Plain-English explanations for all 19 Windows 11 security settings GatewayGuard checks. Click any setting to see what it does, why it matters, and how to check or change it yourself.
For these eight settings, GatewayGuard checks your current status and makes the recommended change with your approval. You don’t need to do anything manually.
Setting 1
Windows Update
Makes sure your PC downloads security patches automatically. Outdated Windows is the single most common way PCs get compromised.
✓ GatewayGuard handles thisSetting 2
Defender Real-Time Protection
Windows’s built-in antivirus. When it’s on, it catches threats as they happen instead of after the damage is done.
✓ GatewayGuard handles thisSetting 3
Tamper Protection
Stops malware from turning off your antivirus. If this is off and you didn’t turn it off, that’s a red flag worth investigating.
✓ GatewayGuard handles thisSetting 4
SmartScreen
Warns you before you open a file or visit a website that’s known to be dangerous. An extra safety net for accidental clicks.
✓ GatewayGuard handles thisSetting 5
Defender Periodic Scanning
Lets Windows Defender run a second opinion scan even if you have another antivirus installed. Catches things that slip through the gaps.
✓ GatewayGuard handles thisSetting 6
Enhanced Phishing Protection
Warns you when you type your Windows password into a website or unsecured document. Helps stop password theft before it happens.
✓ GatewayGuard handles thisSetting 7
Firewall & network protection
Blocks uninvited connections trying to reach your PC over the network. Should be on for all three network profiles.
✓ GatewayGuard handles thisSetting 8
BitLocker Data Encryption
Scrambles everything on your hard drive so it’s unreadable without your password. Protects your files if your laptop is ever lost or stolen.
✓ GatewayGuard handles thisThese settings require steps Windows won’t let a script handle automatically. GatewayGuard walks you through each one and directs you here for the step-by-step instructions.
Setting 9
Windows Hello
Sign into your PC with your face, fingerprint, or a PIN instead of typing a long password every time. More secure and more convenient.
✎ You set this upSetting 10
Remote Desktop
Lets someone control your PC over the internet. Most home users should have this turned off. Windows Pro only.
✎ You set this upSetting 16
Memory Integrity
Protects the core of Windows from attacks that try to sneak in through device drivers. Requires a reboot to take effect.
✎ You set this upSetting 17
Password Required on Wake
Makes your PC ask for your password when it wakes from sleep. Stops anyone from sitting down at your unlocked PC while you step away.
✎ You set this upThese settings are harmless to turn off. They’re convenience features, not security ones. GatewayGuard explains each and lets you decide. There’s no wrong answer.
Setting 11
Advertising ID
A unique number Windows assigns to your account so advertisers can track which ads you see. Turning it off has no effect on how Windows works.
▶ Your decisionSetting 12
Diagnostic Data
Information Windows sends to Microsoft about how you use your PC. You can set this to “Required only” instead of sending everything.
▶ Your decisionSetting 13
Edge Startup Boost
Keeps parts of the Edge browser running in the background so it opens faster. Turning it off frees up memory and stops Edge from running when you didn’t ask it to.
▶ Your decisionSetting 14
Windows Widgets
The news and weather panel on your taskbar. It sends usage data back to Microsoft. Turning it off removes the panel and stops the data sharing.
▶ Your decisionSetting 15
Edge Password Saving
Edge’s built-in offer to save and fill your passwords. Convenient, but most security experts recommend a dedicated password manager instead.
▶ Your decisionThese two settings are less well-known but worth addressing. GatewayGuard explains the trade-offs and asks before making any change.
Setting 18
Fast Startup
Makes Windows start up faster by saving part of its state to disk. The trade-off: your PC isn’t fully shut down when you close the lid, which can interfere with updates and encryption.
✓ GatewayGuard handles thisSetting 19
Wake on LAN
Lets your PC be turned on remotely over the network. Useful in offices, unnecessary at home. GatewayGuard checks whether it’s enabled and explains the risk.
✓ GatewayGuard handles thisA full list of every setting GatewayGuard checks. Click any name to go to its guide page.
| # | Setting | Category | How it’s handled |
|---|---|---|---|
| 1 | Windows Update | Security | ✓ Automatic |
| 2 | Defender Real-Time Protection | Security | ✓ Automatic |
| 3 | Tamper Protection | Security | ✓ Automatic |
| 4 | SmartScreen | Security | ✓ Automatic |
| 5 | Defender Periodic Scanning | Security | ✓ Automatic |
| 6 | Enhanced Phishing Protection | Security | ✓ Automatic |
| 7 | Firewall & network protection | Security | ✓ Automatic |
| 8 | BitLocker Data Encryption | Security | ✓ Automatic |
| 9 | Windows Hello | Manual setup | ✎ Manual |
| 10 | Remote Desktop | Manual setup | ✎ Manual |
| 11 | Advertising ID | Convenience | ▶ Your choice |
| 12 | Diagnostic Data | Convenience | ▶ Your choice |
| 13 | Edge Startup Boost | Convenience | ▶ Your choice |
| 14 | Windows Widgets | Convenience | ▶ Your choice |
| 15 | Edge Password Saving | Convenience | ▶ Your choice |
| 16 | Memory Integrity | Manual setup | ✎ Manual |
| 17 | Password Required on Wake | Manual setup | ✎ Manual |
| 18 | Fast Startup | System hardening | ✓ Automatic |
| 19 | Wake on LAN | System hardening | ✓ Automatic |
PCs we’ve run GatewayGuard on and confirmed it works correctly.
PC not on the tested list? Sign up for a free assisted session.
Plain-English how-to guides for everyday Windows 11 tasks.
Get the tool, see system requirements, and read the run instructions.