Home and Pro.
This one exists to save you from following an outdated guide. For a while, adding End Task to the taskbar's right-click menu required a registry edit, and plenty of articles still tell you to make it.
You don't need to. It's a normal setting now: at Settings > System > Advanced, a toggle called End Task adds the option to every app's taskbar right-click menu. Turn it on, and you can kill a frozen app straight from the taskbar, without opening Task Manager. It's the fastest way to deal with something that's stopped responding.
The wider lesson matters more than the setting. Registry tweaks age badly, and Microsoft promotes some into Settings while breaking others entirely. Before applying an edit from an old guide, check whether a supported toggle now does the same job.
Four edits, one backup warning, and nothing that risks the system. That restraint is deliberate, because the registry is where tweaking guides usually go wrong. Group Policy, Sandbox, WSL, and the repair commands are next.
Advanced tweaks and maintenance habits
Everything so far has been settings you change once. This section is a little different. It's the tools and habits worth carrying with you, the ones that turn a working PC into one you can diagnose and repair yourself.
Group Policy is the strongest argument for running Pro
Applies to: Pro only.
Group Policy is the single feature that most justifies the Pro upgrade. It's the same interface administrators use to manage hundreds of PCs, and it sets things at a level that survives updates, which is why a policy usually sticks where a registry edit gets reverted.
Open it with gpedit.msc. The layout splits into Computer Configuration, which applies to every user, and User Configuration, which applies to yours. Most of what you'll want sits under Administrative Templates in either branch.
A handful of nodes matter more than the rest. Windows Components > Search holds the Bing and web results policies from the debloat section. Windows Components > Widgets has the "Allow widgets" setting that keeps Widgets gone after a feature update. There's a OneDrive node for blocking sync, a Microsoft Edge branch that goes deeper than Edge's own settings, and System > OS Policies where features like Activity Feed live.
Each policy opens with a proper explanation of what it does, which makes this a more forgiving place to experiment than the registry. Set one to Enabled or Disabled, and it takes effect after a reboot or a gpupdate /force.
If you're on Home, none of this is available, and the registry routes throughout this guide are your equivalent. That's the practical difference between the editions, and whether it's worth the upgrade depends on how much of this you'd use.
Windows Sandbox is the safer place to open something you don't trust
Applies to: Pro and Enterprise; needs virtualization enabled in firmware.
Sandbox gives you a clean, throwaway copy of Windows in a window. Open something questionable inside it, and when you close the window, everything you did is deleted. Nothing touches your real PC.
It's Pro and Enterprise only, and your PC needs virtualization enabled in the firmware. On current builds, you'll find it under Settings > System > Advanced, on the Virtual Workspaces page, alongside the other virtualization features. The older route through "Turn Windows features on or off" still works if you prefer it.
Once it's installed and you've rebooted, launch Windows Sandbox from Start, and you get a fresh desktop in seconds. I use it for installers I'm unsure about, dubious attachments, and testing something before it goes near a real profile. Close the window, and the whole environment is gone.
However, two limits apply. Since 24H2, the built-in Store apps like Calculator, Notepad, and Photos aren't available inside the Sandbox, so it's more bare-bones than a regular install. And because everything is discarded on close, anything you want to keep has to come out before you shut it.
WSL is one command away if you ever need a Linux shell
Applies to: Home and Pro.
Windows Subsystem for Linux runs a real Linux environment alongside Windows, without dual-booting or setting up a virtual machine. Unlike the previous two, this one works on Home as well as Pro.
Open Terminal as administrator and run wsl --install. That single command pulls in the platform components, enables what it needs, and installs Ubuntu as the default distribution. Reboot when it asks, set a username and password, and you have a Linux shell.
If you want something other than Ubuntu, wsl --list --online shows what's available and wsl --install -d followed by the name installs it. You can run several distributions side by side and switch between them freely. Is it worth installing if you're not a developer? It's useful more often than you'd expect, since a Linux shell is the quickest way to run a tool that never got a Windows build, work through a tutorial written for Linux, or recover files when Windows itself won't cooperate.
Two repair commands worth memorizing, in the right order
Applies to: Home and Pro.
When Windows starts misbehaving in ways no setting explains, two commands fix most of it. The order matters, and getting it backward is why people report that these "didn't work."
Run DISM /Online /Cleanup-Image /RestoreHealth first in an elevated Terminal. It repairs the component store, which is the source Windows draws on to fix itself. Then run sfc /scannow, which checks your protected system files and replaces damaged ones using that store. Running SFC first means it may repair from an already-broken source.
For disk-level problems, like files that won't open or drives that behave strangely, chkdsk /f /r checks the file system and marks bad sectors. It usually needs a reboot and can take a while on a large drive, so start it when you don't need the PC. DISM, SFC, and chkdsk are the three I reach for most, though there are a handful of other command-line tools that fix Windows problems faster than clicking through Settings if you want the wider set.
Build the habit of checking reliability and drive health
Applies to: Home and Pro.
The last piece is maintenance, and it's mostly about looking at two things occasionally rather than waiting for a failure.
Reliability Monitor is the most underused tool in Windows. It plots a timeline of crashes, failed updates, and app errors, so instead of guessing when trouble started, you can see the day it began and what landed alongside it. Reading that timeline is how I stopped guessing why my PC crashes and started narrowing problems down to a date.
Drive health is the other half, and ignoring it is what costs you data. Your SSD tracks its own wear and error counts, and it will warn you well before it fails, if you look. CrystalDiskInfo reads that out in plain language, or you can pipe Get-PhysicalDisk | Get-StorageReliabilityCounter in PowerShell (Administrator) if you'd rather not install anything.
Those numbers are worth learning to read, since an SSD tells you it's about to die long before it actually does. Checking both once a month takes five minutes and is the difference between replacing a drive on your schedule and losing what's on it.
Group Policy, Sandbox, WSL, and the repair commands are the tools, whereas Reliability Monitor and drive health are the habits. The habits matter more, since they catch problems while they're still cheap to fix. The final section covers the other side of tweaking - the changes that look tempting but are best left alone.
What not to tweak, and where to go next
A reference guide should tell you where the cliffs are, not just where the views are. These are the changes that look tempting, get recommended constantly, and cause more problems than they solve.
Don't run debloat scripts you can't read
Applies to: All PCs.
Search for Windows debloating, and you'll find dozens of scripts promising to strip the operating system down in one click. Some are written by people who know exactly what they're doing. You're still running thousands of lines as administrator based on those words.
The specific risk isn't that a script is malicious, though some are. It's that it does too much at once, with no record of what changed. When something breaks three weeks later, you have no way to connect the two, and no way back short of reinstalling.
There's a subtler problem too. Many of these scripts check your Windows version before deciding what to run, and when Microsoft bumps the version, that logic takes the wrong branch. The script reports success while skipping steps or applying settings meant for an older build.
Everything a sensible debloater does is in this guide, done one step at a time, where you can see the effect and undo it. That's slower, and it's the entire point. If you do decide to run one, read it first, run it in the Sandbox if you have Pro, and back up before you start.
Don't disable Microsoft Defender
Applies to: All PCs.
Turning Defender off to reclaim performance is advice that refuses to die, and it's worth being clear: don't. In AV-TEST's Windows 11 results from early this year, Defender scored full marks for protection, performance, and usability. You'd be switching off a top-tier antivirus to chase a difference you won't measure.
Windows makes this hard on purpose now. Tamper Protection blocks changes to Defender's settings from the registry, Group Policy, and PowerShell alike, so the old guides telling you to set a policy or a DWORD don't work on a current build. Also, close anything that tells you to switch Tamper Protection off first.
The one legitimate case is installing a third-party antivirus, and that handles itself. Windows usually detects the new antivirus and automatically moves Defender into passive mode, with no manual step needed.
If a program insists you turn off your antivirus to install it, that's the most useful piece of information you'll get all day. Believe it, and don't install the program.
Don't disable Windows Update; pause it instead
Applies to: All PCs.
There's a difference between controlling updates and breaking the mechanism that delivers them. The updates section covered supported controls such as pausing on a schedule, setting active hours, and uninstalling a specific update that caused trouble. All of those leave the pipeline intact.
What people do instead is disable the Windows Update service, set a policy to block it, or install a tool that does both. It works for a while. Then a cumulative update fails to apply months later, the PC drifts far enough behind that catching up requires a feature update it can no longer install, and you're left with a system that can't repair itself.
Meanwhile, the flaws being patched are the ones attackers target first, precisely because so many PCs sit unpatched. Waiting a couple of weeks for other people to find the bugs in a new update is reasonable. Waiting a year is totally a different decision.
Don't unthinkingly turn off services
Applies to: All PCs.
Somewhere out there is a list titled something like "50 Windows services you can safely disable," and it has been copied across the web for a decade. The services on it look pointless if you don't know what they do, which is exactly the problem.
Windows services have dependencies that aren't obvious from their names. Switching off something that sounds like telemetry can break Windows Update, printing, audio, or your network stack, often not immediately, but the next time you reboot.
The other half of the argument is that the payoff isn't there. A modern PC with 16GB or more of RAM doesn't care about a handful of idle services, and Windows starts most of them on demand anyway. You'd be trading real stability for savings you can't feel.
If you want to know what's using resources, measure it rather than guessing. Windows tells you when it's throttling your apps in the background, and Task Manager and Resource Monitor between them will name the process. Find the culprit, then deal with that one thing.
Where this guide goes from here
That's the full pass. Backups first, then bloat, performance, security, privacy, AI, the interface, power, networking, updates, the registry, and the advanced tools, with the worst tweaking traps called out at the end.
You don't need all of it. The parts I'd apply to any PC are backups, startup apps, device encryption with the recovery key saved somewhere safe, and Fast Startup switched off. Everything else is preference.
A few areas sit just outside this guide and are worth reading next. Heat is what people miss most, and it rarely announces itself until a PC is already throttling. Hardware upgrades, monitor calibration, and network gear are all worth their own reading once the software side is settled.
Every setting here was checked against Windows 11 version 25H2, the 26200 build series. Microsoft keeps moving things, renaming pages, and retiring features, so I revisit this guide every six months and after each feature update. If something doesn't match what's on your screen, your build has probably moved ahead of this revision. Come back when you set up your next PC, and the paths should still be right.
