The security of your computer does not depend only on the use of a certain anti-virus software. Common sense is a part of every cyber security guide and we’ve already discussed the critical importance of extreme navigation on certain websites; take care of downloading and installing applications; opening unsolicited emails and attachments or any garbage that comes from social networks and/or instant messaging applications, another source for the distribution of digital “bugs” of all kinds.

Sure, Caution is the preferred barrier against malware that we have to practice more and more in the chaotic digital world we have had to live in. Another way to strengthen security, given that cybercriminals are always ahead and Windows remains the most used and most attacked platform, is to act directly on some of the operating system features that the “bad guys” use to distribute their malicious campaigns.

How to improve the security of your Windows computer

You already know that any type of software is susceptible to vulnerabilities that cybercriminals use for computer attacks, and for decades widely used software such as Java, Adobe Flash, Reader or Internet Explorer browsers have been attacked. This confirms that it is necessary update to the latest version all the software you use, applications and operating system.

Another good way to improve self-defense is disable these system components, services or tools which we know are used to spread malware, even if we don’t use them often. It’s like leaving your webcam open when you’re not using it. Why risk it? Disabling this group of services can reduce the risk of attacks, data breaches and other cyber threats. Of course, they are perfectly reversible when you really need them. We will review some of them and the management to be done which is similar in Windows 10 or Windows 11.

Remote surface

Remote Desktop is a classic tool that has been in Windows for many versions and has become so popular that it has allowed the arrival of third-party software such as AnyDesk and TeamViewer, and other related software from Microsoft itself, such as Quick Help, which debuted in Windows. 10 and allows you to receive or provide assistance in solving computer problems through a remote connection.

Its operation is known through the Remote Desktop Protocol (RDP) it enables connection between two Windows computers or between a PC and a mobile device. It allows you to access your Windows computer from another device, allowing you to restore files or work remotely. Leaving it on all the time, especially when you can’t physically monitor it, can be a security risk. If your credentials are compromised, Anyone had access to your device and your confidential data.

For this reason, if you do not use this feature regularly, we recommend leaving it disabled. To do this, open the General Settings tool by right-clicking on the Start button. Once inside, go to “System” on the left and select “Remote Desktop”. Turn off “Remote Desktop” and click “Confirm” when prompted.

File and printer sharing

This feature allows other users on the network to access shared files and printers on your device. It is useful, like the others, for home networks and secure offices. However, if you leave it enabled on public networks, you can issue your shares and poses a risk to privacy.

If you frequently connect to untrusted networks (such as public ones) and want to keep your data safe, you can leave this feature disabled. To do this, open Settings, go to Network & Internet > Advanced network settings > Advanced sharing settings, and turn off File and printer sharing under Public and private networks.

Clipboard history

When you copy text or images, they are saved in the clipboard history, even if you paste or copy another item. Although this allows easy access to previously copied data, you must clear the history when copying sensitive information. If you often process this type of more private data, consider turning this feature off permanently.

This way, if someone gains access to your computer, they won’t be able to recover the data stored in the clipboard. To disable clipboard history, go to Settings. Go to the “System” tab and select “Mailbox”. Turn off the switch next to Clipboard History. From now on, copied elements will no longer be saved. You also have the option to delete data from the clipboard.

Activity history

It’s a feature that allows you to track and save your actions on your PC, such as the apps you use, the files you open, and the websites you visit. It’s not necessary, but it can be useful if you want to go back to a past activity. Like many of the other features we look at, it also stores sensitive information about your activities that could represent privacy risk if accessed by unauthorized users or malware.

To minimize this risk, you can disable this feature, especially if you don’t use it often. To turn it off, go to Settings, select “Privacy & Security,” click “Activity History,” and turn off “Save my activity history on this device.” You can also click “Clear History” to delete all previously saved activity data.

Windows Script Hosting

Windows Script Hosting (WSH) is a script execution environment for Microsoft. They are similar to batch files but have better capacity, useful for administrators or advanced users to perform automation. The point is that attackers can use this to run malicious scriptswhich may compromise the security of your data and the entire operating system.

If you are not using script-based automation, you must disable this feature. To do this, you need to go to the registry and open the path HKEY_LOCAL_MACHINE > Software > Microsoft > Windows Script Host > Settings. Here, right-click and create a new DWORD (32-bit) value and name it Allowed if it doesn’t exist. Setting its value to “0” disables WSH and restarts the computer for the changes to take effect.

Network discovery

Windows has a feature that makes it easy to find devices on the same network and let them see their own, making it easier to share files between them. However, as with file and printer sharing, you leave this feature enabled when we are connected to an untrusted network, it can pose security risks. To prevent unauthorized access, we recommend disabling this feature.

To do this, go back to Settings, Network & Internet > Advanced network settings > Advanced sharing settings. Under Public and Private Networks, turn off the switch next to “Network Discovery.” This will prevent other devices from detecting yours, connecting and accessing your data and files.

Remote/fast help

Another interesting feature is that the “Family Computer Scientist” can provide assistance through remote assistance, which makes troubleshooting easier. But be very careful. Because these types of tools allow full (or partial) control over a third party’s PC, You should only use and allow people you trust completely.. Additionally, since it has been proven to be used by hackers as a method of unauthorized access, to minimize the risk of remote intrusion, disable this feature when not in use.

To do this, go to Settings > System > About and click on “Advanced system settings”. In the System Properties window, select the “Remote” tab and uncheck the “Allow remote assistance connections to this computer” box. Click “Apply” and then “OK”. You can check it again if needed.

Automatic network connections

When you connect to a public network, Windows saves it in its logs, and if it’s set to connect automatically, it will do so whenever you’re in range. While this feature is convenient, it can pose a security risk if the public network you previously trusted no longer exists. It is well known that public networks such as those in hotels are highly insecure and should not be used for anything other than occasional browsing.

That’s why we recommend disabling Windows from automatically reconnecting to old networks in the Settings app and opening “Network & Internet” in the left sidebar. Then go to Wi-Fi > Manage Known Networks for a list of networks your device has previously connected to. Select the suspicious connections you don’t want your computer to connect to automatically and uncheck “Connect automatically when in range”.