Basic setup/security for laptop

[Saracen999]

I'm not even sure where I'd get the latest ISO, but I'm not sure I want to get invopved in re-installing. This is supposed to be a quick, basic setup. No battle plan survives the first shot, eh?

Presumably, between each update / reboot phase, I can power off and wait. i.e. the wife needs the net connection tomorrow, without an update clogging it up?

[ik9000]

saracen if you just want latest ISO you can get it direct from MS site, if you want a specific older ISO you have a few more hoops but I can PM you details.

https://www.microsoft.com/en-gb/soft...load/windows10

[Saracen999]

Please excuse idiot-grade questions but I'm more used to W7 install, service pack then security and critical patches.

So I can :-

1) Connect up, update and let it install build after build after build. Or

2) DL the latest ISO, shove it on (say) an external HD, stick the installer on a USB memory stick and reinstall direct to current build.

Here's the not-quite so idiot question ..... I am curently not that well, and really don't want to end up trying to unbork a borked laptop after a reinstall or build-update fail.

Which of the above is least likely to end uo borking things?

I would assume 2) ???

[CAT-THE-FIFTH]

Also try and update to a Spectre/Meltdown patched BIOS if there is an update available.

[Saracen999]

Also try and update to a Spectre/Meltdown patched BIOS if there is an update available.

Before or after re-install?

It's a Dell Inspirion lappy, IIRC.

[CAT-THE-FIFTH]

Before or after re-install?

It's a Dell Inspirion lappy, IIRC.

Probably before - the BIOS update actually updates the CPU microcode. Just make sure the battery is fully charged and its plugged into the mains. The Dell BIOS is usually custom,so here is some information on how to do it on their systems:
https://www.dell.com/support/article...pdates?lang=en
https://www.dell.com/support/article...system?lang=en

Edit!!

If you can do the update in the BIOS it is better than using a Windows utility.

[Saracen999]

I think I'll get them to do their own BIOS update. For what was supposed to be a basic W10 setup, this is getting rather complicated.

[spacein_vader]

For what was supposed to be a basic W10 setup, this is getting rather complicated.

Welcome (back) to Windows! Missed it?

[Saracen999]

Welcome (back) to Windows! Missed it?

Like a dose of Pox.

Chicken pox, of course.

[alki_pone]

When building machines on Win 10 I tend to do the following....

Setup with the defaults as mentioned above as the AV built in is as good as anything free with less overhead.
If you got a TPM (which you do on most newer devices) ensure Bitlocker is enabled. It should be by default but check and turn on if not.
Go to a website called Ninite which helps easy install of the applications you're going to want, 7-Zip, Notepads.
Don't install a browser other than the new edge. Its built on Chrome and will get its updates via Windows. Firefox (I love) but it's dying and its something else to have to update.
Patch it and ensure auto updates are enabled.

General rule is stay aware from any "free" cleaning or so called tools where Windows has it's own version. It lines you up for more risk and fill your device with bumf.

[xxdeanoxx]

You could go to advance boot options and "Reset this PC" it should set it to default settings as if it was brand new I believe. You can choose to keep personal files or not.
After reset connect to internet and get all the updates.
Install free AV, I would use AVG and Malwarebytes free for example.
Get other useful tools like others mentioned. Notepad++, CCleaner etc.

Should be fine from then on.