In this post I’m going to show how to quickly configure Windows Updates so that you only receive important security updates. We’ll cover Home and Pro/Enterprise users of both Windows 10 and Windows 11.
These are also the settings I use myself and recommend for most users.
These settings may also be helpful for IT admins.
Set Active Hours - Windows 10 By default Active Hours are configured to be automatic but personally I think it’s better to set them manually.
Windows 11 is very similar to Windows 10 is terms of technology and core services, however with the new UI and Start Menu refresh there are some new elements that you may want to remove.
Start Menu Layout Microsoft now expects the Start menu layout to be managed by an MDM service, if you want to do it without that then the easiest method is to copy the start.bin files.
Fully disabling Network Discovery in Windows 10 using Group Policy To properly disable Network Discovery in Windows 10 in a way that the user cannot easily re-enable we must create some firewall rules and prevent some services from running on start-up. We can do both things using Group Policy.
Firewall Rules Create a new Group Policy or use an existing one that takes effect on computer objects.
Go to Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security.