2.5: Microsoft Windows Basic Security Settings

Defender Antivirus

Built-in protection for Windows 10/11 managed through Windows Security; runs real-time with updates for latest definitions.

Real-Time Protection

Continuously monitors system; can be temporarily disabled for troubleshooting via Virus & Threat Protection settings.

Antivirus Updates

Requires latest signature definitions; typically updated automatically through Windows Security.

Windows Firewall

Built-in protection that should remain enabled; settings differ by network type (public/private).

Firewall Configuration

Options to block all incoming connections, modify notifications, and adjust app blocking.

Firewall Exceptions

Allow or block apps, features, or ports; includes predefined and custom rules.

Windows Authentication

Provides access via local, Microsoft, or domain accounts; domain accounts managed through Active Directory.

Account Types

Users (Admin, Guest, Standard) and Groups (e.g., Power Users, with limited extra privileges).

Login Options

Multiple methods including password, PIN, biometrics, and single sign-on; managed under Sign-In Options.

NTFS Permissions

Apply locally and over network connections; inherited by default unless moved to another folder.

Share Permissions

Apply only to network connections; most restrictive setting overrides.

Explicit vs Inherited Permissions

Explicit permissions take precedence; inherited propagate from parent objects.

Run as Administrator

Grants elevated privileges for tasks like installing software or editing system files.

User Account Control (UAC)

Limits software access and protects system by requiring confirmation for elevated tasks.

BitLocker

Encrypts entire volumes for full-drive protection; includes BitLocker To Go for USB drives.

EFS (Encrypting File System)

Encrypts individual files/folders on NTFS volumes; requires user credentials for access.